Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa
File: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (raw, json)
Hash identifier: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=
Subject key identifier: 56:DA:02:3C:82:5D:CF:B7:87:3F:20:7C:DD:AE:CD:9F:C1:9F:77:87
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 0194258F66B47F56B3609B296A300C02E155
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48167
IP address blocks: 91.209.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:66:b4:7f:56:b3:60:9b:29:6a:30:0c:02:e1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56da023c825dcfb7873f207cddaecd9fc19f7787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:5f:2e:87:e0:fc:9d:1f:d2:92:24:e8:ec:
e5:68:a3:98:df:78:d7:91:4b:75:cd:61:1a:eb:aa:
6f:fd:a3:ef:66:a6:75:d3:11:6e:c7:2a:8b:a7:d0:
fb:ce:c6:36:f7:93:d0:93:d4:64:81:c7:bb:aa:b1:
9e:48:3c:92:fc:a5:fc:71:4b:5f:6e:28:29:7f:47:
b0:96:49:55:f9:da:a8:2d:a5:e4:c6:78:e3:f8:0a:
21:d9:76:9f:24:a6:21:ea:e2:2e:21:92:61:87:49:
88:df:4a:22:d5:bd:8b:72:96:ea:00:09:95:f3:1a:
f9:e5:13:72:21:59:ec:4c:a3:a7:84:55:ec:9e:de:
b4:8d:46:ee:1c:53:06:63:67:5b:72:f9:07:db:a4:
bb:35:ef:3f:c0:0e:c3:cb:14:60:52:7f:0f:ce:fc:
fa:88:8e:17:b3:ed:f6:0e:2d:19:af:7e:b1:19:53:
ec:a9:85:22:3e:46:9b:d6:ea:f8:fe:13:c3:fe:3f:
26:5c:9c:09:16:e3:92:cd:8a:12:0e:29:e0:d0:cc:
20:a0:a4:c8:9e:fe:48:ec:0c:ec:3c:dc:eb:d2:27:
78:ef:b9:7b:e9:66:dc:cb:13:d3:8d:d6:21:83:fd:
24:85:5c:23:3c:12:78:c2:87:d3:ac:0c:ac:80:c6:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DA:02:3C:82:5D:CF:B7:87:3F:20:7C:DD:AE:CD:9F:C1:9F:77:87
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.45.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e5:7e:c1:cf:25:ce:19:7b:76:01:02:c9:19:c3:5c:8a:2d:
54:af:e4:81:5b:24:36:76:63:1d:2b:8f:7f:a1:53:5e:36:7a:
f7:97:47:85:d2:de:48:b8:d9:3e:f7:af:4d:14:44:eb:29:e2:
96:83:eb:63:26:f7:a4:cc:6d:33:5e:d1:65:95:58:5f:4a:80:
8d:7b:99:af:95:d2:8a:43:6e:a9:dc:bb:a0:b2:9f:a5:75:0b:
b1:7b:38:32:95:a1:cc:78:f3:d0:b3:89:08:85:51:42:b3:49:
b7:28:9e:3c:ec:d1:4d:30:9b:9a:6e:cc:fb:05:23:af:b1:22:
40:43:c6:65:46:5d:09:28:03:f2:e2:8e:16:82:1c:17:46:cb:
51:34:80:44:d7:78:3d:0d:47:39:ac:57:5f:f4:72:84:34:6f:
4c:94:6f:b5:ec:47:5e:33:df:cb:67:81:f6:af:77:3a:59:72:
e8:27:21:46:0f:45:a9:58:ad:58:2c:0d:6d:50:11:df:7e:63:
5a:00:67:13:df:19:4c:9c:8c:9c:12:ab:8f:69:9f:45:91:43:
77:1b:e6:7b:5c:9f:e5:4e:67:c0:69:69:3b:02:2d:3c:32:71:
1c:4a:64:09:58:15:c5:f5:8d:b8:8d:87:20:d6:48:76:82:6e:
86:52:ff:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:02 2025 by rpki-client