Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/vzGcID_N34zQFrVI3nMugUoVewA.roa
File: vzGcID_N34zQFrVI3nMugUoVewA.roa (raw, json)
Hash identifier: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=
Subject key identifier: BF:31:9C:20:3F:CD:DF:8C:D0:16:B5:48:DE:73:2E:81:4A:15:7B:00
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0194282435886A3A26AE268762867C21AAD7
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/vzGcID_N34zQFrVI3nMugUoVewA.roa
Signing time: Thu 02 Jan 2025 17:50:49 +0000
ROA not before: Thu 02 Jan 2025 17:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139471
IP address blocks: 45.157.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:35:88:6a:3a:26:ae:26:87:62:86:7c:21:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 2 17:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf319c203fcddf8cd016b548de732e814a157b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:0f:54:70:0e:56:73:58:a4:79:16:d3:8c:
f2:1a:b6:86:3a:58:92:c6:13:c6:41:b6:ba:0e:fa:
ea:4c:ea:24:c1:b0:97:a8:b5:3f:b7:a7:34:a9:0d:
f4:9d:1f:c2:50:15:a5:41:83:95:16:c7:21:f6:0d:
8e:a5:19:a1:1b:84:e9:5b:a4:33:e9:30:5a:27:5c:
78:66:b9:b3:61:a3:8e:7b:15:ae:98:4a:f7:ff:85:
ad:bb:49:95:8c:52:84:31:c1:42:f3:10:06:25:17:
76:3b:df:e4:58:c1:35:87:a4:d3:0a:4f:7d:38:f5:
a4:64:85:6e:7e:0e:6e:c2:ca:9b:ee:01:56:5c:54:
e3:e4:52:0b:e5:50:e5:bf:75:18:cf:a4:d9:dd:bf:
2c:b7:00:4c:69:a0:77:1b:17:42:89:a9:ff:99:e0:
97:a7:a0:ad:1f:68:b2:45:d9:20:d1:43:49:e4:2e:
a3:be:5b:50:5b:ae:3d:49:4b:5c:16:8a:cb:7f:54:
07:d5:9e:2e:2a:23:9b:b7:ce:6e:e8:a3:70:78:8b:
13:d0:c0:ba:3e:2c:b8:20:4e:02:e6:64:a6:1d:a4:
eb:33:17:fc:31:8a:77:81:d4:d4:38:2f:6b:77:bd:
ad:d2:43:5d:c8:98:fc:d5:b2:29:26:e9:5b:a0:7f:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:9C:20:3F:CD:DF:8C:D0:16:B5:48:DE:73:2E:81:4A:15:7B:00
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/vzGcID_N34zQFrVI3nMugUoVewA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c1:10:78:7e:02:da:f0:3d:9f:16:0b:46:a3:24:47:fd:a8:
59:00:4b:b9:09:5d:3f:59:11:61:b5:2c:d2:ff:30:71:2c:69:
b2:1f:1b:f5:45:55:7a:18:b6:cd:89:05:b2:3a:ec:9d:4a:cd:
94:2d:8e:6d:3e:a7:88:5c:e6:86:79:f7:40:e8:22:2f:df:14:
13:d0:3a:af:25:84:c8:e9:3e:1c:61:0b:e5:30:fd:ea:9d:ae:
de:f8:47:1f:6d:11:3f:df:d4:86:0e:3d:16:fa:ff:d8:78:eb:
35:bb:d2:85:74:65:9c:b9:ad:0f:51:1b:3f:d8:f3:01:8a:55:
92:79:af:97:69:4d:e1:d7:96:8c:c6:53:c4:03:fa:2c:f8:d9:
7a:7a:5b:f9:c9:8c:54:8c:7e:69:a0:3a:1b:ac:70:0b:6c:49:
11:dd:1d:d2:79:95:18:ee:bd:7d:8a:d9:02:c0:c8:60:5a:9d:
8f:93:7c:c0:fd:d3:5e:33:b9:61:49:aa:16:ad:ca:9f:c8:75:
e2:1a:40:26:15:0d:79:f1:26:d8:c8:e5:04:e5:06:93:4b:e0:
2b:d7:02:24:b4:0c:a0:bc:6e:be:02:a1:17:35:89:1e:49:1f:
c4:13:76:14:39:e4:22:7e:4e:a2:28:bb:e4:3f:d9:36:df:84:
3a:80:a5:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJDWIajomriaHYoZ8IarXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi
M2FhZWYwHhcNMjUwMTAyMTc1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjMxOWMyMDNmY2RkZjhjZDAxNmI1NDhkZTczMmU4MTRhMTU3YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0wPVHAOVnNYpHkW04zyGraGOliS
xhPGQba6DvrqTOokwbCXqLU/t6c0qQ30nR/CUBWlQYOVFsch9g2OpRmhG4TpW6Qz
6TBaJ1x4ZrmzYaOOexWumEr3/4Wtu0mVjFKEMcFC8xAGJRd2O9/kWME1h6TTCk99
OPWkZIVufg5uwsqb7gFWXFTj5FIL5VDlv3UYz6TZ3b8stwBMaaB3GxdCian/meCX
p6CtH2iyRdkg0UNJ5C6jvltQW649SUtcForLf1QH1Z4uKiObt85u6KNweIsT0MC6
Piy4IE4C5mSmHaTrMxf8MYp3gdTUOC9rd72t0kNdyJj81bIpJulboH8nxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL8xnCA/zd+M0Ba1SN5zLoFKFXsAMB8GA1UdIwQY
MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt
ZGZjYmRmM2IxMDU4LzEvdnpHY0lEX04zNHpRRnJWSTNuTXVnVW9WZXdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4
LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ1EMA0G
CSqGSIb3DQEBCwUAA4IBAQBswRB4fgLa8D2fFgtGoyRH/ahZAEu5CV0/WRFhtSzS
/zBxLGmyHxv1RVV6GLbNiQWyOuydSs2ULY5tPqeIXOaGefdA6CIv3xQT0DqvJYTI
6T4cYQvlMP3qna7e+EcfbRE/39SGDj0W+v/YeOs1u9KFdGWcua0PURs/2PMBilWS
ea+XaU3h15aMxlPEA/os+Nl6elv5yYxUjH5poDobrHALbEkR3R3SeZUY7r19itkC
wMhgWp2Pk3zA/dNeM7lhSaoWrcqfyHXiGkAmFQ158SbYyOUE5QaTS+Ar1wIktAyg
vG6+AqEXNYkeSR/EE3YUOeQifk6iKLvkP9k234Q6gKXZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:08 2025 by rpki-client