Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa
File: vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa (raw, json)
Hash identifier: RzMewHgYJqqbEL1Df9/KePaiVSLqKz56MdonTCkLpKo=
Subject key identifier: BD:B1:C2:60:A7:0C:FB:A4:2A:C6:09:D3:7B:58:60:31:4C:49:E5:6C
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA36792F17BA111BBA0B7771C6DE1
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212087
IP address blocks: 84.232.114.0/24 maxlen: 24
84.232.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a3:67:92:f1:7b:a1:11:bb:a0:b7:77:1c:6d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdb1c260a70cfba42ac609d37b5860314c49e56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:59:ab:ee:32:35:19:88:9e:24:33:bd:fc:
79:0f:92:71:2d:4b:46:df:7a:02:e8:ff:22:3c:f7:
f4:5d:79:c9:d9:3d:b8:21:03:8a:c7:4a:78:10:ba:
2e:1a:24:fd:bf:70:9c:26:f7:1d:91:4f:5a:2b:23:
7b:3e:85:1e:9e:3e:cb:07:a0:05:1c:40:b5:06:b1:
7c:84:65:29:4f:63:2e:9b:5a:b8:b5:a0:e9:68:f2:
aa:f7:18:60:7e:9a:ac:88:1a:a5:f4:d1:42:29:51:
af:f7:6a:2f:3c:23:4f:ba:09:2b:5a:13:96:bf:65:
f6:f3:e5:2d:15:54:05:ce:1d:cb:6f:70:d0:71:22:
22:78:78:16:cb:aa:db:24:88:6e:f3:a5:fc:6a:84:
f1:48:7c:c1:fe:a7:ee:1f:9b:0d:46:8e:31:cb:6d:
99:4a:ac:d0:e1:fc:b4:2e:d1:9d:b4:e5:b8:e2:03:
7a:9f:32:e2:7a:6d:3e:67:0a:eb:08:98:e3:49:f4:
b8:e6:f7:1c:17:9d:5f:50:65:92:d0:cf:1b:e5:b7:
07:29:cb:29:c1:29:54:66:17:44:73:88:65:26:4c:
ba:e1:da:5e:3e:ab:1b:7e:f4:c4:d1:a9:81:6d:e9:
e4:8b:c9:cf:38:fb:a7:02:81:27:77:77:c6:85:b2:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:C2:60:A7:0C:FB:A4:2A:C6:09:D3:7B:58:60:31:4C:49:E5:6C
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/vbHCYKcM-6QqxgnTe1hgMUxJ5Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.114.0/24
84.232.121.0/24
Signature Algorithm: sha256WithRSAEncryption
19:09:ff:63:fb:86:1d:0a:5e:0a:a9:b5:d7:4c:62:c7:7f:cc:
73:69:1c:51:23:5f:17:b0:10:22:7d:59:a5:54:79:7c:fc:f8:
82:ab:8d:46:dd:00:96:45:4b:05:12:62:e8:16:e2:46:12:ce:
2b:ce:ef:c9:38:cc:6b:c2:ed:05:64:8f:3a:ce:a8:9c:b2:d4:
c3:46:52:2b:ca:de:af:d1:a5:91:ec:6c:83:f3:17:cf:a6:07:
a5:12:07:4e:f5:c4:1a:48:2d:29:53:e4:8e:97:96:e1:2d:2c:
2c:f2:97:c1:f0:9c:0a:59:13:f8:3a:d8:5e:e1:2d:14:0c:52:
b2:b7:d1:43:c3:c8:11:96:ca:07:12:7c:25:f2:bd:78:c3:f3:
b0:4a:de:d9:bf:61:c1:89:d1:9e:20:bb:d4:1c:60:37:b5:19:
b6:c5:09:23:dc:3d:52:33:91:42:5f:95:51:d8:9a:52:2b:52:
eb:cd:61:79:25:c6:0c:63:b8:28:e2:8a:97:e5:f5:8f:c2:87:
f3:d9:9c:19:9b:aa:09:d5:12:92:69:04:3c:d2:3e:7b:88:a1:
ac:a5:25:49:cc:76:01:9d:99:99:56:02:eb:22:03:0e:f4:ce:
05:3e:8e:62:eb:de:7a:fe:75:8e:ae:b3:9c:0e:0b:07:92:71:
6e:6e:36:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma6NnkvF7oRG7oLd3HG3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGIxYzI2MGE3MGNmYmE0MmFjNjA5ZDM3YjU4NjAzMTRjNDllNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20hZq+4yNRmIniQzvfx5D5JxLUtG
33oC6P8iPPf0XXnJ2T24IQOKx0p4ELouGiT9v3CcJvcdkU9aKyN7PoUenj7LB6AF
HEC1BrF8hGUpT2Mum1q4taDpaPKq9xhgfpqsiBql9NFCKVGv92ovPCNPugkrWhOW
v2X28+UtFVQFzh3Lb3DQcSIieHgWy6rbJIhu86X8aoTxSHzB/qfuH5sNRo4xy22Z
SqzQ4fy0LtGdtOW44gN6nzLiem0+ZwrrCJjjSfS45vccF51fUGWS0M8b5bcHKcsp
wSlUZhdEc4hlJky64dpePqsbfvTE0amBbenki8nPOPunAoEnd3fGhbJc3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL2xwmCnDPukKsYJ03tYYDFMSeVsMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvdmJIQ1lLY00tNlFxeGduVGUxaGdNVXhKNVd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOhyAwQA
VOh5MA0GCSqGSIb3DQEBCwUAA4IBAQAZCf9j+4YdCl4KqbXXTGLHf8xzaRxRI18X
sBAifVmlVHl8/PiCq41G3QCWRUsFEmLoFuJGEs4rzu/JOMxrwu0FZI86zqicstTD
RlIryt6v0aWR7GyD8xfPpgelEgdO9cQaSC0pU+SOl5bhLSws8pfB8JwKWRP4Othe
4S0UDFKyt9FDw8gRlsoHEnwl8r14w/OwSt7Zv2HBidGeILvUHGA3tRm2xQkj3D1S
M5FCX5VR2JpSK1LrzWF5JcYMY7go4oqX5fWPwofz2ZwZm6oJ1RKSaQQ80j57iKGs
pSVJzHYBnZmZVgLrIgMO9M4FPo5i6956/nWOrrOcDgsHknFubjZR
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:34 2025 by rpki-client