Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VbcL9bior6PXBeek2itKThj2Mmg.roa
File: VbcL9bior6PXBeek2itKThj2Mmg.roa (raw, json)
Hash identifier: l+M+2PHeU8aDcSFYrtmPM3FSlqIkl/VlKrt8COogM18=
Subject key identifier: 55:B7:0B:F5:B8:A8:AF:A3:D7:05:E7:A4:DA:2B:4A:4E:18:F6:32:68
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F167EE7411B5DA8187DBC825B1B0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VbcL9bior6PXBeek2itKThj2Mmg.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49850
IP address blocks: 213.91.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f1:67:ee:74:11:b5:da:81:87:db:c8:25:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55b70bf5b8a8afa3d705e7a4da2b4a4e18f63268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:1e:94:05:42:da:aa:c7:08:a7:12:cc:6c:
20:23:4e:66:0c:41:f1:80:92:2e:b4:70:e8:22:43:
80:e8:67:0b:19:86:3b:b0:29:05:21:92:75:8a:6f:
e9:c5:51:0a:c7:26:38:5d:3e:21:72:fd:31:e7:73:
30:0f:45:c7:59:9f:a3:c1:59:d4:9a:f5:66:f4:ce:
d1:04:ee:af:1c:9d:c9:54:6e:73:b2:38:04:19:5b:
29:44:cd:4e:89:eb:4a:1a:b0:9e:e5:68:61:78:10:
a8:24:1f:75:bb:fc:4d:7b:88:8c:52:b9:35:4e:cd:
0d:b5:1f:3b:4a:ef:f0:c4:57:66:89:6e:1c:48:19:
9e:f7:24:18:74:3f:c5:13:69:c5:84:cf:d5:99:5f:
35:0c:cc:22:53:bd:85:92:00:9d:97:01:67:89:4b:
fc:36:36:3d:87:69:2d:a5:31:23:d6:9d:80:25:29:
25:61:5a:36:1f:d4:9d:f5:d8:b7:c4:41:0e:11:c8:
7e:56:5a:62:8b:cc:0b:6d:a9:81:ae:84:c2:41:5f:
d3:3b:b9:f8:95:81:0c:0e:29:66:f9:35:a8:29:48:
2d:5e:0f:b6:06:89:f4:da:15:04:9c:ef:1f:20:e0:
a9:83:ff:3a:13:9a:8d:c1:bc:fc:1d:65:b6:69:7f:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:0B:F5:B8:A8:AF:A3:D7:05:E7:A4:DA:2B:4A:4E:18:F6:32:68
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/VbcL9bior6PXBeek2itKThj2Mmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.174.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ec:99:8e:77:17:db:90:d3:b7:92:cc:f9:57:92:4e:60:6c:
7f:0f:6e:6e:67:2d:c8:15:82:9e:d3:29:de:f7:dc:94:32:f6:
e0:25:fa:c4:b3:cd:2f:e4:6f:1b:69:e9:c5:c8:4c:18:d1:53:
ce:80:09:d5:83:21:cd:39:62:29:9d:d5:f1:43:b4:58:0c:7d:
89:ae:55:8b:0e:cc:42:ab:d0:b8:9c:f3:0d:4c:a5:c5:f3:3b:
8a:6a:ff:26:d0:10:dc:7f:aa:d1:b7:f3:b0:c8:9b:63:fe:29:
8b:9c:9f:b5:24:26:57:99:f5:17:16:38:f9:c7:11:32:eb:65:
21:d5:d0:4b:a2:a9:09:74:1d:3c:d6:b1:19:99:fb:2e:39:b5:
7b:8a:8d:1a:56:8e:6b:9c:21:29:8c:d5:3a:ed:e2:2d:b9:9e:
7b:16:f3:d7:5d:25:c1:5d:3d:0e:5f:6a:7e:c0:be:05:c3:ba:
8c:2e:6c:04:56:ab:00:88:2c:66:04:25:2b:e2:d7:09:79:92:
7e:31:cb:62:bd:5c:04:e8:9d:32:a8:6c:82:3c:7f:98:c3:27:
5c:b4:5e:ac:e9:bd:92:1f:28:ec:f6:ec:88:cb:93:cc:e9:1a:
c3:c9:26:3e:40:ba:97:f1:c2:0a:ff:4f:6d:19:5c:3f:b7:da:
5e:c4:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:36 2025 by rpki-client