Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa
File: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (raw, json)
Hash identifier: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=
Subject key identifier: BD:F4:EF:55:02:F3:54:34:AD:D8:BA:0D:D9:34:09:BB:AB:07:1E:46
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C649C370CD09FC938ACB9826F8AD
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199575
IP address blocks: 31.172.163.0/24 maxlen: 24
212.18.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c6:49:c3:70:cd:09:fc:93:8a:cb:98:26:f8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdf4ef5502f35434add8ba0dd93409bbab071e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:1d:3c:f0:bc:df:c3:a8:4d:1d:7d:20:76:
45:70:00:ee:a4:57:e7:da:71:52:86:86:74:38:36:
b9:f4:9d:55:3b:45:db:72:ea:c6:86:0a:bf:01:4c:
b9:60:b5:82:4a:5a:81:ec:51:9e:27:67:87:56:70:
b4:bd:8b:8b:78:79:ca:b8:be:9d:8b:1e:f7:ff:56:
2a:4d:70:95:af:09:21:2e:67:db:c2:33:65:22:e8:
0a:2a:13:cd:f2:fe:2a:0c:42:f1:fc:08:d1:c5:2b:
21:f3:76:9d:e3:7e:29:0a:22:6b:6f:60:69:8a:0e:
3d:fb:7b:d4:65:e9:c1:07:4b:a3:38:f0:02:90:98:
76:55:0d:4f:26:80:74:32:57:45:03:04:e8:37:e7:
f9:ab:b3:bd:25:7d:d7:f5:9f:e8:96:32:9b:ee:4e:
51:f4:68:10:ce:4b:a8:60:42:87:d7:41:b9:f7:82:
15:11:40:7d:bd:73:96:12:f8:c7:77:f9:9e:0b:08:
71:97:0a:15:01:eb:71:1a:3c:c5:da:38:bb:c5:92:
ac:50:20:55:93:47:fc:68:64:b8:df:6e:3e:01:81:
d3:21:fe:0e:ae:30:4e:48:a9:88:7f:c1:a2:b1:76:
f8:14:93:63:85:7b:ae:ae:48:fb:f4:c5:20:60:5f:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F4:EF:55:02:F3:54:34:AD:D8:BA:0D:D9:34:09:BB:AB:07:1E:46
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.163.0/24
212.18.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bd:e6:0e:c5:a1:d3:72:71:e6:77:8c:5e:a1:ee:84:c0:b3:
87:bc:85:d0:24:d7:6e:a0:b7:d9:e2:33:38:25:9b:2f:83:9a:
87:97:cd:c7:8d:01:ac:8e:4f:9c:cf:41:84:b6:bd:d8:55:72:
87:e0:c1:67:6f:c6:09:c3:06:30:81:32:2c:90:fb:6f:1b:1e:
f8:09:70:2d:37:6c:bd:48:86:29:3f:90:1a:dd:d8:e4:f3:ad:
49:26:95:3c:5b:db:48:ce:04:ae:c1:47:f7:c7:10:bc:ec:6d:
96:76:2d:a2:71:08:34:37:63:98:76:9a:f4:f0:27:42:fa:44:
aa:df:b5:a6:9a:48:69:fc:25:a6:60:4a:a4:66:fe:92:f7:d7:
6d:da:97:88:ed:fa:39:e8:45:7a:cd:a0:d4:36:70:39:3e:b9:
c4:ae:98:9b:90:a8:57:13:f2:c0:2f:07:09:7f:0d:ff:d2:0d:
66:56:b0:68:ef:8f:bc:bf:91:4f:d8:5c:f2:9b:dd:c0:ad:55:
f1:e3:cd:e5:c2:c7:ed:36:26:83:f3:ea:2c:11:89:d4:5b:99:
e0:a8:75:d4:06:54:35:21:73:66:4e:82:0a:a8:23:72:00:ae:
96:2d:72:33:ba:a5:95:3f:58:49:65:ae:a9:2b:ce:96:2b:68:
9b:ed:36:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIcZJw3DNCfyTisuYJvitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjUwMTAyMDM0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGY0ZWY1NTAyZjM1NDM0YWRkOGJhMGRkOTM0MDliYmFiMDcxZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hEdPPC838OoTR19IHZFcADupFfn
2nFShoZ0ODa59J1VO0XbcurGhgq/AUy5YLWCSlqB7FGeJ2eHVnC0vYuLeHnKuL6d
ix73/1YqTXCVrwkhLmfbwjNlIugKKhPN8v4qDELx/AjRxSsh83ad434pCiJrb2Bp
ig49+3vUZenBB0ujOPACkJh2VQ1PJoB0MldFAwToN+f5q7O9JX3X9Z/oljKb7k5R
9GgQzkuoYEKH10G594IVEUB9vXOWEvjHd/meCwhxlwoVAetxGjzF2ji7xZKsUCBV
k0f8aGS4324+AYHTIf4OrjBOSKmIf8GisXb4FJNjhXuurkj79MUgYF92YQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL3071UC81Q0rdi6Ddk0CburBx5GMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvdmZUdlZRTHpWRFN0MkxvTjJUUUp1NnNISGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH6yjAwQA
1BL2MA0GCSqGSIb3DQEBCwUAA4IBAQBdveYOxaHTcnHmd4xeoe6EwLOHvIXQJNdu
oLfZ4jM4JZsvg5qHl83HjQGsjk+cz0GEtr3YVXKH4MFnb8YJwwYwgTIskPtvGx74
CXAtN2y9SIYpP5Aa3djk861JJpU8W9tIzgSuwUf3xxC87G2Wdi2icQg0N2OYdpr0
8CdC+kSq37Wmmkhp/CWmYEqkZv6S99dt2peI7fo56EV6zaDUNnA5PrnErpibkKhX
E/LALwcJfw3/0g1mVrBo74+8v5FP2Fzym93ArVXx483lwsftNiaD8+osEYnUW5ng
qHXUBlQ1IXNmToIKqCNyAK6WLXIzuqWVP1hJZa6pK86WK2ib7Tbj
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:29:39 2025 by rpki-client