Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/VePNnZf_WKQmlZFwQM15Wh8Fn4w.roa
File: VePNnZf_WKQmlZFwQM15Wh8Fn4w.roa (raw, json)
Hash identifier: hr5b6JhCYfM1DDABpm1H2u2vEfw3Ty+9UiPHEMUfWdg=
Subject key identifier: 55:E3:CD:9D:97:FF:58:A4:26:95:91:70:40:CD:79:5A:1F:05:9F:8C
Certificate issuer: /CN=de1b9ca1f3f157d7ff537ed34597f7c33707ccb3
Certificate serial: 018682F2CAADED1721B03C159AFAED425DCB
Authority key identifier: DE:1B:9C:A1:F3:F1:57:D7:FF:53:7E:D3:45:97:F7:C3:37:07:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hucofPxV9f_U37TRZf3wzcHzLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/VePNnZf_WKQmlZFwQM15Wh8Fn4w.roa
Signing time: Fri 24 Feb 2023 10:23:15 +0000
ROA not before: Fri 24 Feb 2023 10:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 212.23.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:f2:ca:ad:ed:17:21:b0:3c:15:9a:fa:ed:42:5d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1b9ca1f3f157d7ff537ed34597f7c33707ccb3
Validity
Not Before: Feb 24 10:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e3cd9d97ff58a42695917040cd795a1f059f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:4e:9d:c3:64:b5:3e:00:24:6d:c5:6c:d9:
69:16:03:d7:c5:e4:6f:ac:9c:01:a4:47:bf:3b:a1:
88:ed:63:ba:00:f8:57:db:e5:69:43:b4:64:67:05:
9e:41:cd:5a:41:78:26:92:c0:9e:e8:8f:2b:65:0b:
25:c1:42:00:86:78:3c:3b:ed:75:25:91:3f:c0:eb:
02:26:b4:4d:53:e5:32:34:d8:a9:87:8b:eb:eb:0d:
c2:6d:09:83:7d:81:12:47:d1:6b:c6:e8:10:c3:5e:
07:ce:b4:be:31:45:fb:81:fe:0e:da:4c:3a:3d:a1:
67:fb:d2:f4:e1:94:07:94:28:87:8c:a1:e7:a4:02:
2b:0e:83:f9:87:2f:25:6e:14:44:94:94:a9:b8:6b:
ca:17:e0:72:bf:d2:aa:7c:cb:b8:6d:0d:03:43:34:
b8:2c:e0:75:70:db:d6:fb:27:63:2e:86:96:48:52:
ba:e4:16:8f:ec:fe:ce:5c:26:9c:06:05:d9:c5:a6:
c0:2b:65:26:e1:4b:df:18:d3:f3:1a:db:10:84:6c:
34:b5:f5:c7:5e:48:f3:e9:56:64:f9:a5:4d:9d:1a:
70:b0:f3:d7:b8:8e:19:38:ed:bb:9f:0b:e2:61:83:
71:74:dd:c0:8b:1c:63:49:c2:d6:06:19:8c:59:fb:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E3:CD:9D:97:FF:58:A4:26:95:91:70:40:CD:79:5A:1F:05:9F:8C
X509v3 Authority Key Identifier:
keyid:DE:1B:9C:A1:F3:F1:57:D7:FF:53:7E:D3:45:97:F7:C3:37:07:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hucofPxV9f_U37TRZf3wzcHzLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/VePNnZf_WKQmlZFwQM15Wh8Fn4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/418074-06b8-4ce4-980e-fadb113f6780/1/3hucofPxV9f_U37TRZf3wzcHzLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.198.0/24
Signature Algorithm: sha256WithRSAEncryption
