Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/VVCnLOWmrSBaKWErHe5c5G5KPF8.roa
File: VVCnLOWmrSBaKWErHe5c5G5KPF8.roa (raw, json)
Hash identifier: QVdzF2bvVuv9/sxNrSzdos/HPDvwjhdyNyE3VUg9Acg=
Subject key identifier: 55:50:A7:2C:E5:A6:AD:20:5A:29:61:2B:1D:EE:5C:E4:6E:4A:3C:5F
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D7899D63E0C4AF186CFB4F7B285CC8
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/VVCnLOWmrSBaKWErHe5c5G5KPF8.roa
Signing time: Wed 01 Jan 2025 21:48:35 +0000
ROA not before: Wed 01 Jan 2025 21:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204380
IP address blocks: 78.28.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:89:9d:63:e0:c4:af:18:6c:fb:4f:7b:28:5c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5550a72ce5a6ad205a29612b1dee5ce46e4a3c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:45:60:ff:4c:04:b0:6e:a1:2d:85:4a:37:
c2:46:f8:67:cb:a4:ad:2c:d1:b3:ac:39:4f:a8:86:
f1:99:12:ae:61:26:28:55:f8:22:a2:78:bf:27:b3:
47:62:31:3a:33:a6:92:69:f4:b7:f8:45:5d:1f:e6:
22:ce:26:4a:23:a3:5c:ae:a3:1c:34:e8:6b:6a:45:
1f:97:68:e7:ff:05:97:2b:48:43:c6:5b:a3:56:e3:
fe:47:cc:3e:cb:e9:c5:63:b8:1f:d7:96:18:d0:e4:
22:5e:6d:4d:b4:50:54:db:4a:96:33:cc:83:70:c6:
66:c1:34:a4:5d:85:a3:40:d2:c4:ba:1e:86:14:aa:
a3:93:6b:38:cc:ed:ea:7b:55:56:1d:a5:39:d5:4e:
e7:10:39:e8:33:f6:9e:ba:9d:d0:85:3d:ac:ce:f7:
30:79:a4:dc:cf:d2:50:2d:c7:41:c8:58:ae:83:88:
97:e7:0b:10:14:c8:2e:62:47:8a:b0:50:eb:32:f0:
f2:b3:29:2b:99:12:65:c8:9d:52:c5:2d:bd:06:9a:
b0:2f:be:47:23:ca:bd:d7:5a:49:7f:e2:cd:ac:ba:
ff:4b:89:40:1d:a6:ec:74:c2:22:5f:03:de:a3:c4:
80:de:06:19:4e:a3:bd:7c:f5:7c:44:05:d5:6a:27:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:50:A7:2C:E5:A6:AD:20:5A:29:61:2B:1D:EE:5C:E4:6E:4A:3C:5F
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/VVCnLOWmrSBaKWErHe5c5G5KPF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.225.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1b:0e:85:42:eb:a3:ad:66:7f:be:4f:80:31:84:4f:28:01:
50:90:20:57:f2:41:c5:39:5b:69:77:d6:19:26:ee:85:51:d2:
41:5e:01:f2:6e:f5:05:08:ac:c2:4a:18:f3:19:65:c5:78:de:
d5:d7:8f:c3:32:1a:ea:dc:2b:19:de:ab:cd:0a:a5:1d:cd:e7:
00:e8:e2:a0:64:0c:fb:30:bc:65:b9:b4:77:cc:4d:a4:23:b0:
36:e2:ca:7b:e5:8f:98:39:fd:79:0e:31:8e:f9:e0:39:4b:c2:
49:92:13:ec:c6:27:43:42:f6:4f:a0:35:43:f2:ef:37:c1:74:
cb:c0:59:a4:8f:76:8b:15:4b:6b:3b:4d:b8:8b:76:44:6c:dc:
17:76:a1:dc:d1:bb:4e:c7:9f:2b:2f:11:61:10:80:68:a0:5a:
d5:1e:78:f0:d7:5c:c4:d1:a3:76:1f:df:21:c7:88:61:5c:be:
43:9a:c8:84:ca:17:a4:dd:14:a8:7f:bf:e4:8f:50:25:8d:99:
5c:4d:47:cc:51:b6:58:1f:ff:d3:61:ce:7c:2d:5f:3a:2b:cf:
5d:0e:bc:3b:7f:dd:45:fd:c0:64:16:e4:10:be:b9:72:db:89:
cb:e5:45:b3:71:f1:d3:73:03:ec:dc:db:22:22:55:4a:1c:30:
9a:26:40:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj14mdY+DErxhs+097KFzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTUwYTcyY2U1YTZhZDIwNWEyOTYxMmIxZGVlNWNlNDZlNGEzYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CxFYP9MBLBuoS2FSjfCRvhny6St
LNGzrDlPqIbxmRKuYSYoVfgioni/J7NHYjE6M6aSafS3+EVdH+YiziZKI6NcrqMc
NOhrakUfl2jn/wWXK0hDxlujVuP+R8w+y+nFY7gf15YY0OQiXm1NtFBU20qWM8yD
cMZmwTSkXYWjQNLEuh6GFKqjk2s4zO3qe1VWHaU51U7nEDnoM/aeup3QhT2szvcw
eaTcz9JQLcdByFiug4iX5wsQFMguYkeKsFDrMvDysykrmRJlyJ1SxS29BpqwL75H
I8q911pJf+LNrLr/S4lAHabsdMIiXwPeo8SA3gYZTqO9fPV8RAXVaidzqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVQpyzlpq0gWilhKx3uXORuSjxfMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvVlZDbkxPV21yU0JhS1dFckhlNWM1RzVLUEY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThzhMA0G
CSqGSIb3DQEBCwUAA4IBAQBgGw6FQuujrWZ/vk+AMYRPKAFQkCBX8kHFOVtpd9YZ
Ju6FUdJBXgHybvUFCKzCShjzGWXFeN7V14/DMhrq3CsZ3qvNCqUdzecA6OKgZAz7
MLxlubR3zE2kI7A24sp75Y+YOf15DjGO+eA5S8JJkhPsxidDQvZPoDVD8u83wXTL
wFmkj3aLFUtrO024i3ZEbNwXdqHc0btOx58rLxFhEIBooFrVHnjw11zE0aN2H98h
x4hhXL5DmsiEyhek3RSof7/kj1AljZlcTUfMUbZYH//TYc58LV86K89dDrw7f91F
/cBkFuQQvrly24nL5UWzcfHTcwPs3NsiIlVKHDCaJkCE
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:19 2025 by rpki-client