Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa
File: dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa (raw, json)
Hash identifier: Fj3DO1R/E5+24VZ+OZo/hm1nks1gIIg69F6PTo2qTDI=
Subject key identifier: 75:59:8E:3F:EE:4B:3A:C6:F3:BE:A6:6C:56:07:47:5E:56:5C:EB:F7
Certificate issuer: /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial: 0184B0A346C16E4DFE0045287D8F10AD80F2
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa
Signing time: Fri 25 Nov 2022 21:13:21 +0000
ROA not before: Fri 25 Nov 2022 21:13:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207921
IP address blocks: 195.39.246.0/23 maxlen: 24
2a0f:4ac0::/31 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b0:a3:46:c1:6e:4d:fe:00:45:28:7d:8f:10:ad:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Validity
Not Before: Nov 25 21:13:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75598e3fee4b3ac6f3bea66c5607475e565cebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:5e:d4:3d:bd:bc:c5:66:c7:bf:c3:8c:42:
d5:53:92:c3:ad:b4:b4:c4:6c:f9:52:b3:a5:11:cb:
0c:2c:98:ea:13:cf:25:08:aa:cf:57:85:ca:1e:7a:
0e:f8:8d:29:b8:07:4a:6b:6a:57:a6:ca:68:1c:d7:
6f:f3:69:37:8a:72:76:e2:30:2e:6e:cb:71:0e:ad:
be:34:c3:c3:8c:fb:32:da:31:d7:9b:5e:15:93:4d:
20:40:6b:55:ac:8d:32:b9:e6:17:54:a6:be:8f:28:
0a:f3:a1:d3:a0:7f:13:43:35:90:7a:91:44:c5:e0:
fe:fa:32:7a:7f:5a:0a:ac:9c:46:ad:1c:3b:0a:58:
c0:65:aa:ec:72:c7:83:2f:5d:28:a6:59:1d:f1:79:
96:ed:66:e9:fd:b3:28:af:3d:53:89:a8:18:2b:96:
2f:a8:8b:50:aa:e0:d2:af:2f:93:dd:11:a7:2b:97:
04:57:8c:f9:62:23:43:90:b8:03:e8:7f:b2:bc:38:
18:1c:3e:e6:45:bb:73:31:71:56:c6:be:ca:42:4a:
78:a1:5a:0e:30:da:ca:85:45:39:6f:19:ae:38:d8:
39:02:e5:9f:5e:45:95:4f:32:f6:af:2a:25:42:cb:
63:e3:88:9f:05:0c:f2:b7:07:a5:03:81:ad:47:de:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:8E:3F:EE:4B:3A:C6:F3:BE:A6:6C:56:07:47:5E:56:5C:EB:F7
X509v3 Authority Key Identifier:
keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/dVmOP-5LOsbzvqZsVgdHXlZc6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.246.0/23
IPv6:
2a0f:4ac0::/31
Signature Algorithm: sha256WithRSAEncryption
3d:ad:f6:d5:80:86:32:cd:c8:8a:ab:7b:d0:e5:b4:78:b5:da:
9e:5b:54:1a:fb:e4:77:3b:ff:9b:ae:45:60:fa:11:b3:b1:8a:
47:23:91:49:fd:ac:0e:e9:93:17:d6:53:77:0f:dc:f0:8c:da:
7c:a8:83:bd:cc:ed:7e:4d:c4:cc:0b:16:45:e4:b6:51:e4:e9:
47:f6:28:77:bc:72:5c:3f:13:ce:87:c4:b7:55:3b:e1:57:f0:
7a:b9:fd:83:95:87:44:52:be:83:64:93:a3:89:a8:bd:21:3c:
df:e4:86:b5:0e:96:4e:e8:c2:dc:b4:ca:da:c0:51:9a:2a:d4:
1d:21:3f:45:f4:5e:c7:b2:b8:ef:32:bf:b3:f4:40:8f:1d:a9:
15:45:86:28:e3:db:ee:b9:86:0d:21:df:aa:20:73:ba:80:56:
09:be:d7:4c:11:7a:e5:3d:48:b1:23:b3:f2:47:5a:4c:d7:09:
45:f1:cd:9c:89:33:8d:05:16:5a:b9:75:ed:32:99:36:a2:1e:
45:c0:35:f7:d7:f4:25:e8:06:6d:73:80:25:95:d3:84:f6:27:
71:2d:50:18:0e:fc:12:0d:5c:47:5f:3e:e3:da:a4:6e:a0:93:
44:ee:29:90:54:f3:b6:04:a6:33:89:c2:3e:90:c0:7f:c0:eb:
09:7c:74:bf
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYSwo0bBbk3+AEUofY8QrYDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2Q0MTI3Y2RhZmU5YmZiNWQzZjRlZDhhMmFmMmUwM2Y2
ZDYwN2QwHhcNMjIxMTI1MjExMzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTU5OGUzZmVlNGIzYWM2ZjNiZWE2NmM1NjA3NDc1ZTU2NWNlYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5e1D29vMVmx7/DjELVU5LDrbS0
xGz5UrOlEcsMLJjqE88lCKrPV4XKHnoO+I0puAdKa2pXpspoHNdv82k3inJ24jAu
bstxDq2+NMPDjPsy2jHXm14Vk00gQGtVrI0yueYXVKa+jygK86HToH8TQzWQepFE
xeD++jJ6f1oKrJxGrRw7CljAZarscseDL10oplkd8XmW7Wbp/bMorz1TiagYK5Yv
qItQquDSry+T3RGnK5cEV4z5YiNDkLgD6H+yvDgYHD7mRbtzMXFWxr7KQkp4oVoO
MNrKhUU5bxmuONg5AuWfXkWVTzL2ryolQstj44ifBQzytwelA4GtR958xQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHVZjj/uSzrG876mbFYHR15WXOv3MB8GA1UdIwQY
MBaAFMN9QSfNr+m/tdP07Yoq8uA/bWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzMxQko4MnY2Yi0xMF9UdGlpcnk0RDl0WUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82M2RlMzEtNTc2OC00YTMwLTkxYzct
YTFlMjI5YzBkYjk3LzEvZFZtT1AtNUxPc2J6dnFac1ZnZEhYbFpjNl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82M2RlMzEtNTc2OC00YTMwLTkxYzctYTFlMjI5YzBkYjk3
LzEvdzMxQko4MnY2Yi0xMF9UdGlpcnk0RDl0WUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwyf2MA0E
AgACMAcDBQEqD0rAMA0GCSqGSIb3DQEBCwUAA4IBAQA9rfbVgIYyzciKq3vQ5bR4
tdqeW1Qa++R3O/+brkVg+hGzsYpHI5FJ/awO6ZMX1lN3D9zwjNp8qIO9zO1+TcTM
CxZF5LZR5OlH9ih3vHJcPxPOh8S3VTvhV/B6uf2DlYdEUr6DZJOjiai9ITzf5Ia1
DpZO6MLctMrawFGaKtQdIT9F9F7HsrjvMr+z9ECPHakVRYYo49vuuYYNId+qIHO6
gFYJvtdMEXrlPUixI7PyR1pM1wlF8c2ciTONBRZauXXtMpk2oh5FwDX31/Ql6AZt
c4AlldOE9idxLVAYDvwSDVxHXz7j2qRuoJNE7imQVPO2BKYzicI+kMB/wOsJfHS/
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:21:38 2025 by rpki-client