Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/VD1pOY6vP5TwIHzsVFu_IinabUU.roa
File: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (raw, json)
Hash identifier: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=
Subject key identifier: 54:3D:69:39:8E:AF:3F:94:F0:20:7C:EC:54:5B:BF:22:29:DA:6D:45
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 0194244495CBC5279E57DAAC541421A3B451
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/VD1pOY6vP5TwIHzsVFu_IinabUU.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198472
IP address blocks: 91.235.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:95:cb:c5:27:9e:57:da:ac:54:14:21:a3:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543d69398eaf3f94f0207cec545bbf2229da6d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:2c:00:7c:26:4e:fc:51:18:26:f6:2c:db:
48:55:cb:bc:42:d4:50:06:df:38:05:a9:98:81:49:
7c:68:7e:2b:c8:87:9d:01:0b:9b:4e:4a:75:1d:93:
43:75:ea:1d:71:90:a4:10:6b:26:f9:64:92:e3:ac:
1a:86:34:6a:61:7b:f7:ee:a4:60:e2:1b:40:c3:57:
aa:a3:c0:2e:11:f4:15:78:2f:90:0a:52:ce:06:a4:
4d:88:e6:0d:dd:d6:2d:12:aa:4f:af:0e:1c:7a:b8:
5a:db:72:8d:36:c1:d3:d2:dd:de:48:50:25:21:3b:
26:0e:12:bb:46:21:78:d5:4d:d2:39:58:36:7f:de:
03:a6:bb:bd:86:be:dc:5b:9a:21:d0:ac:13:47:b2:
44:09:ba:0e:36:3f:27:ec:f7:a8:60:c8:a9:e4:ac:
dc:93:1e:38:a9:64:22:d8:88:7d:b3:96:85:dc:e5:
97:65:e6:16:6e:51:1f:98:09:cd:92:48:ee:01:6c:
a5:67:20:48:b6:79:af:a9:a3:50:a1:30:cb:eb:ec:
f6:03:ec:f5:90:d5:4c:1f:25:18:17:30:bd:3f:e6:
bc:36:ae:ba:65:79:d2:b7:5d:1d:05:6c:a5:8e:b8:
db:48:1b:9d:53:b1:a6:ee:c5:a9:5f:52:c1:ae:62:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:69:39:8E:AF:3F:94:F0:20:7C:EC:54:5B:BF:22:29:DA:6D:45
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/VD1pOY6vP5TwIHzsVFu_IinabUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.65.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ef:8e:4c:45:b5:e0:58:ed:49:e5:8b:0f:bd:63:25:b7:29:
4b:d6:ed:7d:4f:8c:c1:4b:6b:e6:86:5e:cc:5d:2c:73:4a:86:
2a:2b:64:d9:6b:1a:e1:99:47:6c:8c:f1:b8:8c:da:1e:2b:64:
06:2a:eb:72:9a:0e:72:cf:1e:12:b6:e3:cc:dc:6b:36:fe:b4:
80:1e:de:10:88:3f:22:2e:86:70:21:13:3d:33:47:f9:96:cc:
68:03:4f:fb:96:48:a8:42:be:66:ca:00:8b:04:fb:30:2c:94:
8d:c3:33:d3:89:ea:86:58:18:2a:23:f4:01:db:42:33:6d:f1:
c7:55:fb:30:38:b9:29:59:0f:ed:35:72:4a:68:94:97:0f:32:
cb:d1:09:ee:f8:aa:d6:84:c2:e5:85:10:7c:ec:31:d7:c3:13:
c7:93:a6:0a:25:f9:b1:a7:35:3c:ae:83:2e:eb:62:d7:b2:31:
c1:f7:1a:04:3b:c0:c2:52:cd:6f:4c:28:4f:84:b7:47:ad:54:
6f:d6:5d:b6:1c:2f:55:3c:dc:b1:e5:58:3e:cc:49:b0:ac:e0:
e1:91:23:47:9e:d4:f0:07:04:bd:cf:fd:24:1c:b8:07:17:87:
e9:1a:58:2d:ae:34:00:fc:c4:a1:f7:a0:81:65:7b:89:3b:00:
2e:e1:89:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJXLxSeeV9qsVBQho7RRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWI3MjliNzVjNWY4YjJlOWQxNThhYTI5NjM5NmQ2ODBi
ZTcwYWQwHhcNMjUwMTAxMjM0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDNkNjkzOThlYWYzZjk0ZjAyMDdjZWM1NDViYmYyMjI5ZGE2ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz8sAHwmTvxRGCb2LNtIVcu8QtRQ
Bt84BamYgUl8aH4ryIedAQubTkp1HZNDdeodcZCkEGsm+WSS46wahjRqYXv37qRg
4htAw1eqo8AuEfQVeC+QClLOBqRNiOYN3dYtEqpPrw4cerha23KNNsHT0t3eSFAl
ITsmDhK7RiF41U3SOVg2f94Dpru9hr7cW5oh0KwTR7JECboONj8n7PeoYMip5Kzc
kx44qWQi2Ih9s5aF3OWXZeYWblEfmAnNkkjuAWylZyBItnmvqaNQoTDL6+z2A+z1
kNVMHyUYFzC9P+a8Nq66ZXnSt10dBWyljrjbSBudU7Gm7sWpX1LBrmLsKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQ9aTmOrz+U8CB87FRbvyIp2m1FMB8GA1UdIwQY
MBaAFIsbcpt1xfiy6dFYqiljltaAvnCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUt
NjY4MTQ5MjYzNTM5LzEvVkQxcE9ZNnZQNVR3SUh6c1ZGdV9JaW5hYlVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yZGQyNTYtODE0YS00ZmIzLTg1MTUtNjY4MTQ5MjYzNTM5
LzEvaXh0eW0zWEYtTExwMFZpcUtXT1cxb0MtY0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+tBMA0G
CSqGSIb3DQEBCwUAA4IBAQBJ745MRbXgWO1J5YsPvWMltylL1u19T4zBS2vmhl7M
XSxzSoYqK2TZaxrhmUdsjPG4jNoeK2QGKutymg5yzx4StuPM3Gs2/rSAHt4QiD8i
LoZwIRM9M0f5lsxoA0/7lkioQr5mygCLBPswLJSNwzPTieqGWBgqI/QB20IzbfHH
VfswOLkpWQ/tNXJKaJSXDzLL0Qnu+KrWhMLlhRB87DHXwxPHk6YKJfmxpzU8roMu
62LXsjHB9xoEO8DCUs1vTChPhLdHrVRv1l22HC9VPNyx5Vg+zEmwrODhkSNHntTw
BwS9z/0kHLgHF4fpGlgtrjQA/MSh96CBZXuJOwAu4Yki
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:46 2025 by rpki-client