Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa
File: vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa (raw, json)
Hash identifier: lyBGyAokiSjopS7O45WDbuUZk8SIrQSCpnYKsmtEQ5s=
Subject key identifier: BE:6F:CA:CD:FA:22:63:87:15:CD:52:62:F5:F2:55:41:47:19:94:9B
Certificate issuer: /CN=3adfd48a97720cd854029ddb266c51f91f07670d
Certificate serial: 019423D6D6A48582623A72467A708DCA0A42
Authority key identifier: 3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51410
IP address blocks: 91.217.137.0/24 maxlen: 24
2001:67c:13e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d6:a4:85:82:62:3a:72:46:7a:70:8d:ca:0a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adfd48a97720cd854029ddb266c51f91f07670d
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be6fcacdfa22638715cd5262f5f255414719949b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:fb:0e:2b:ad:db:c5:30:6f:64:e5:25:d4:
6b:5d:9e:ab:70:f4:f0:e8:89:9a:30:7f:b5:db:87:
3a:38:33:4a:01:80:3e:e6:d5:95:ab:10:46:89:4c:
95:40:45:c1:67:db:39:b7:f2:57:e3:43:b8:66:ed:
75:e8:62:2e:65:35:0a:3f:4f:53:08:07:d2:62:7d:
0a:39:2f:c9:55:07:7a:9b:ee:db:0c:d8:0d:42:2f:
31:c7:a9:f3:33:03:9a:f5:0c:c3:10:2d:c8:60:6d:
28:ba:de:ba:93:99:a1:ff:38:9f:fe:8b:52:b5:0a:
2f:b1:fe:35:87:37:3c:33:95:dc:f7:de:02:dc:77:
65:45:c7:6f:d2:a9:10:0b:e1:05:83:e1:4c:37:a5:
5e:66:e8:0a:df:ea:6a:38:48:3e:d7:a0:5c:d5:b7:
6f:8b:7e:0e:9f:92:8d:d4:6c:d2:fe:0d:5c:a1:d4:
69:79:0c:72:7c:ac:18:3b:a2:86:11:e5:79:91:00:
2e:1e:bf:4c:31:76:81:2e:4d:f2:4e:53:c9:9d:0a:
08:51:f4:3d:e2:cd:da:d4:ea:8c:55:2c:b6:1c:e3:
02:c3:ae:fc:95:20:70:9a:d3:46:fb:dc:37:34:66:
b2:8b:1f:2e:ab:01:0d:34:79:d0:6f:2b:83:00:fb:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:CA:CD:FA:22:63:87:15:CD:52:62:F5:F2:55:41:47:19:94:9B
X509v3 Authority Key Identifier:
keyid:3A:DF:D4:8A:97:72:0C:D8:54:02:9D:DB:26:6C:51:F9:1F:07:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot_UipdyDNhUAp3bJmxR-R8HZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/vm_KzfoiY4cVzVJi9fJVQUcZlJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a2eb5a-0962-45bc-a637-f0104ddf2811/1/Ot_UipdyDNhUAp3bJmxR-R8HZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.137.0/24
IPv6:
2001:67c:13e4::/48
Signature Algorithm: sha256WithRSAEncryption
28:68:3d:f7:15:1d:73:aa:1f:c9:e2:59:57:73:49:c4:56:8b:
b0:ce:18:6b:41:77:04:21:bf:5f:f3:ea:a5:25:b3:93:d6:50:
4c:6b:e0:a4:c8:a8:27:ed:a9:55:8d:3f:88:84:48:de:52:33:
ae:7a:6b:ca:39:2d:2f:42:56:2f:c6:62:05:92:95:25:c6:a3:
bd:e2:45:28:57:4e:b4:90:78:30:61:a6:06:12:29:8e:98:89:
b1:0d:44:4b:0e:ec:da:e2:56:83:c9:b5:1b:6f:ec:0b:0f:01:
31:ca:86:f2:78:3a:71:d8:ab:70:64:18:82:1a:09:2f:f4:26:
2f:0f:a3:85:83:85:13:af:61:35:6f:ed:94:0f:94:6a:81:1c:
e3:bc:a3:8a:7a:75:7a:c3:ed:a0:a7:23:34:a9:09:31:a7:91:
bf:2a:37:98:de:f9:55:20:62:28:82:c9:35:27:5e:b2:1e:ed:
a5:aa:45:b4:36:6c:a9:d3:18:b4:80:6f:7c:00:38:bf:dd:20:
dd:c8:f5:3d:3a:81:0b:81:e2:72:76:2d:9f:e3:7b:2d:1e:59:
c1:e7:c6:d4:ea:66:87:31:ac:65:7e:40:ee:13:3e:78:cd:e0:
93:4a:ff:4d:0b:00:03:57:5e:08:5b:89:d6:a9:35:ba:3c:8d:
cd:af:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:24:48 2025 by rpki-client