Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/VHq92EwfoMDVXDmr3YDQVJFW754.roa
File: VHq92EwfoMDVXDmr3YDQVJFW754.roa (raw, json)
Hash identifier: JpzdYMai2LkiTqQiR+iyiuscebR4y7kmN03dvpWGwHk=
Subject key identifier: 54:7A:BD:D8:4C:1F:A0:C0:D5:5C:39:AB:DD:80:D0:54:91:56:EF:9E
Certificate issuer: /CN=20fb4a0c46ea91e7060fb29426a1323385268495
Certificate serial: 019427B3C9515F6D5F3E73142A8CABAE61E8
Authority key identifier: 20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/VHq92EwfoMDVXDmr3YDQVJFW754.roa
Signing time: Thu 02 Jan 2025 15:48:01 +0000
ROA not before: Thu 02 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198158
IP address blocks: 91.231.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:c9:51:5f:6d:5f:3e:73:14:2a:8c:ab:ae:61:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fb4a0c46ea91e7060fb29426a1323385268495
Validity
Not Before: Jan 2 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=547abdd84c1fa0c0d55c39abdd80d0549156ef9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:7e:dc:86:cc:e7:97:aa:af:cf:f4:38:dd:
aa:e8:f9:f5:0c:01:eb:45:71:17:d9:bf:0c:df:1f:
f5:37:3b:05:be:5b:53:f7:54:30:65:2b:1a:16:0f:
ec:6f:4a:a9:0e:30:2f:60:b5:0c:c2:10:7f:95:66:
ba:86:21:4c:07:5d:49:10:71:ad:18:26:70:f8:91:
38:a6:1b:b7:7a:81:c9:22:ac:1d:fa:45:06:9d:3f:
a8:e1:58:3a:b7:8f:67:cd:df:3a:a5:e5:86:c8:1f:
ec:2f:07:d0:1c:5e:74:a3:50:e1:6d:ba:93:21:d3:
59:31:0f:b6:d8:b0:2c:6a:2c:07:f4:1f:12:17:fa:
30:a6:78:16:73:19:8d:7b:b5:ee:78:53:12:3a:ea:
c9:fb:97:73:1b:24:90:de:15:4d:0e:e8:4b:a0:a1:
71:02:3f:f5:c3:25:f9:3d:70:cc:53:07:90:c1:eb:
8e:0c:8e:cb:a9:42:a9:78:0a:e8:c1:f4:30:1c:1c:
22:8a:74:2b:93:70:f3:88:4e:b7:06:30:63:8f:83:
10:b1:63:55:81:4c:46:6f:75:fd:88:1c:e0:6a:4e:
b6:30:ee:19:97:9c:b0:77:db:36:2b:12:2f:e6:9d:
b6:1c:fe:3b:7f:41:92:eb:9a:44:2a:3c:64:72:4f:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:BD:D8:4C:1F:A0:C0:D5:5C:39:AB:DD:80:D0:54:91:56:EF:9E
X509v3 Authority Key Identifier:
keyid:20:FB:4A:0C:46:EA:91:E7:06:0F:B2:94:26:A1:32:33:85:26:84:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPtKDEbqkecGD7KUJqEyM4UmhJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/VHq92EwfoMDVXDmr3YDQVJFW754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0b35c5-8990-4e76-aeee-fcaf4cdd1663/1/IPtKDEbqkecGD7KUJqEyM4UmhJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.60.0/23
Signature Algorithm: sha256WithRSAEncryption
06:19:4a:3e:42:96:58:50:1b:16:be:46:ce:76:11:cf:77:bf:
65:a8:92:f5:4b:cb:a0:11:a6:a3:ff:16:fc:d5:76:bb:4b:dc:
c6:64:12:f3:f9:f7:d4:d9:77:34:03:6a:b8:f6:4a:70:62:bd:
e0:e0:08:cb:1b:7c:06:7a:58:3e:b6:04:b3:26:cb:f7:3e:4d:
1e:2b:3d:d8:1f:c9:0b:89:47:83:44:d3:cc:b8:60:f4:ba:71:
94:d2:a6:8f:6c:f3:f2:0e:b6:e4:49:2a:10:ae:97:cb:b6:cd:
c5:19:75:6d:d9:09:47:2a:57:c4:c8:3b:49:30:b9:55:f3:05:
e1:eb:83:e6:65:e2:64:2b:08:bf:82:89:19:a1:2d:11:c0:30:
54:30:98:d4:91:5b:22:13:aa:26:89:68:1b:83:ef:3b:b2:fb:
01:69:bd:cf:e8:94:33:a0:ed:ed:44:8d:32:74:32:a5:c3:37:
43:09:a8:bf:52:23:af:1d:a1:fe:8a:40:00:23:a0:c4:78:8d:
38:c5:09:6a:c9:fd:0b:49:b2:8c:4e:5a:39:28:47:1d:62:c9:
40:1e:85:00:72:75:c2:51:eb:4d:1d:f9:c9:ab:ad:6a:85:ef:
f6:78:5c:26:e8:73:ef:15:80:ab:f6:44:d3:59:d6:64:7e:37:
98:26:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:14 2025 by rpki-client