Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/VMjps0TDOc6vg4EVncBcfziPs7o.roa
File: VMjps0TDOc6vg4EVncBcfziPs7o.roa (raw, json)
Hash identifier: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=
Subject key identifier: 54:C8:E9:B3:44:C3:39:CE:AF:83:81:15:9D:C0:5C:7F:38:8F:B3:BA
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 019427B61FA2A302997E091E1D488111360D
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/VMjps0TDOc6vg4EVncBcfziPs7o.roa
Signing time: Thu 02 Jan 2025 15:50:34 +0000
ROA not before: Thu 02 Jan 2025 15:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57089
IP address blocks: 91.230.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1f:a2:a3:02:99:7e:09:1e:1d:48:81:11:36:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54c8e9b344c339ceaf8381159dc05c7f388fb3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:08:5b:49:c9:e3:4f:7c:15:23:1f:06:01:
0d:ed:7e:e3:97:f8:95:6f:6f:38:4f:68:cc:b4:ba:
b1:fc:84:6b:3c:67:d5:00:01:52:71:8b:da:40:cd:
19:f2:7a:c5:de:70:d8:32:41:20:be:e2:58:fa:87:
00:c9:13:9b:17:e0:30:d1:bd:13:df:c5:df:85:1a:
42:c1:74:ee:8c:52:64:a8:33:30:ba:99:08:4e:8c:
5a:89:1e:48:da:76:03:be:1d:de:fb:67:e7:ce:48:
ff:13:82:97:f9:15:98:8f:21:17:89:a4:b8:08:7a:
fe:68:fe:dc:4e:2a:cc:ee:7e:b5:d7:7b:d7:4f:73:
85:21:c1:02:1d:a4:61:d3:39:48:af:10:04:45:a1:
88:8d:c7:01:97:f0:3a:bb:1f:12:92:28:2a:5f:92:
2c:ce:d1:ff:b1:af:f2:99:31:e2:5c:7f:31:af:4b:
cf:fb:59:f3:6f:aa:96:cd:f0:36:ae:de:8b:85:a6:
a5:cb:86:12:4d:58:fc:85:88:cc:80:75:8f:de:1f:
b8:b0:28:0b:a8:f8:32:6c:9e:19:7b:e8:c6:88:2c:
bd:4d:23:55:a2:ae:32:b0:8c:6d:35:c1:7f:33:d4:
81:99:8d:5d:c5:07:4b:a6:0d:c9:e2:53:11:75:bf:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:E9:B3:44:C3:39:CE:AF:83:81:15:9D:C0:5C:7F:38:8F:B3:BA
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/VMjps0TDOc6vg4EVncBcfziPs7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.160.0/23
Signature Algorithm: sha256WithRSAEncryption
62:bf:bc:a4:9f:1f:a6:91:05:24:4a:d4:00:96:cf:aa:49:b5:
c6:df:8d:04:d0:a2:24:8b:db:81:11:65:85:97:4a:41:60:23:
f9:f3:bd:4f:5c:1e:40:aa:8d:e1:36:93:8a:20:96:48:1e:65:
15:af:45:31:7b:3f:08:7d:4d:9a:46:19:bd:5a:22:ee:04:00:
a3:c1:d8:76:39:3f:bf:89:8c:9c:3d:ac:08:42:cd:8b:fb:90:
a5:d9:cb:ad:9e:71:e4:ba:70:fe:c1:26:13:60:d7:3c:03:64:
ae:2d:63:9e:2d:87:0c:fc:d0:46:2b:9d:75:bb:aa:09:76:0e:
04:0f:f6:bf:7b:cf:15:84:e3:57:76:d9:2e:8c:b8:72:03:34:
50:c0:40:c5:f3:38:1b:5c:2e:c6:60:70:01:f8:cf:94:2f:b5:
65:1a:fa:d2:05:02:4d:c5:d2:8e:97:5f:0a:2c:6d:6f:c6:db:
8b:2e:e3:2f:64:b8:bb:0d:90:12:ac:fc:b7:58:51:d5:d3:54:
51:62:42:62:29:0e:ec:6b:fe:1a:d1:e1:08:0d:82:95:12:89:
e2:4d:e5:6d:b9:9a:7d:f3:27:ec:3f:0a:54:6f:56:eb:bf:4f:
df:ea:5f:ff:77:8d:b7:8e:a8:13:c8:c6:53:60:13:d0:1c:57:
1d:d0:9d:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnth+iowKZfgkeHUiBETYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTU3Y2E0ODNhZjBiNjdmOTczYjA4NTk3MmNjYzVjNWVk
MDNmN2MwHhcNMjUwMTAyMTU1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGM4ZTliMzQ0YzMzOWNlYWY4MzgxMTU5ZGMwNWM3ZjM4OGZiM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOIIW0nJ4098FSMfBgEN7X7jl/iV
b284T2jMtLqx/IRrPGfVAAFScYvaQM0Z8nrF3nDYMkEgvuJY+ocAyRObF+Aw0b0T
38XfhRpCwXTujFJkqDMwupkIToxaiR5I2nYDvh3e+2fnzkj/E4KX+RWYjyEXiaS4
CHr+aP7cTirM7n6113vXT3OFIcECHaRh0zlIrxAERaGIjccBl/A6ux8SkigqX5Is
ztH/sa/ymTHiXH8xr0vP+1nzb6qWzfA2rt6Lhaaly4YSTVj8hYjMgHWP3h+4sCgL
qPgybJ4Ze+jGiCy9TSNVoq4ysIxtNcF/M9SBmY1dxQdLpg3J4lMRdb94bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTI6bNEwznOr4OBFZ3AXH84j7O6MB8GA1UdIwQY
MBaAFLaVfKSDrwtn+XOwhZcszFxe0D98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQt
ODRiNzI1MTU4MzQ3LzEvVk1qcHMwVERPYzZ2ZzRFVm5jQmNmemlQczdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQtODRiNzI1MTU4MzQ3
LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+agMA0G
CSqGSIb3DQEBCwUAA4IBAQBiv7yknx+mkQUkStQAls+qSbXG340E0KIki9uBEWWF
l0pBYCP5871PXB5Aqo3hNpOKIJZIHmUVr0Uxez8IfU2aRhm9WiLuBACjwdh2OT+/
iYycPawIQs2L+5Cl2cutnnHkunD+wSYTYNc8A2SuLWOeLYcM/NBGK511u6oJdg4E
D/a/e88VhONXdtkujLhyAzRQwEDF8zgbXC7GYHAB+M+UL7VlGvrSBQJNxdKOl18K
LG1vxtuLLuMvZLi7DZASrPy3WFHV01RRYkJiKQ7sa/4a0eEIDYKVEoniTeVtuZp9
8yfsPwpUb1brv0/f6l//d423jqgTyMZTYBPQHFcd0J3N
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:23 2025 by rpki-client