Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/VvVPRq1jZpLdr3MzXS-x3hE8E_0.roa
File: VvVPRq1jZpLdr3MzXS-x3hE8E_0.roa (raw, json)
Hash identifier: VKU6Ig/tSciCFN9BXLEvDkCnzuEOw89eJVZejOa6g+0=
Subject key identifier: 56:F5:4F:46:AD:63:66:92:DD:AF:73:33:5D:2F:B1:DE:11:3C:13:FD
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F9690C462E047D0E9787804F13F7C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/VvVPRq1jZpLdr3MzXS-x3hE8E_0.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397451
IP address blocks: 85.204.196.0/23 maxlen: 23
89.46.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:96:90:c4:62:e0:47:d0:e9:78:78:04:f1:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56f54f46ad636692ddaf73335d2fb1de113c13fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:bf:16:9a:0b:54:9c:38:4b:74:5a:14:3e:
c7:39:9e:f3:d3:ad:9f:70:57:9e:d2:e9:00:3e:50:
8a:40:75:0c:82:7e:ee:47:18:f7:44:8e:98:1a:20:
a0:a3:79:a6:40:af:20:01:42:d3:78:d8:1b:fb:35:
50:01:71:bd:4c:83:12:39:54:af:da:66:6c:a0:4f:
36:e5:53:36:ee:9f:ef:ef:2d:a1:d9:a7:a7:58:fd:
e1:5b:f0:a9:b5:9d:7b:6a:c2:3e:93:ec:89:8a:cf:
29:85:0e:0d:8d:c1:86:d9:16:36:99:34:79:2a:d8:
28:22:a5:01:12:78:a8:77:7f:68:c4:67:5c:33:89:
38:58:6f:63:5a:32:63:18:db:5d:f9:f0:be:03:7f:
41:ab:39:3c:ab:00:c1:a3:e7:a9:fd:dc:08:f9:71:
fa:de:07:40:85:1d:e4:26:7d:cf:6b:91:f4:34:5f:
7d:bf:30:d5:67:f1:53:d3:33:5b:eb:ba:40:64:e4:
ee:59:e7:f5:c0:6d:d2:42:92:62:a9:e9:9e:f5:3d:
eb:23:52:fa:72:46:09:3c:37:4d:e4:aa:01:f3:1b:
55:6d:7a:f6:34:e1:c8:3f:00:6a:36:2c:f6:0c:01:
a7:8d:9d:3d:f9:a7:9c:a8:08:de:55:6b:91:74:1c:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F5:4F:46:AD:63:66:92:DD:AF:73:33:5D:2F:B1:DE:11:3C:13:FD
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/VvVPRq1jZpLdr3MzXS-x3hE8E_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.196.0/23
89.46.112.0/23
Signature Algorithm: sha256WithRSAEncryption
78:f7:88:60:74:43:16:a4:a5:7e:fa:50:f0:ff:12:c1:cd:71:
4e:54:95:e6:cd:51:17:e3:e9:cf:93:c6:8c:fa:ed:33:9e:10:
d0:ea:61:bc:a9:2c:07:b8:52:c6:1a:64:9c:b4:39:2f:a6:69:
99:b1:08:e6:5f:ed:00:24:76:50:9d:3a:1b:d9:f3:3b:80:76:
44:73:81:78:25:71:a7:76:34:b9:15:74:57:7f:5e:66:5b:70:
3d:0d:25:81:d4:74:e9:dc:65:81:0e:65:68:65:4a:b9:cb:e8:
3f:38:e0:aa:64:fa:67:45:a4:a3:dd:96:a9:69:6a:21:84:f7:
ed:a4:cf:01:27:c0:1d:18:1c:3d:2b:96:fb:17:3c:c0:98:96:
fe:99:51:5a:77:44:a0:4e:1d:df:55:3b:72:10:aa:99:7a:ed:
a8:e9:2a:da:c1:0d:39:71:36:65:ec:e3:ae:47:8f:3a:c3:da:
32:9f:87:d2:0f:6d:71:8e:f8:31:e1:cc:d0:fc:56:ed:61:52:
1a:b6:38:6f:39:3b:a5:48:ae:a9:97:04:51:73:c5:15:32:dd:
97:79:e2:a2:8b:b0:ed:c7:37:01:8b:6a:fb:e2:9e:5b:fb:e9:
9d:4d:ce:49:3e:b2:b8:cc:7c:ca:dd:d9:78:61:50:1c:5c:04:
33:78:fd:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj5aQxGLgR9DpeHgE8T98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwMTAyMDU0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmY1NGY0NmFkNjM2NjkyZGRhZjczMzM1ZDJmYjFkZTExM2MxM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOG/FpoLVJw4S3RaFD7HOZ7z062f
cFee0ukAPlCKQHUMgn7uRxj3RI6YGiCgo3mmQK8gAULTeNgb+zVQAXG9TIMSOVSv
2mZsoE825VM27p/v7y2h2aenWP3hW/CptZ17asI+k+yJis8phQ4NjcGG2RY2mTR5
KtgoIqUBEniod39oxGdcM4k4WG9jWjJjGNtd+fC+A39Bqzk8qwDBo+ep/dwI+XH6
3gdAhR3kJn3Pa5H0NF99vzDVZ/FT0zNb67pAZOTuWef1wG3SQpJiqeme9T3rI1L6
ckYJPDdN5KoB8xtVbXr2NOHIPwBqNiz2DAGnjZ09+aecqAjeVWuRdBxotQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFb1T0atY2aS3a9zM10vsd4RPBP9MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvVnZWUFJxMWpacExkcjNNelhTLXgzaEU4RV8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVczEAwQB
WS5wMA0GCSqGSIb3DQEBCwUAA4IBAQB494hgdEMWpKV++lDw/xLBzXFOVJXmzVEX
4+nPk8aM+u0znhDQ6mG8qSwHuFLGGmSctDkvpmmZsQjmX+0AJHZQnTob2fM7gHZE
c4F4JXGndjS5FXRXf15mW3A9DSWB1HTp3GWBDmVoZUq5y+g/OOCqZPpnRaSj3Zap
aWohhPftpM8BJ8AdGBw9K5b7FzzAmJb+mVFad0SgTh3fVTtyEKqZeu2o6SrawQ05
cTZl7OOuR486w9oyn4fSD21xjvgx4czQ/FbtYVIatjhvOTulSK6plwRRc8UVMt2X
eeKii7DtxzcBi2r74p5b++mdTc5JPrK4zHzK3dl4YVAcXAQzeP38
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:46 2025 by rpki-client