99:34:23:66:88:36:81:98:48:a1:00:62:29:c3:f2:e5:53:fe:
bb:ee:62:d0:da:57:5f:20:ac:4a:f5:ee:b9:2b:d4:d5:ec:7e:
e7:c8:e1:16:4f:02:61:35:72:58:45:09:e9:97:46:ae:4e:2f:
11:96:56:ce:fb:de:92:ec:66:fb:8c:46:cd:c6:de:74:1b:ef:
f9:8e:ef:44:98:69:c0:db:de:68:0e:67:1f:c9:01:2d:9e:44:
e3:42:80:56:d2:32:91:a2:0b:2b:bc:56:e1:fc:80:94:6f:12:
45:2c:d5:0d:15:b7:3b:38:fe:2e:85:d5:78:e0:00:48:01:fc:
6c:ed:26:db:79:f6:fb:20:2f:d3:91:57:7a:15:5c:8f:8a:6e:
99:fb:4c:52:78:34:e7:8b:dc:d2:e5:77:a2:b3:1c:49:ea:9b:
ad:73:ef:4e:6a:e4:08:f3:22:d3:7b:0a:d3:43:0d:f5:c6:77:
77:98:53:6f:b4:5e:0a:7a:e5:2d:22:47:0b:41:5c:dc:bd:42:
18:90:4f:f5:85:a9:ca:bc:f7:9c:e0:47:f5:07:7a:85:3b:da:
91:0a:54:58:21:46:a0:bb:4a:85:88:90:dc:4e:b8:7a:6b:3b:
3a:82:dc:98:54:e1:49:91:c2:ac:8c:77:9e:3b:77:83:3d:47:
ca:14:22:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaC8sqt7RchsDwVmvrtQl3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMWI5Y2ExZjNmMTU3ZDdmZjUzN2VkMzQ1OTdmN2MzMzcw
N2NjYjMwHhcNMjMwMjI0MTAyMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWUzY2Q5ZDk3ZmY1OGE0MjY5NTkxNzA0MGNkNzk1YTFmMDU5ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWFOncNktT4AJG3FbNlpFgPXxeRv
rJwBpEe/O6GI7WO6APhX2+VpQ7RkZwWeQc1aQXgmksCe6I8rZQslwUIAhng8O+11
JZE/wOsCJrRNU+UyNNiph4vr6w3CbQmDfYESR9FrxugQw14HzrS+MUX7gf4O2kw6
PaFn+9L04ZQHlCiHjKHnpAIrDoP5hy8lbhRElJSpuGvKF+Byv9KqfMu4bQ0DQzS4
LOB1cNvW+ydjLoaWSFK65BaP7P7OXCacBgXZxabAK2Um4UvfGNPzGtsQhGw0tfXH
Xkjz6VZk+aVNnRpwsPPXuI4ZOO27nwviYYNxdN3AixxjScLWBhmMWftiSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXjzZ2X/1ikJpWRcEDNeVofBZ+MMB8GA1UdIwQY
MBaAFN4bnKHz8VfX/1N+00WX98M3B8yzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2h1Y29mUHhWOWZfVTM3VFJaZjN3emNIekxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MTgwNzQtMDZiOC00Y2U0LTk4MGUt
ZmFkYjExM2Y2NzgwLzEvVmVQTm5aZl9XS1FtbFpGd1FNMTVXaDhGbjR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80MTgwNzQtMDZiOC00Y2U0LTk4MGUtZmFkYjExM2Y2Nzgw
LzEvM2h1Y29mUHhWOWZfVTM3VFJaZjN3emNIekxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfGMA0G
CSqGSIb3DQEBCwUAA4IBAQCZNCNmiDaBmEihAGIpw/LlU/677mLQ2ldfIKxK9e65
K9TV7H7nyOEWTwJhNXJYRQnpl0auTi8RllbO+96S7Gb7jEbNxt50G+/5ju9EmGnA
295oDmcfyQEtnkTjQoBW0jKRogsrvFbh/ICUbxJFLNUNFbc7OP4uhdV44ABIAfxs
7Sbbefb7IC/TkVd6FVyPim6Z+0xSeDTni9zS5XeisxxJ6putc+9OauQI8yLTewrT
Qw31xnd3mFNvtF4KeuUtIkcLQVzcvUIYkE/1hanKvPec4Ef1B3qFO9qRClRYIUag
u0qFiJDcTrh6azs6gtyYVOFJkcKsjHeeO3eDPUfKFCKF
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:37 2025 by rpki-client