Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/vwhq4oNH7mylklPZjDHniND_xCk.roa
File: vwhq4oNH7mylklPZjDHniND_xCk.roa (raw, json)
Hash identifier: 9qtjYiPieRRydteZDMzqt70r9QjAlq5ldb+vDgzDv00=
Subject key identifier: BF:08:6A:E2:83:47:EE:6C:A5:92:53:D9:8C:31:E7:88:D0:FF:C4:29
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018B28D7D7500E84F30D04E7F499DE45FC2F
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/vwhq4oNH7mylklPZjDHniND_xCk.roa
Signing time: Fri 13 Oct 2023 11:41:55 +0000
ROA not before: Fri 13 Oct 2023 11:41:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.28.0/24 maxlen: 24
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:d7:d7:50:0e:84:f3:0d:04:e7:f4:99:de:45:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Oct 13 11:41:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf086ae28347ee6ca59253d98c31e788d0ffc429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f3:5f:bf:a9:80:a7:ee:27:93:5b:4b:77:51:
b2:7e:c5:26:d0:51:69:ba:9a:07:68:bf:ad:0b:a8:
e1:0b:d7:0b:fe:20:a8:12:0f:ef:c8:dd:48:bb:1d:
fc:f5:04:0d:77:10:b5:7a:02:42:9e:5c:10:47:7a:
82:7e:44:50:df:7c:9d:f8:3a:f3:8c:a6:90:66:9b:
e0:8c:fd:ae:1d:ef:79:b0:a3:52:91:55:bc:d6:5b:
97:00:48:da:1d:5f:05:0a:bd:b1:19:0d:f6:45:92:
a1:08:01:d4:e6:a6:e9:b7:d6:d6:38:fd:10:3b:6d:
e3:6a:67:db:8b:08:6a:d8:ff:30:83:aa:1e:f5:76:
5d:1d:ba:df:7c:d1:6b:18:ed:04:1e:cf:88:54:ab:
1f:64:48:66:54:f9:19:ff:87:bc:53:a1:5f:ec:e5:
f5:53:3e:9b:6f:b3:aa:54:55:c1:67:ef:30:96:f6:
82:b0:45:20:c0:2a:4a:81:7a:23:78:1a:ad:25:56:
b5:80:d1:68:87:14:1b:46:c3:a0:1c:ae:e4:84:e5:
1a:26:cd:92:48:20:a5:b4:d3:6b:49:98:ce:2e:67:
ff:45:b9:7e:c7:e4:87:23:3a:fc:46:d3:e7:2a:83:
9b:01:9f:1c:7f:b2:b4:d5:a1:d5:22:c7:02:af:ae:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:6A:E2:83:47:EE:6C:A5:92:53:D9:8C:31:E7:88:D0:FF:C4:29
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/vwhq4oNH7mylklPZjDHniND_xCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
45.80.30.0/23
86.62.28.0/22
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:d3:99:97:7e:5b:5b:bc:af:9f:58:12:c9:5c:05:2a:1f:cc:
6c:22:fa:94:27:92:ea:f7:7c:b4:dd:b1:82:51:7d:21:3e:f2:
55:82:1a:dd:f5:9b:89:04:f0:48:cc:0e:52:ab:37:0d:c9:5f:
af:b5:42:cf:1b:2c:8b:87:48:9c:99:e8:e7:0b:d9:b3:24:0b:
44:36:2e:6a:ec:ef:78:5d:ec:c9:34:e4:b1:ff:61:04:a4:7a:
ac:f8:95:d1:77:c3:33:b3:f8:66:1b:a2:26:92:75:eb:0e:ed:
68:01:d8:ec:87:4b:9b:c1:15:e6:bf:8d:52:43:3c:45:0e:a9:
f7:04:a2:4d:82:dd:35:43:26:30:a8:87:b7:33:17:c4:ba:12:
13:62:74:32:01:6e:8a:96:00:a5:c1:c7:9c:b6:1c:db:e8:ec:
25:0f:d7:2d:d7:7c:31:ef:ea:4b:c2:75:51:9a:8e:d4:b9:a8:
86:65:bb:65:5b:0e:e8:47:39:e6:80:ff:5e:2f:aa:fb:8a:a0:
59:8a:fd:a8:00:78:c2:c3:07:45:fe:ba:33:4d:c5:a4:d6:3d:
6e:10:27:d3:d2:ce:2c:4a:7b:90:e4:32:d5:32:93:76:61:1d:
cd:15:8a:d0:07:2b:b5:d9:2f:92:71:06:23:b4:fe:2a:49:79:
5a:8d:26:a9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYso19dQDoTzDQTn9JneRfwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjMxMDEzMTE0MTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjA4NmFlMjgzNDdlZTZjYTU5MjUzZDk4YzMxZTc4OGQwZmZjNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfNfv6mAp+4nk1tLd1GyfsUm0FFp
upoHaL+tC6jhC9cL/iCoEg/vyN1Iux389QQNdxC1egJCnlwQR3qCfkRQ33yd+Drz
jKaQZpvgjP2uHe95sKNSkVW81luXAEjaHV8FCr2xGQ32RZKhCAHU5qbpt9bWOP0Q
O23jamfbiwhq2P8wg6oe9XZdHbrffNFrGO0EHs+IVKsfZEhmVPkZ/4e8U6Ff7OX1
Uz6bb7OqVFXBZ+8wlvaCsEUgwCpKgXojeBqtJVa1gNFohxQbRsOgHK7khOUaJs2S
SCCltNNrSZjOLmf/Rbl+x+SHIzr8RtPnKoObAZ8cf7K01aHVIscCr65W1QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFL8IauKDR+5spZJT2Ywx54jQ/8QpMB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvdndocTRvTkg3bXlsa2xQWmpESG5pTkRfeENrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVAcAwQB
LVAeAwQCVj4cAwQBwiQgMA0GCSqGSIb3DQEBCwUAA4IBAQCm05mXfltbvK+fWBLJ
XAUqH8xsIvqUJ5Lq93y03bGCUX0hPvJVghrd9ZuJBPBIzA5SqzcNyV+vtULPGyyL
h0icmejnC9mzJAtENi5q7O94XezJNOSx/2EEpHqs+JXRd8Mzs/hmG6ImknXrDu1o
Adjsh0ubwRXmv41SQzxFDqn3BKJNgt01QyYwqIe3MxfEuhITYnQyAW6KlgClwcec
thzb6OwlD9ct13wx7+pLwnVRmo7UuaiGZbtlWw7oRznmgP9eL6r7iqBZiv2oAHjC
wwdF/rozTcWk1j1uECfT0s4sSnuQ5DLVMpN2YR3NFYrQByu12S+ScQYjtP4qSXla
jSap
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:06 2025 by rpki-client