Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa
File: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (raw, json)
Hash identifier: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=
Subject key identifier: BC:FE:CE:04:1C:BA:45:CF:A2:5C:2C:E9:36:DA:AA:C3:06:91:EA:90
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 0195FFA9C049FF5FE0AE4EF6C52C77B3ED8A
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa
Signing time: Fri 04 Apr 2025 07:17:49 +0000
ROA not before: Fri 04 Apr 2025 07:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 193.8.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:a9:c0:49:ff:5f:e0:ae:4e:f6:c5:2c:77:b3:ed:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Apr 4 07:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcfece041cba45cfa25c2ce936daaac30691ea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:4c:c4:b6:5a:57:28:61:f0:fc:77:bc:0e:
92:4e:ed:3d:3f:c7:94:e1:23:fa:f5:d2:fa:4c:67:
8f:ef:bc:06:bd:7a:fc:d5:91:c4:82:71:56:4f:ef:
20:76:49:45:6b:3d:8f:8b:fb:89:66:2e:58:57:19:
0e:f4:7a:d5:e2:08:d6:f9:cf:d3:2c:77:df:eb:64:
78:da:29:d9:23:47:16:52:c7:fb:f8:d8:9a:8a:bd:
dd:10:0a:32:97:39:57:46:db:e5:39:02:84:d1:ef:
da:4f:76:7e:33:94:0f:63:6e:dd:d7:1d:3e:8f:94:
2b:c9:ad:a4:78:81:25:76:74:36:77:cb:83:aa:f0:
06:38:16:d8:21:e5:d3:8a:f1:12:25:1e:11:c4:ac:
54:c6:29:17:fa:b2:53:20:b6:10:b0:1a:44:76:00:
51:e6:5d:42:90:db:07:73:d7:3a:fb:6a:da:e2:de:
ce:50:43:69:b5:d8:80:ef:c4:ab:32:ab:d8:b9:89:
29:9a:59:6b:3e:8c:cf:46:29:74:9f:8f:92:bb:85:
6e:1d:41:e4:da:27:8f:b9:43:f5:40:6b:06:b2:57:
25:26:ba:a6:a6:8a:dc:74:ca:c0:2d:df:ac:ab:ed:
fe:47:cd:7c:d1:2b:08:5b:d6:45:67:03:6a:11:e0:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FE:CE:04:1C:BA:45:CF:A2:5C:2C:E9:36:DA:AA:C3:06:91:EA:90
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.132.0/22
Signature Algorithm: sha256WithRSAEncryption
33:5f:d7:3b:fb:4b:ac:05:be:f5:5e:7d:1f:22:60:d8:64:80:
66:8b:6f:7d:16:be:81:79:9e:f4:5d:70:9d:47:45:05:8d:ad:
f4:fc:83:ef:8b:cf:f4:fa:12:2d:03:f7:fb:43:d9:c7:10:4d:
1b:58:c8:8d:48:d7:86:cd:73:41:51:10:26:b4:9c:80:c1:25:
f9:c5:a3:15:82:4c:0a:c9:09:f1:64:76:bc:e9:5e:37:a3:c4:
08:ea:3b:45:64:33:c9:ee:d6:b7:8d:58:2f:9d:29:1c:0f:50:
fb:89:19:19:cb:5a:9e:d5:42:16:cf:ed:94:83:23:23:4c:31:
63:db:38:92:44:81:c5:98:88:bc:b1:1f:63:2e:5a:9d:72:34:
37:c8:09:46:85:75:72:a3:9c:f8:72:8d:10:39:15:d9:79:28:
30:d3:24:46:d5:d5:b2:ab:81:fe:1c:13:b9:d8:da:c0:d8:74:
48:48:ff:62:22:04:57:e5:7a:0d:00:cb:ea:b0:6e:1a:1a:3b:
70:f9:1f:f6:e4:b3:76:71:c4:ab:85:ce:33:c2:f1:ca:4a:43:
5a:9d:c1:16:78:42:97:c1:8b:31:b9:07:04:bb:10:43:f0:6f:
a1:9a:3a:76:4b:96:7a:2e:94:a0:fa:1c:b3:87:97:c0:1b:4e:
83:6d:76:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX/qcBJ/1/grk72xSx3s+2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTU4MjAzZGEzYTFlOTYzMThlODUwNDM0MTFlN2Q0ZDAz
ZDRjNDQwHhcNMjUwNDA0MDcxNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZlY2UwNDFjYmE0NWNmYTI1YzJjZTkzNmRhYWFjMzA2OTFlYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte9MxLZaVyhh8Px3vA6STu09P8eU
4SP69dL6TGeP77wGvXr81ZHEgnFWT+8gdklFaz2Pi/uJZi5YVxkO9HrV4gjW+c/T
LHff62R42inZI0cWUsf7+Niair3dEAoylzlXRtvlOQKE0e/aT3Z+M5QPY27d1x0+
j5Qrya2keIEldnQ2d8uDqvAGOBbYIeXTivESJR4RxKxUxikX+rJTILYQsBpEdgBR
5l1CkNsHc9c6+2ra4t7OUENptdiA78SrMqvYuYkpmllrPozPRil0n4+Su4VuHUHk
2iePuUP1QGsGslclJrqmporcdMrALd+sq+3+R8180SsIW9ZFZwNqEeCSgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLz+zgQcukXPolws6TbaqsMGkeqQMB8GA1UdIwQY
MBaAFFQVggPaOh6WMY6FBDQR59TQPUxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMt
MWE1NWQxZTRjMjFjLzEvdlA3T0JCeTZSYy1pWEN6cE50cXF3d2FSNnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMtMWE1NWQxZTRjMjFj
LzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwQiEMA0G
CSqGSIb3DQEBCwUAA4IBAQAzX9c7+0usBb71Xn0fImDYZIBmi299Fr6BeZ70XXCd
R0UFja30/IPvi8/0+hItA/f7Q9nHEE0bWMiNSNeGzXNBURAmtJyAwSX5xaMVgkwK
yQnxZHa86V43o8QI6jtFZDPJ7ta3jVgvnSkcD1D7iRkZy1qe1UIWz+2UgyMjTDFj
2ziSRIHFmIi8sR9jLlqdcjQ3yAlGhXVyo5z4co0QORXZeSgw0yRG1dWyq4H+HBO5
2NrA2HRISP9iIgRX5XoNAMvqsG4aGjtw+R/25LN2ccSrhc4zwvHKSkNancEWeEKX
wYsxuQcEuxBD8G+hmjp2S5Z6LpSg+hyzh5fAG06DbXaV
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net