Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/vOQXKY6o0ar_c8pMXstDxyxzxEI.roa
File: vOQXKY6o0ar_c8pMXstDxyxzxEI.roa (raw, json)
Hash identifier: GCcR8szw2V0RNgvnJIkEJEAndEmYoUky+vbwQ3Pwn+Q=
Subject key identifier: BC:E4:17:29:8E:A8:D1:AA:FF:73:CA:4C:5E:CB:43:C7:2C:73:C4:42
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 0184E798C8656A73A04FE0CDA0D08E575E58
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/vOQXKY6o0ar_c8pMXstDxyxzxEI.roa
Signing time: Tue 06 Dec 2022 13:21:00 +0000
ROA not before: Tue 06 Dec 2022 13:21:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 185.117.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:98:c8:65:6a:73:a0:4f:e0:cd:a0:d0:8e:57:5e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Dec 6 13:21:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bce417298ea8d1aaff73ca4c5ecb43c72c73c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:ae:8e:cc:d7:d6:68:51:12:f0:5d:5f:94:
5f:7f:fb:86:9f:d5:37:ee:d0:da:86:83:fc:31:0c:
f5:b6:f6:56:73:4a:3e:c6:3b:33:96:4f:02:6e:c5:
cc:ce:6f:68:09:4b:aa:81:c0:29:dd:d9:69:06:3c:
03:bb:cc:c6:70:cf:a5:7a:e7:87:37:4e:66:00:a3:
57:26:2e:1a:3f:96:af:6e:97:ba:f1:d9:30:f2:49:
85:fc:27:18:60:fe:42:ba:5d:7f:1f:00:8a:97:24:
63:0e:56:74:cf:56:87:ad:3f:92:20:fe:25:fc:bf:
8f:7e:fa:f6:49:f8:77:74:2d:70:b4:f4:59:cb:c7:
15:26:5d:c5:d7:bc:75:e3:9a:44:29:78:92:5e:92:
5e:57:c4:33:87:03:01:9e:29:50:dc:08:e9:20:15:
3a:98:f1:05:1e:57:94:0b:81:c8:65:1e:b5:20:1b:
17:ea:f0:94:01:1e:46:5a:43:c3:7d:3f:63:c5:1c:
ba:8c:3c:d7:22:08:8d:13:3c:01:4d:18:40:f4:a9:
cf:fe:d9:ec:98:36:cd:cd:ec:b0:a4:8c:7f:97:70:
59:ac:91:bf:bc:3c:ae:fa:a1:2a:39:9f:b6:5f:b5:
a6:2d:d2:f4:37:7b:b7:2c:1b:96:8d:a8:c5:7c:4b:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:17:29:8E:A8:D1:AA:FF:73:CA:4C:5E:CB:43:C7:2C:73:C4:42
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/vOQXKY6o0ar_c8pMXstDxyxzxEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.230.0/24
Signature Algorithm: sha256WithRSAEncryption
82:44:d6:42:db:07:65:86:22:a1:a1:3b:0c:5c:02:22:c7:d5:
97:90:37:02:13:d7:12:85:2f:19:dd:11:92:d1:53:3b:54:43:
f8:ca:da:53:5a:e8:15:50:2d:1e:f2:98:47:b6:37:03:9c:68:
43:82:35:23:50:09:5a:87:f6:9e:a0:9b:ea:50:39:13:99:24:
aa:c7:ef:74:8d:5e:c9:6f:d9:1c:80:7e:3f:71:9a:bc:0b:b1:
f5:4c:16:d0:25:18:5a:8b:9e:50:b6:bc:93:9b:2c:f0:6f:36:
20:f5:4c:b1:f7:e2:2c:37:20:bf:65:9c:43:08:d7:dd:24:03:
c8:f6:9e:2f:bd:53:c3:f2:c9:b8:e0:2c:90:45:8b:da:a0:4b:
4e:9c:fd:a7:dd:55:8b:f8:bd:8c:56:ca:6f:9c:45:e6:c7:5e:
88:a2:1a:9f:cf:8c:2b:65:55:a0:e3:85:e5:2b:ec:e6:36:89:
f3:0b:0a:da:10:30:87:49:e3:a2:96:86:62:22:75:46:72:3d:
45:d0:05:82:99:2f:20:c9:34:46:0d:ad:af:e0:2e:f3:a8:2a:
c5:6b:b2:35:81:88:c2:05:1f:0c:74:63:dd:e8:a1:e9:f4:83:
ce:54:cb:46:07:d7:70:9f:05:64:e8:6f:55:a1:50:43:2a:e6:
4a:d8:8a:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTnmMhlanOgT+DNoNCOV15YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw
MzllZDgwHhcNMjIxMjA2MTMyMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2U0MTcyOThlYThkMWFhZmY3M2NhNGM1ZWNiNDNjNzJjNzNjNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbmujszX1mhREvBdX5Rff/uGn9U3
7tDahoP8MQz1tvZWc0o+xjszlk8CbsXMzm9oCUuqgcAp3dlpBjwDu8zGcM+leueH
N05mAKNXJi4aP5avbpe68dkw8kmF/CcYYP5Cul1/HwCKlyRjDlZ0z1aHrT+SIP4l
/L+Pfvr2Sfh3dC1wtPRZy8cVJl3F17x145pEKXiSXpJeV8QzhwMBnilQ3AjpIBU6
mPEFHleUC4HIZR61IBsX6vCUAR5GWkPDfT9jxRy6jDzXIgiNEzwBTRhA9KnP/tns
mDbNzeywpIx/l3BZrJG/vDyu+qEqOZ+2X7WmLdL0N3u3LBuWjajFfEvTPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLzkFymOqNGq/3PKTF7LQ8csc8RCMB8GA1UdIwQY
MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt
ZmQyOTE1ZDRjZDVhLzEvdk9RWEtZNm8wYXJfYzhwTVhzdER4eXh6eEVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh
LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXmMA0G
CSqGSIb3DQEBCwUAA4IBAQCCRNZC2wdlhiKhoTsMXAIix9WXkDcCE9cShS8Z3RGS
0VM7VEP4ytpTWugVUC0e8phHtjcDnGhDgjUjUAlah/aeoJvqUDkTmSSqx+90jV7J
b9kcgH4/cZq8C7H1TBbQJRhai55QtryTmyzwbzYg9Uyx9+IsNyC/ZZxDCNfdJAPI
9p4vvVPD8sm44CyQRYvaoEtOnP2n3VWL+L2MVspvnEXmx16Iohqfz4wrZVWg44Xl
K+zmNonzCwraEDCHSeOiloZiInVGcj1F0AWCmS8gyTRGDa2v4C7zqCrFa7I1gYjC
BR8MdGPd6KHp9IPOVMtGB9dwnwVk6G9VoVBDKuZK2Iqi
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:36 2025 by rpki-client