Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/VLWbnm4HFdzuXT54nAW-KLk6RNc.roa
File: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (raw, json)
Hash identifier: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=
Subject key identifier: 54:B5:9B:9E:6E:07:15:DC:EE:5D:3E:78:9C:05:BE:28:B9:3A:44:D7
Certificate issuer: /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial: 019424B2A9B27433F9475C82DF0317E216E4
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/VLWbnm4HFdzuXT54nAW-KLk6RNc.roa
Signing time: Thu 02 Jan 2025 01:47:56 +0000
ROA not before: Thu 02 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198876
IP address blocks: 91.240.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a9:b2:74:33:f9:47:5c:82:df:03:17:e2:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Validity
Not Before: Jan 2 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54b59b9e6e0715dcee5d3e789c05be28b93a44d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:f3:f8:02:d0:b0:1c:b9:67:77:99:1f:1f:
d9:80:64:ed:ed:72:d3:31:e9:28:72:6b:77:86:17:
68:ec:d3:c2:6c:41:39:0c:53:02:45:bc:90:95:85:
bb:f2:48:fe:82:a2:a8:97:4d:b7:dc:6f:76:f3:f6:
ba:49:d1:d4:3c:46:61:b8:9e:91:0d:fa:f1:04:9f:
bb:9f:69:0f:fe:0b:c8:6d:e7:48:a2:f3:ea:d9:29:
2e:d0:6f:74:d6:f8:0b:59:4e:fc:04:80:24:e2:28:
6b:9d:a2:7c:2f:6b:29:4a:6d:36:a1:ae:39:61:97:
22:17:8d:25:87:d3:d1:5b:37:30:17:0b:0e:06:49:
ac:20:c0:ca:e5:10:3e:c5:89:92:8d:e3:a5:e2:99:
b2:e4:48:03:0c:00:3b:ce:19:a2:0b:bb:3c:db:08:
a6:d1:32:3d:19:a8:d1:66:62:4e:05:86:a0:92:bb:
7a:44:98:b6:c6:b7:82:29:db:81:ed:5c:92:28:f6:
e9:1d:c0:a8:9d:16:6e:34:6c:31:46:3e:c5:1e:1d:
63:fa:a4:45:04:7b:82:e6:9e:9e:19:b8:05:22:42:
aa:5f:c0:27:0e:64:a0:ba:3f:d9:d2:34:fc:69:9f:
00:e2:6e:50:a4:bb:22:91:07:9e:a1:db:c2:5d:f1:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:9B:9E:6E:07:15:DC:EE:5D:3E:78:9C:05:BE:28:B9:3A:44:D7
X509v3 Authority Key Identifier:
keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/VLWbnm4HFdzuXT54nAW-KLk6RNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:05:7e:ca:0d:07:be:e8:4f:a0:5c:c5:0c:56:7a:8b:6d:d9:
1b:0f:44:18:45:e0:ef:b5:b1:2e:46:39:8b:2b:d4:6d:4e:dd:
f4:f8:eb:6b:7c:28:81:3e:98:45:5c:a0:b1:31:98:55:91:d0:
f5:50:f0:86:9c:0a:1d:12:a1:41:fc:68:ea:9d:eb:b3:2c:65:
6c:c5:c9:31:f4:d7:5d:8a:2b:95:4a:ef:f6:60:2c:60:8e:53:
5d:e3:d5:d6:03:71:68:c9:01:1f:1e:c8:07:97:32:28:c8:29:
5e:2c:31:32:75:51:e6:29:7a:02:96:83:50:19:f4:5b:e3:16:
2c:d2:15:d1:e8:87:22:c5:e6:2b:53:61:e5:23:57:53:da:0c:
95:c5:d6:bf:58:6a:89:db:1f:0b:90:13:5d:c7:f7:a6:c2:60:
89:7f:a8:0d:66:d1:03:de:ce:b6:b6:5b:35:34:86:29:bb:fa:
df:e2:3a:80:3d:00:60:2c:f6:ae:ed:cc:4c:b6:74:26:0b:e7:
b3:58:c9:c8:88:0c:9e:c9:1c:dd:f9:69:c2:bc:8d:df:f7:39:
f1:97:62:aa:ce:07:b8:bc:e8:a3:72:f7:af:bc:9f:57:bf:93:
29:ad:53:bd:40:36:23:d4:21:6f:bf:0c:1a:a9:a5:a0:d2:92:
91:00:43:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksqmydDP5R1yC3wMX4hbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzgxNDBkYmQ0ZTZlZjE3MDIwZDg5YjBkNDI1MGRmZmIw
NDgxMWMwHhcNMjUwMTAyMDE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGI1OWI5ZTZlMDcxNWRjZWU1ZDNlNzg5YzA1YmUyOGI5M2E0NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnbz+ALQsBy5Z3eZHx/ZgGTt7XLT
Mekocmt3hhdo7NPCbEE5DFMCRbyQlYW78kj+gqKol0233G928/a6SdHUPEZhuJ6R
DfrxBJ+7n2kP/gvIbedIovPq2Sku0G901vgLWU78BIAk4ihrnaJ8L2spSm02oa45
YZciF40lh9PRWzcwFwsOBkmsIMDK5RA+xYmSjeOl4pmy5EgDDAA7zhmiC7s82wim
0TI9GajRZmJOBYagkrt6RJi2xreCKduB7VySKPbpHcConRZuNGwxRj7FHh1j+qRF
BHuC5p6eGbgFIkKqX8AnDmSguj/Z0jT8aZ8A4m5QpLsikQeeodvCXfFGlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFS1m55uBxXc7l0+eJwFvii5OkTXMB8GA1UdIwQY
MBaAFGN4FA29Tm7xcCDYmw1CUN/7BIEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYt
NTYzYzZiNTJkMDg2LzEvVkxXYm5tNEhGZHp1WFQ1NG5BVy1LTGs2Uk5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85ZTZhYjItMDNlOC00OGU5LTg2ZjYtNTYzYzZiNTJkMDg2
LzEvWTNnVURiMU9idkZ3SU5pYkRVSlEzX3NFZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/AbMA0G
CSqGSIb3DQEBCwUAA4IBAQAkBX7KDQe+6E+gXMUMVnqLbdkbD0QYReDvtbEuRjmL
K9RtTt30+OtrfCiBPphFXKCxMZhVkdD1UPCGnAodEqFB/GjqneuzLGVsxckx9Ndd
iiuVSu/2YCxgjlNd49XWA3FoyQEfHsgHlzIoyCleLDEydVHmKXoCloNQGfRb4xYs
0hXR6IcixeYrU2HlI1dT2gyVxda/WGqJ2x8LkBNdx/emwmCJf6gNZtED3s62tls1
NIYpu/rf4jqAPQBgLPau7cxMtnQmC+ezWMnIiAyeyRzd+WnCvI3f9znxl2Kqzge4
vOijcvevvJ9Xv5MprVO9QDYj1CFvvwwaqaWg0pKRAEP2
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:53 2025 by rpki-client