Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/vKqft3GpUgOOXSf2VjTKls-pWMw.roa
File: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (raw, json)
Hash identifier: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=
Subject key identifier: BC:AA:9F:B7:71:A9:52:03:8E:5D:27:F6:56:34:CA:96:CF:A9:58:CC
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 0194228D51C7841F8933E41D717B58182D9B
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/vKqft3GpUgOOXSf2VjTKls-pWMw.roa
Signing time: Wed 01 Jan 2025 15:47:54 +0000
ROA not before: Wed 01 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 185.197.196.0/24 maxlen: 24
185.197.197.0/24 maxlen: 24
185.197.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:51:c7:84:1f:89:33:e4:1d:71:7b:58:18:2d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Jan 1 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcaa9fb771a952038e5d27f65634ca96cfa958cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:6b:d8:8f:c9:7f:a9:70:0e:b0:f0:bb:f0:
c3:43:a1:48:10:23:59:45:ff:9b:3e:57:e7:29:b4:
d2:44:21:93:78:e1:1c:16:9a:9a:58:fc:9e:56:58:
2e:ff:aa:63:c1:b8:c6:96:3b:37:a1:5b:a6:66:57:
78:e0:e5:8e:8f:cb:ff:60:c5:f8:35:98:a9:89:35:
71:73:00:33:1f:85:f3:77:2f:b5:a7:f9:ec:76:cb:
98:d0:13:93:ab:5d:37:d5:27:71:9a:b3:3c:4a:02:
83:72:a1:ce:8d:67:ef:98:64:5a:99:6e:cd:c3:90:
2a:fa:86:4b:69:65:5e:d6:ad:70:bc:34:d2:5f:6f:
9e:8a:78:90:af:a2:81:a8:93:40:e6:c1:53:d2:e6:
0e:dc:06:ed:24:ec:df:ec:2d:9a:f1:72:fa:18:82:
4a:7f:1d:a9:a1:7a:09:7d:c3:ff:80:6b:4e:17:b6:
ca:cf:dc:55:07:aa:63:ed:60:b3:98:4c:83:32:ff:
1a:d1:89:a8:85:22:e6:76:96:b7:4f:f7:78:63:fe:
ce:5e:f7:8e:9e:76:ac:cb:b6:24:0f:47:7c:c6:04:
07:63:c1:1b:8d:db:23:95:d3:32:1c:ab:f3:dc:2a:
dd:95:69:9b:75:73:73:e3:8f:29:09:e5:25:78:96:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AA:9F:B7:71:A9:52:03:8E:5D:27:F6:56:34:CA:96:CF:A9:58:CC
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/vKqft3GpUgOOXSf2VjTKls-pWMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.196.0-185.197.198.255
Signature Algorithm: sha256WithRSAEncryption
8a:34:4b:a2:9c:9f:b4:39:a7:ed:9f:e4:35:d8:c8:27:72:c2:
d2:c4:dc:43:6c:03:bc:79:a2:f4:7f:8f:a0:ed:8b:80:e4:f5:
39:80:36:e4:07:17:e9:98:c3:d8:f8:90:8e:84:6a:83:e3:62:
e0:e2:17:15:51:1b:9d:28:cf:cc:34:ce:6e:95:9c:c2:5c:62:
9f:f2:27:cc:8b:4d:40:9b:97:57:a7:91:a5:02:87:d9:dc:dc:
3c:3a:b4:a1:50:0a:8a:e5:91:ce:66:1e:cd:34:e6:bb:aa:8d:
92:41:6a:64:b0:65:b0:0d:b7:ab:3f:08:dd:a3:a4:a5:9a:7e:
6e:00:f1:b7:21:d8:22:07:ec:e8:fe:20:e8:85:ab:2e:39:eb:
39:41:0c:34:74:3b:6c:a5:c7:98:87:62:12:4a:f3:20:18:ed:
59:4b:2e:2b:33:f7:99:66:59:f6:be:bf:33:70:3a:2c:46:37:
e9:52:9f:8d:0a:e6:7e:5e:19:3d:5a:3e:fc:1a:18:c3:7c:0c:
29:33:98:cd:b5:eb:a7:26:89:50:5b:7a:97:58:db:d5:33:91:
23:61:d5:48:34:46:51:ee:09:53:b4:de:52:9b:be:1c:77:92:
ff:41:91:f7:b4:50:4e:53:5d:36:36:5d:15:56:1e:8e:18:a5:
78:64:34:2b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQijVHHhB+JM+QdcXtYGC2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz
YmVjZWYwHhcNMjUwMTAxMTU0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2FhOWZiNzcxYTk1MjAzOGU1ZDI3ZjY1NjM0Y2E5NmNmYTk1OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwVr2I/Jf6lwDrDwu/DDQ6FIECNZ
Rf+bPlfnKbTSRCGTeOEcFpqaWPyeVlgu/6pjwbjGljs3oVumZld44OWOj8v/YMX4
NZipiTVxcwAzH4Xzdy+1p/nsdsuY0BOTq1031SdxmrM8SgKDcqHOjWfvmGRamW7N
w5Aq+oZLaWVe1q1wvDTSX2+einiQr6KBqJNA5sFT0uYO3AbtJOzf7C2a8XL6GIJK
fx2poXoJfcP/gGtOF7bKz9xVB6pj7WCzmEyDMv8a0YmohSLmdpa3T/d4Y/7OXveO
nnasy7YkD0d8xgQHY8EbjdsjldMyHKvz3CrdlWmbdXNz448pCeUleJYwQQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLyqn7dxqVIDjl0n9lY0ypbPqVjMMB8GA1UdIwQY
MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt
MzBkZjYyNDI5ZGYwLzEvdktxZnQzR3BVZ09PWFNmMlZqVEtscy1wV013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw
LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5xcQD
BAC5xcYwDQYJKoZIhvcNAQELBQADggEBAIo0S6Kcn7Q5p+2f5DXYyCdywtLE3ENs
A7x5ovR/j6Dti4Dk9TmANuQHF+mYw9j4kI6EaoPjYuDiFxVRG50oz8w0zm6VnMJc
Yp/yJ8yLTUCbl1enkaUCh9nc3Dw6tKFQCorlkc5mHs005ruqjZJBamSwZbANt6s/
CN2jpKWafm4A8bch2CIH7Oj+IOiFqy456zlBDDR0O2ylx5iHYhJK8yAY7VlLLisz
95lmWfa+vzNwOixGN+lSn40K5n5eGT1aPvwaGMN8DCkzmM2166cmiVBbepdY29Uz
kSNh1Ug0RlHuCVO03lKbvhx3kv9Bkfe0UE5TXTY2XRVWHo4YpXhkNCs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:58 2025 by rpki-client