Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Vi5NHh9PeiZKSedITFgsgmiPCmI.roa
File: Vi5NHh9PeiZKSedITFgsgmiPCmI.roa (raw, json)
Hash identifier: p7I/BG2g25UPrgXDvJH/MAw3MvHjYcpWdRge+ekzCdI=
Subject key identifier: 56:2E:4D:1E:1F:4F:7A:26:4A:49:E7:48:4C:58:2C:82:68:8F:0A:62
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1B0196C940B2E24D13A798BB2E4C0
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Vi5NHh9PeiZKSedITFgsgmiPCmI.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 185.221.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:19:6c:94:0b:2e:24:d1:3a:79:8b:b2:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=562e4d1e1f4f7a264a49e7484c582c82688f0a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:62:f2:46:de:81:13:41:80:f2:b8:2b:31:
d0:ec:fd:60:52:2b:43:e4:b1:10:46:77:0e:de:02:
9b:ed:9a:cc:8a:07:e2:12:68:ac:74:4a:92:7a:95:
26:77:ed:06:94:00:b8:14:d9:23:2d:03:4b:06:e0:
5a:04:53:2d:71:4e:5c:fc:4e:33:26:d2:c6:f6:52:
89:a0:4d:2f:c4:ac:ad:70:83:9c:b0:55:1e:be:3d:
5c:fb:27:0e:69:cd:4c:38:80:b6:fa:6b:c3:eb:63:
71:3f:95:9b:22:e8:d8:be:50:ec:73:b2:16:a0:09:
9a:57:10:12:4c:6c:f7:57:2b:71:74:64:5a:73:06:
b5:f0:0a:e2:64:cf:80:0a:95:e4:36:77:6c:4f:27:
f4:f1:26:1d:f3:e8:43:2f:2e:61:54:74:cc:d7:3f:
21:c1:43:d0:a5:f5:9e:57:d9:a8:d4:18:81:23:2a:
4a:78:38:28:14:97:01:4c:da:90:16:b7:27:ee:09:
b6:fc:25:fc:b9:8d:08:1c:75:af:39:90:be:b9:ea:
22:6d:a2:bd:85:c1:ad:6b:d7:a1:ca:39:8b:c1:be:
fc:27:f9:fa:11:a5:56:24:a3:2c:cd:a1:eb:45:2e:
b4:a9:9f:1d:b8:75:6f:65:92:16:91:83:f4:ae:24:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:4D:1E:1F:4F:7A:26:4A:49:E7:48:4C:58:2C:82:68:8F:0A:62
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Vi5NHh9PeiZKSedITFgsgmiPCmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.196.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a0:49:7f:28:26:9e:bc:a7:50:54:64:c0:61:0a:15:fa:28:
8f:bf:a7:64:41:f9:a7:b2:19:11:71:52:22:7b:f5:87:c9:f1:
c0:43:2c:94:cb:ac:63:d5:1b:07:2b:7c:6c:f8:0f:bc:ad:2d:
99:15:32:1a:99:e2:2d:2a:aa:c9:1e:95:a3:88:9b:31:19:dd:
32:93:6d:bc:43:f9:20:80:40:09:db:ef:a1:24:22:c3:f3:90:
03:c2:1d:82:e7:f7:40:9b:68:10:06:a1:b3:5e:a3:c1:97:a5:
88:eb:0b:91:33:6c:51:fb:b7:0d:bf:ca:f7:52:c6:ac:2c:d2:
79:d4:6c:69:e7:05:4f:31:71:77:54:62:3f:2d:1d:ad:29:af:
4a:f3:6b:10:2b:f0:dd:9e:4e:5a:78:d7:f3:76:10:50:a1:c3:
ae:19:fe:e4:1d:98:5c:60:79:9c:e1:e2:d5:c0:f1:e4:99:a7:
d1:19:2c:5e:42:ef:35:d7:c2:f1:03:a6:41:33:d5:24:ad:62:
ca:36:b9:90:eb:7d:23:8d:81:af:47:bd:f8:f3:46:75:04:9d:
79:1d:30:0f:bd:ed:26:27:7f:9e:b6:a6:5c:4e:a8:a9:7e:4a:
99:4c:3f:a0:64:83:f6:b3:77:18:d3:46:f0:7b:dc:3a:56:25:
b9:5b:15:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbAZbJQLLiTROnmLsuTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjUwMTAxMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjJlNGQxZTFmNGY3YTI2NGE0OWU3NDg0YzU4MmM4MjY4OGYwYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva5i8kbegRNBgPK4KzHQ7P1gUitD
5LEQRncO3gKb7ZrMigfiEmisdEqSepUmd+0GlAC4FNkjLQNLBuBaBFMtcU5c/E4z
JtLG9lKJoE0vxKytcIOcsFUevj1c+ycOac1MOIC2+mvD62NxP5WbIujYvlDsc7IW
oAmaVxASTGz3VytxdGRacwa18AriZM+ACpXkNndsTyf08SYd8+hDLy5hVHTM1z8h
wUPQpfWeV9mo1BiBIypKeDgoFJcBTNqQFrcn7gm2/CX8uY0IHHWvOZC+ueoibaK9
hcGta9ehyjmLwb78J/n6EaVWJKMszaHrRS60qZ8duHVvZZIWkYP0riThUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFYuTR4fT3omSknnSExYLIJojwpiMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvVmk1TkhoOVBlaVpLU2VkSVRGZ3NnbWlQQ21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud3EMA0G
CSqGSIb3DQEBCwUAA4IBAQBZoEl/KCaevKdQVGTAYQoV+iiPv6dkQfmnshkRcVIi
e/WHyfHAQyyUy6xj1RsHK3xs+A+8rS2ZFTIameItKqrJHpWjiJsxGd0yk228Q/kg
gEAJ2++hJCLD85ADwh2C5/dAm2gQBqGzXqPBl6WI6wuRM2xR+7cNv8r3UsasLNJ5
1Gxp5wVPMXF3VGI/LR2tKa9K82sQK/Ddnk5aeNfzdhBQocOuGf7kHZhcYHmc4eLV
wPHkmafRGSxeQu8118LxA6ZBM9UkrWLKNrmQ630jjYGvR73480Z1BJ15HTAPve0m
J3+etqZcTqipfkqZTD+gZIP2s3cY00bwe9w6ViW5WxWm
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:19 2025 by rpki-client