Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa
File: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (raw, json)
Hash identifier: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=
Subject key identifier: BD:4C:D3:C5:04:59:34:4E:56:07:14:69:15:8F:F5:06:F4:7A:9D:BF
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 019422FC28E1CBB0549CA41B64EF7B12BE1A
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44615
IP address blocks: 91.202.64.0/24 maxlen: 24
91.202.65.0/24 maxlen: 24
91.202.66.0/24 maxlen: 24
91.202.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:28:e1:cb:b0:54:9c:a4:1b:64:ef:7b:12:be:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd4cd3c50459344e56071469158ff506f47a9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:88:9d:ef:6e:3e:01:5a:fa:b1:fa:de:fc:
33:a1:88:ab:9c:0e:47:cc:72:6a:39:00:94:e9:b1:
71:ed:de:4a:78:d5:79:99:2b:d7:de:81:c3:38:9d:
2a:03:ea:ce:27:56:60:8a:f8:b1:22:6d:17:22:da:
83:35:ae:c2:b0:7e:7e:de:49:8a:29:24:a4:49:3b:
94:ef:89:5c:65:bd:11:3f:28:e4:c9:f9:2a:7f:25:
d3:6a:dc:e3:74:55:3c:39:e1:b7:9d:df:db:55:60:
d1:91:de:9f:bc:f8:aa:f8:04:8f:c2:88:c4:19:7d:
90:67:6a:f3:19:6e:46:89:37:27:b3:bd:a7:50:53:
4f:23:5f:11:0d:ef:82:ab:16:90:dd:e4:3e:8a:8a:
13:b9:20:d4:a3:42:38:ad:c2:95:af:47:41:d2:34:
6d:9c:7b:00:56:65:3a:21:4a:9f:2b:1c:3a:15:68:
62:e8:5b:0e:82:2d:e6:c0:ac:36:74:af:19:6b:db:
85:9c:2b:57:e2:d1:71:c6:0e:ee:d4:af:cb:72:a4:
72:b1:bf:64:a2:6f:f9:c4:6a:ff:f4:ed:43:c6:1e:
48:04:22:a9:3b:23:05:61:e8:fe:27:b2:0f:f6:b8:
79:db:21:66:6f:7c:a0:61:c8:15:d8:ba:ef:de:a7:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:D3:C5:04:59:34:4E:56:07:14:69:15:8F:F5:06:F4:7A:9D:BF
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.64.0/22
Signature Algorithm: sha256WithRSAEncryption
76:25:ee:6b:04:7a:95:0b:48:6e:aa:15:f6:e2:59:0a:a6:9c:
0b:65:fe:46:42:26:13:c1:53:d8:99:be:4c:44:a0:60:e0:13:
bc:48:22:e0:0c:67:7c:51:ca:50:fa:0c:06:cd:da:79:7e:48:
e8:68:a1:86:c7:57:74:57:db:4b:8f:8f:42:2a:c8:13:92:42:
24:c0:98:8d:10:d0:70:cc:69:92:62:52:30:23:ac:77:2e:cf:
31:be:d2:74:24:e8:c3:d5:7a:39:b0:22:fe:99:23:3c:e2:1e:
34:89:db:20:b0:e4:cb:a2:ac:de:8f:0d:0d:bc:ee:f7:05:41:
13:9d:47:9b:7f:be:ad:f8:20:5f:a7:4e:56:d3:b1:ee:17:4c:
21:aa:ae:1f:81:4f:65:76:54:4e:55:8a:d7:25:5d:b3:fe:84:
d7:ec:3e:b4:ce:70:87:b9:74:85:a8:7c:5c:ce:d8:71:62:95:
ff:57:46:bc:f7:21:6f:9d:07:0f:0f:7a:17:5d:42:6c:f4:14:
a2:d8:e3:f0:4c:07:89:5d:e2:2d:0d:50:88:e2:45:2b:ee:5f:
f2:8f:9f:9d:82:5c:69:bb:8f:bb:26:d3:c2:84:ca:64:10:a1:
e1:1c:10:c3:f9:90:61:04:51:2e:0d:00:55:aa:c2:26:0e:90:
5a:ee:fd:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Cjhy7BUnKQbZO97Er4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGJmYjRhYzQ4ODYwMTFmMDZkOWRjNGVmZDQ1NTMzMjY0
ZWQ3ODgwHhcNMjUwMTAxMTc0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDRjZDNjNTA0NTkzNDRlNTYwNzE0NjkxNThmZjUwNmY0N2E5ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOeIne9uPgFa+rH63vwzoYirnA5H
zHJqOQCU6bFx7d5KeNV5mSvX3oHDOJ0qA+rOJ1ZgivixIm0XItqDNa7CsH5+3kmK
KSSkSTuU74lcZb0RPyjkyfkqfyXTatzjdFU8OeG3nd/bVWDRkd6fvPiq+ASPwojE
GX2QZ2rzGW5GiTcns72nUFNPI18RDe+CqxaQ3eQ+iooTuSDUo0I4rcKVr0dB0jRt
nHsAVmU6IUqfKxw6FWhi6FsOgi3mwKw2dK8Za9uFnCtX4tFxxg7u1K/LcqRysb9k
om/5xGr/9O1Dxh5IBCKpOyMFYej+J7IP9rh52yFmb3ygYcgV2Lrv3qcjcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1M08UEWTROVgcUaRWP9Qb0ep2/MB8GA1UdIwQY
MBaAFClL+0rEiGAR8G2dxO/UVTMmTteIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1Njkt
OTA5ZmU3YzgwZDk4LzEvdlV6VHhRUlpORTVXQnhScEZZXzFCdlI2bmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iMGRhMDYtMWJhNy00OWYwLWE1NjktOTA5ZmU3YzgwZDk4
LzEvS1V2N1NzU0lZQkh3YlozRTc5UlZNeVpPMTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8pAMA0G
CSqGSIb3DQEBCwUAA4IBAQB2Je5rBHqVC0huqhX24lkKppwLZf5GQiYTwVPYmb5M
RKBg4BO8SCLgDGd8UcpQ+gwGzdp5fkjoaKGGx1d0V9tLj49CKsgTkkIkwJiNENBw
zGmSYlIwI6x3Ls8xvtJ0JOjD1Xo5sCL+mSM84h40idsgsOTLoqzejw0NvO73BUET
nUebf76t+CBfp05W07HuF0whqq4fgU9ldlROVYrXJV2z/oTX7D60znCHuXSFqHxc
zthxYpX/V0a89yFvnQcPD3oXXUJs9BSi2OPwTAeJXeItDVCI4kUr7l/yj5+dglxp
u4+7JtPChMpkEKHhHBDD+ZBhBFEuDQBVqsImDpBa7v1w
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:27 2025 by rpki-client