Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa
File: VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa (raw, json)
Hash identifier: iydD1kql5GaDH+9KnMFCTe4zA6F46avj8WklVHWfoCY=
Subject key identifier: 56:DB:18:65:75:49:01:9A:05:AA:77:83:80:CA:DC:75:8D:59:2E:AA
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019494AB1130F147E957C5563833B101756B
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa
Signing time: Thu 23 Jan 2025 19:37:06 +0000
ROA not before: Thu 23 Jan 2025 19:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207558
IP address blocks: 91.247.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:ab:11:30:f1:47:e9:57:c5:56:38:33:b1:01:75:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Jan 23 19:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56db18657549019a05aa778380cadc758d592eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:75:91:80:6e:9b:e2:36:87:f9:7e:9e:86:
ad:6a:b9:73:d9:45:bd:ff:ee:f0:11:2a:b0:90:c8:
a0:0d:f0:6b:71:ec:24:02:69:34:2d:e3:e0:62:11:
49:c3:ab:42:3b:50:be:ea:69:36:42:3a:53:96:38:
7f:79:63:4f:41:02:38:cb:73:04:0f:e9:20:06:63:
c8:8b:51:5d:1e:4d:c7:8e:86:d3:dc:dd:c9:8e:28:
fc:33:de:3e:53:cc:c4:ee:69:c6:d2:b6:95:0f:77:
b2:3d:f8:28:22:80:ed:73:e4:f3:a2:12:94:c6:dc:
6f:85:48:01:6d:d3:58:97:97:6c:63:3c:3f:b8:b8:
3e:11:88:53:7e:8a:c9:d2:ae:67:78:a8:b2:1e:79:
ea:03:5f:62:6f:90:b2:26:67:79:b2:8c:d3:f7:ca:
e2:0f:7c:80:ce:d0:c3:b5:b5:a6:19:65:fd:b7:5c:
01:ed:9c:b9:1e:e2:9c:e4:d0:ea:f5:3f:4d:1e:51:
bb:84:5e:ae:b5:78:9f:4b:21:b0:d2:84:bf:da:86:
1f:e8:36:2a:d3:cc:86:08:8d:de:16:46:43:41:76:
ae:a5:f7:58:b0:27:16:90:9e:ac:06:e4:7b:c7:1b:
e9:e3:ef:7b:9a:e7:fb:be:e8:43:95:6a:a3:e6:d3:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:18:65:75:49:01:9A:05:AA:77:83:80:CA:DC:75:8D:59:2E:AA
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/VtsYZXVJAZoFqneDgMrcdY1ZLqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.182.0/24
Signature Algorithm: sha256WithRSAEncryption
60:07:2d:7b:16:74:69:61:08:99:5c:f6:87:b2:d4:f5:d2:60:
c5:72:f5:a7:95:03:e1:bb:7d:6b:4e:9a:22:19:21:a1:68:90:
f4:44:7c:50:1d:66:a0:03:10:a0:16:ae:b5:cf:1a:5b:6a:50:
d9:96:0c:4d:91:bc:8f:76:2b:23:08:90:7d:8a:ed:2a:29:8a:
eb:a7:aa:7c:8b:5c:b3:4a:52:d8:63:5c:85:75:67:b6:d4:fb:
86:f7:97:06:be:87:31:ec:9e:28:7a:1d:62:ff:82:f7:b5:e1:
25:f1:ff:b0:90:e7:c1:0b:84:14:34:6d:89:d1:a9:cb:25:f2:
64:25:14:1d:8c:30:ab:d8:7e:d8:9f:6a:69:c2:61:da:bc:9c:
70:ad:40:04:02:42:c8:8b:15:24:87:8a:c7:2f:97:5c:8d:66:
29:a7:9b:a6:b1:2a:ee:ad:97:ad:0f:80:1a:b9:dd:75:44:c1:
34:1d:29:57:cc:00:85:1b:de:e8:93:e7:14:cd:98:88:47:f8:
7a:d9:f3:be:63:d4:c6:27:d3:e0:34:6b:94:4e:d4:40:bf:2e:
f9:6b:46:f4:40:00:9a:8d:65:57:03:37:d6:17:9a:ae:28:7a:
70:cc:9e:58:29:b5:3a:03:08:a5:4a:1b:e2:8f:a2:2f:6e:61:
51:cb:93:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:44 2025 by rpki-client