Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vmGNoaZkc0RpcPZUIyJcJ7BesIo.roa
File: vmGNoaZkc0RpcPZUIyJcJ7BesIo.roa (raw, json)
Hash identifier: Zg6yxb1tuY9B+jYsKFRv6FJ/LuB0vLN1KDuuq2T0T4M=
Subject key identifier: BE:61:8D:A1:A6:64:73:44:69:70:F6:54:23:22:5C:27:B0:5E:B0:8A
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F0F0EF5AEFFEFC3396193313FCED
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vmGNoaZkc0RpcPZUIyJcJ7BesIo.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212653
IP address blocks: 83.143.117.0/24 maxlen: 24
185.185.43.0/24 maxlen: 24
193.34.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:f0:ef:5a:ef:fe:fc:33:96:19:33:13:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be618da1a66473446970f65423225c27b05eb08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:35:6b:fc:58:ae:e8:8f:cc:c3:9a:28:91:
73:95:59:e0:e1:f1:e4:82:8e:df:86:64:51:e5:6b:
3e:f8:34:f8:e9:1c:26:a1:ce:92:ee:27:02:f1:4f:
ca:f5:02:f8:e3:88:02:16:d5:3b:e2:f8:fd:f8:85:
cf:eb:3a:62:55:79:92:5f:22:19:cf:7d:a5:78:1e:
78:d3:80:6b:1f:be:fa:df:4d:1a:79:af:8c:cb:aa:
48:64:c1:77:2b:1b:74:59:38:b4:f8:c8:52:4d:56:
f1:98:be:59:37:5c:e8:64:42:3e:b1:8d:04:d9:f4:
c8:b4:fe:5d:6b:1e:20:2c:9f:c0:ca:f7:1d:2d:dc:
48:3b:27:1b:c1:2a:13:6c:52:ca:8a:09:40:be:9c:
bb:95:b6:1d:e8:b5:06:81:fb:1f:ea:e3:fe:9f:a4:
f6:ee:79:77:8a:d8:3e:95:95:eb:b0:18:1e:e9:a1:
a4:bb:e8:53:f7:c5:3e:24:fe:1a:97:01:05:7f:f0:
ca:ad:2b:c6:d6:37:e8:d2:09:96:b7:0a:2c:93:e7:
39:46:e6:78:00:3c:f6:88:e8:a2:a7:1e:1a:f6:0b:
0c:78:a1:5a:1e:9f:0a:5c:38:c3:30:b0:2f:9a:4f:
1f:44:da:97:ba:99:38:fa:d6:04:b6:5f:28:5f:b3:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:8D:A1:A6:64:73:44:69:70:F6:54:23:22:5C:27:B0:5E:B0:8A
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vmGNoaZkc0RpcPZUIyJcJ7BesIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.117.0/24
185.185.43.0/24
193.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b1:0d:91:3d:9e:42:58:2f:68:e4:25:11:4d:6a:d4:7f:ee:
e2:ca:b7:80:27:ee:33:3d:a8:ff:c4:99:77:cf:08:d3:8f:f7:
b6:c9:b4:fb:b4:25:fb:b1:9c:29:16:2b:d0:0f:16:78:47:75:
8d:3f:2f:e1:96:b6:c0:ab:30:73:28:e4:f7:02:1b:83:16:de:
a0:c9:00:19:ec:67:f0:c4:6a:60:7e:52:d9:fd:8c:37:7a:9a:
73:86:a4:9c:e7:8d:85:d5:99:2f:64:a5:25:9a:93:b2:c2:7e:
1d:f9:7b:e8:46:a3:27:4d:da:35:87:2a:af:4b:da:ab:dc:b9:
80:50:25:43:0b:9a:e5:15:5a:0d:63:e9:2a:70:1d:47:22:f7:
37:71:84:c4:1e:bc:26:04:ee:8c:f7:ba:5f:28:80:03:c9:73:
d8:7c:5a:02:8d:b4:27:86:29:7e:a3:b6:16:f9:3f:86:66:5f:
4b:51:79:ac:d4:48:4c:a3:99:47:b9:9b:4d:3a:44:89:52:3e:
bd:47:c6:ca:ea:c0:2e:fd:18:22:85:e3:04:ac:58:b3:ee:fe:
4f:41:96:7b:10:83:29:a3:cd:5a:17:69:b5:23:7f:d7:d5:01:
bb:0a:07:02:70:0c:c2:48:e2:34:3a:2b:0e:c0:1d:dc:9a:58:
30:75:b2:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR/Dw71rv/vwzlhkzE/ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjUwMTAyMTM1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTYxOGRhMWE2NjQ3MzQ0Njk3MGY2NTQyMzIyNWMyN2IwNWViMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQY1a/xYruiPzMOaKJFzlVng4fHk
go7fhmRR5Ws++DT46Rwmoc6S7icC8U/K9QL444gCFtU74vj9+IXP6zpiVXmSXyIZ
z32leB5404BrH776300aea+My6pIZMF3Kxt0WTi0+MhSTVbxmL5ZN1zoZEI+sY0E
2fTItP5dax4gLJ/AyvcdLdxIOycbwSoTbFLKiglAvpy7lbYd6LUGgfsf6uP+n6T2
7nl3itg+lZXrsBge6aGku+hT98U+JP4alwEFf/DKrSvG1jfo0gmWtwosk+c5RuZ4
ADz2iOiipx4a9gsMeKFaHp8KXDjDMLAvmk8fRNqXupk4+tYEtl8oX7MqpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL5hjaGmZHNEaXD2VCMiXCewXrCKMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvdm1HTm9hWmtjMFJwY1BaVUl5SmNKN0Jlc0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU491AwQA
ubkrAwQAwSJPMA0GCSqGSIb3DQEBCwUAA4IBAQCPsQ2RPZ5CWC9o5CURTWrUf+7i
yreAJ+4zPaj/xJl3zwjTj/e2ybT7tCX7sZwpFivQDxZ4R3WNPy/hlrbAqzBzKOT3
AhuDFt6gyQAZ7GfwxGpgflLZ/Yw3eppzhqSc542F1ZkvZKUlmpOywn4d+XvoRqMn
Tdo1hyqvS9qr3LmAUCVDC5rlFVoNY+kqcB1HIvc3cYTEHrwmBO6M97pfKIADyXPY
fFoCjbQnhil+o7YW+T+GZl9LUXms1EhMo5lHuZtNOkSJUj69R8bK6sAu/RgiheME
rFiz7v5PQZZ7EIMpo81aF2m1I3/X1QG7CgcCcAzCSOI0OisOwB3cmlgwdbJN
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:40 2025 by rpki-client