Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/vvup4VxriGQ7WP6VC9ScYtwxj1M.roa
File: vvup4VxriGQ7WP6VC9ScYtwxj1M.roa (raw, json)
Hash identifier: cPowMqqvBH4GyyJFrqoymf0AaQQSobEdpJ1I1I37kek=
Subject key identifier: BE:FB:A9:E1:5C:6B:88:64:3B:58:FE:95:0B:D4:9C:62:DC:31:8F:53
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019426D95D663618B0380661A1AB341546B2
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/vvup4VxriGQ7WP6VC9ScYtwxj1M.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202650
IP address blocks: 79.174.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5d:66:36:18:b0:38:06:61:a1:ab:34:15:46:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=befba9e15c6b88643b58fe950bd49c62dc318f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:f6:c6:31:7e:39:a4:63:01:ed:13:82:77:
ef:0b:bd:32:4c:a4:60:be:5d:82:be:29:98:2a:fd:
e3:56:0b:bd:d1:59:7d:f7:5d:0d:52:77:e3:db:81:
57:1a:ca:22:68:2e:97:98:82:56:67:c8:39:aa:29:
37:67:bb:8b:68:46:b8:3e:c2:ab:9a:3f:b2:de:05:
54:29:9f:76:63:80:55:a7:89:2c:de:65:43:2f:c7:
c2:e2:87:53:88:0c:33:53:8b:bc:31:79:f6:ef:39:
2b:a9:f7:40:c1:4a:9c:62:4d:2e:df:83:37:86:f2:
65:7f:c5:25:1d:9d:f7:34:64:22:d8:5f:2d:8f:76:
b5:17:70:4b:93:09:5c:df:23:87:48:91:b6:79:c1:
1a:3d:30:df:5c:f0:19:df:58:6e:86:58:00:d1:94:
0a:94:c5:87:5d:29:28:5b:bc:97:d5:8e:de:62:cc:
11:6b:01:81:7c:f9:1f:3c:e2:4b:8a:ff:1f:59:45:
23:0d:0e:c6:43:4e:fa:04:fa:79:22:83:81:69:a1:
3c:14:8a:48:87:19:2c:91:71:e3:e6:4f:42:a1:66:
4e:e7:9d:3a:47:a1:cb:d3:74:93:a9:e1:a6:67:8d:
71:42:d6:ea:c1:fc:62:32:bf:46:92:17:33:bd:87:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FB:A9:E1:5C:6B:88:64:3B:58:FE:95:0B:D4:9C:62:DC:31:8F:53
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/vvup4VxriGQ7WP6VC9ScYtwxj1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ff:4e:a4:ec:bd:01:f2:b6:66:59:f1:76:24:f9:42:93:21:
9d:27:80:27:30:d8:84:84:9f:72:51:74:2a:a0:db:b1:08:34:
65:ea:33:8c:f5:28:bd:fc:07:a8:91:ca:eb:76:1e:a0:cc:c0:
b6:c9:65:b9:0b:95:29:ff:4b:d5:48:2e:2d:5d:6f:3d:77:c3:
23:c5:f3:95:c9:38:65:a2:49:8a:64:dd:11:79:2a:fe:85:60:
31:d8:85:80:24:86:ad:69:f4:91:f4:d8:32:28:37:93:e6:e0:
1a:e1:19:f0:d1:b8:60:09:c9:40:21:91:5e:18:bb:c4:92:0c:
c9:20:c4:87:3c:b1:dc:d0:bc:4c:9b:69:74:29:ef:57:4c:48:
6b:29:b9:3d:24:38:8a:56:19:1d:f7:e0:c6:88:05:7e:97:c9:
32:6a:2f:f2:7f:40:b0:4a:35:0d:eb:f3:57:a5:f2:d6:1b:73:
63:fd:4d:bd:27:e6:61:af:4d:a0:7d:cc:61:6a:f4:b3:6b:40:
6d:9b:fc:c2:f2:47:6f:46:3a:53:a0:7f:6b:d8:52:64:ec:e9:
85:99:11:6e:65:e4:91:b7:44:f1:19:ec:46:31:fc:8e:db:91:
7b:b3:7e:27:ab:b7:be:3c:9b:13:e5:12:5c:eb:a2:ce:c0:16:
b5:d0:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:05 2025 by rpki-client