Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/VCKXNHisDtLslgTrjODk0lGKL8g.roa
File: VCKXNHisDtLslgTrjODk0lGKL8g.roa (raw, json)
Hash identifier: +fR0fjSeFqmZS+myTrzkbBunCVvRSxSIc6xW9HBtpaw=
Subject key identifier: 54:22:97:34:78:AC:0E:D2:EC:96:04:EB:8C:E0:E4:D2:51:8A:2F:C8
Certificate issuer: /CN=d8147428a2288531b877320e110892a275cc1263
Certificate serial: 018CC49342B8574BC158AAAD7AB5E4F0DB8C
Authority key identifier: D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/VCKXNHisDtLslgTrjODk0lGKL8g.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212169
IP address blocks: 212.23.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:42:b8:57:4b:c1:58:aa:ad:7a:b5:e4:f0:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8147428a2288531b877320e110892a275cc1263
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5422973478ac0ed2ec9604eb8ce0e4d2518a2fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:15:5d:c5:53:db:d5:97:f3:1d:ed:80:04:
d7:bd:e2:8b:dc:84:8c:8b:72:f4:08:e6:fb:6c:0e:
a2:06:54:36:d0:bc:25:73:86:04:61:db:6c:4e:1c:
1a:f0:a7:9c:c4:b9:23:ec:c0:23:8d:94:d4:98:2b:
7a:15:ce:94:91:8a:63:c8:9b:f7:7c:a2:f6:b2:1b:
ac:55:9b:7d:94:13:88:8f:eb:b3:9b:10:87:d9:05:
9f:51:2a:13:56:f6:77:9a:de:51:58:ea:83:5a:5b:
5f:83:e7:30:2e:7a:b7:7d:17:d1:48:4b:a6:29:9c:
99:10:9a:1f:5b:67:b4:8e:10:81:3b:e6:84:d5:c3:
d5:00:86:6f:4c:7c:0d:8f:cb:f7:16:18:00:39:5e:
80:9a:8b:a1:d7:b4:38:78:8e:58:8a:d4:e2:af:a9:
51:5d:e2:48:95:46:c1:78:ab:03:d7:a4:12:7b:3e:
fe:c5:79:20:45:67:d0:57:e2:35:2e:bb:4a:18:1f:
de:e2:aa:28:4b:b3:2f:08:3f:26:66:e2:d4:f5:b0:
2e:15:12:65:65:79:0b:eb:3e:78:12:be:0d:e5:17:
8c:9b:6c:6a:b9:30:47:e1:c7:23:d6:eb:dc:6c:dc:
fb:4c:35:c2:89:87:88:20:c9:86:fc:0b:98:b4:3f:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:97:34:78:AC:0E:D2:EC:96:04:EB:8C:E0:E4:D2:51:8A:2F:C8
X509v3 Authority Key Identifier:
keyid:D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/VCKXNHisDtLslgTrjODk0lGKL8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.192.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6e:2b:62:39:a2:24:66:1f:ce:18:21:b5:59:5d:d1:ce:ce:
9e:a4:ce:91:4b:ac:29:20:f7:b6:93:03:b6:7e:6d:8c:e9:02:
38:a7:05:ab:63:3b:0a:dd:fd:86:df:f4:87:04:0a:d8:f5:b1:
7c:b8:42:d3:f1:0d:5b:a7:ae:64:39:cc:d0:90:cc:e0:47:6e:
47:d6:37:76:6a:54:17:f2:36:76:15:20:45:20:5d:86:a5:cc:
2b:fe:7d:aa:4f:7e:49:fd:2c:56:5f:61:da:9a:86:7e:75:5c:
e4:70:7d:22:a2:f6:40:d8:ef:8c:49:94:26:37:46:f0:53:2e:
eb:34:b0:2b:18:f3:ab:01:29:69:d1:cd:ce:df:3a:57:b7:f6:
58:ed:17:82:cf:03:37:3e:10:b3:34:b4:b9:2e:bf:5a:9e:14:
a7:8d:00:02:b3:e7:4c:89:b9:2f:33:e0:e3:21:2b:e3:50:3e:
e5:dc:0f:53:a7:c3:43:c8:2b:75:83:3d:8b:0c:49:ae:22:39:
f7:4e:bc:fd:aa:e3:b9:97:5f:5d:6a:d9:eb:e9:d1:07:df:81:
ba:d5:23:4a:dc:de:fe:db:07:19:02:4b:f9:cf:58:5d:7c:a5:
e7:fb:a3:ec:45:d8:68:e9:65:c7:f7:80:b2:9a:01:ba:74:00:
2a:4f:19:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk0K4V0vBWKqterXk8NuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MTQ3NDI4YTIyODg1MzFiODc3MzIwZTExMDg5MmEyNzVj
YzEyNjMwHhcNMjQwMTAxMTAzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDIyOTczNDc4YWMwZWQyZWM5NjA0ZWI4Y2UwZTRkMjUxOGEyZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgVXcVT29WX8x3tgATXveKL3ISM
i3L0COb7bA6iBlQ20Lwlc4YEYdtsThwa8KecxLkj7MAjjZTUmCt6Fc6UkYpjyJv3
fKL2shusVZt9lBOIj+uzmxCH2QWfUSoTVvZ3mt5RWOqDWltfg+cwLnq3fRfRSEum
KZyZEJofW2e0jhCBO+aE1cPVAIZvTHwNj8v3FhgAOV6Amouh17Q4eI5YitTir6lR
XeJIlUbBeKsD16QSez7+xXkgRWfQV+I1LrtKGB/e4qooS7MvCD8mZuLU9bAuFRJl
ZXkL6z54Er4N5ReMm2xquTBH4ccj1uvcbNz7TDXCiYeIIMmG/AuYtD9Y6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQilzR4rA7S7JYE64zg5NJRii/IMB8GA1UdIwQY
MBaAFNgUdCiiKIUxuHcyDhEIkqJ1zBJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJSMEtLSW9oVEc0ZHpJT0VRaVNvblhNRW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMjUyZjgtMzhhOC00ZTViLWJhNDQt
NTdiYWExZTdjNGUxLzEvVkNLWE5IaXNEdExzbGdUcmpPRGswbEdLTDhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMjUyZjgtMzhhOC00ZTViLWJhNDQtNTdiYWExZTdjNGUx
LzEvMkJSMEtLSW9oVEc0ZHpJT0VRaVNvblhNRW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfAMA0G
CSqGSIb3DQEBCwUAA4IBAQBUbitiOaIkZh/OGCG1WV3Rzs6epM6RS6wpIPe2kwO2
fm2M6QI4pwWrYzsK3f2G3/SHBArY9bF8uELT8Q1bp65kOczQkMzgR25H1jd2alQX
8jZ2FSBFIF2Gpcwr/n2qT35J/SxWX2HamoZ+dVzkcH0iovZA2O+MSZQmN0bwUy7r
NLArGPOrASlp0c3O3zpXt/ZY7ReCzwM3PhCzNLS5Lr9anhSnjQACs+dMibkvM+Dj
ISvjUD7l3A9Tp8NDyCt1gz2LDEmuIjn3Trz9quO5l19datnr6dEH34G61SNK3N7+
2wcZAkv5z1hdfKXn+6PsRdho6WXH94CymgG6dAAqTxl0
-----END CERTIFICATE-----
Generated at Tue Jan 16 18:24:26 2024 by rpki-client on console-ams.rpki-client.org