Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/vkOtYsIMr_jPSC2icC4hwUGGM1c.roa
File: vkOtYsIMr_jPSC2icC4hwUGGM1c.roa (raw, json)
Hash identifier: 87qKlLm+/RdC3UXV2TQScxfVn+IHqmUiYQGQC9K70xQ=
Subject key identifier: BE:43:AD:62:C2:0C:AF:F8:CF:48:2D:A2:70:2E:21:C1:41:86:33:57
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0194266C248CB90EF498D69CC2ADA6E163C9
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/vkOtYsIMr_jPSC2icC4hwUGGM1c.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 138.124.13.0/24 maxlen: 24
138.124.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:24:8c:b9:0e:f4:98:d6:9c:c2:ad:a6:e1:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be43ad62c20caff8cf482da2702e21c141863357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:2d:dc:ca:d7:08:1a:1f:3d:f8:49:3d:c7:
1f:ed:3a:3d:6f:7c:ad:07:de:74:2c:9b:c2:37:5b:
81:d7:8e:89:48:81:14:dc:3b:28:11:1d:4e:e3:21:
3e:df:27:95:40:70:b2:30:52:94:a0:c6:90:e9:b7:
ca:cb:8d:64:4b:a1:be:3c:01:bd:fc:61:24:f5:0b:
db:0a:b5:81:d3:51:16:7c:14:60:01:2d:cf:d8:25:
86:06:dd:4d:6f:82:cf:19:ea:ce:46:d0:90:1b:74:
b1:35:e5:07:ec:a6:43:27:99:10:45:28:7d:13:1b:
19:1a:e4:ae:73:f9:d1:5b:43:7d:92:7e:a8:7b:39:
4f:18:a5:dd:84:f1:72:ef:e1:74:fc:8d:e5:9e:23:
a8:ef:5e:7c:79:e4:8a:39:2f:f6:e0:97:64:fe:cb:
f5:8b:63:3b:72:ed:bd:e0:92:7e:1c:2b:ff:8f:60:
a0:1e:ea:7d:9b:36:2f:ee:8b:9a:f6:81:10:8c:30:
ff:29:63:db:13:22:a6:ea:26:01:1a:22:f9:f7:68:
42:a5:70:ab:d2:a9:bc:57:58:4b:d2:31:16:07:cd:
3e:a1:fe:8d:a3:64:20:c8:fd:4c:95:98:ff:0a:52:
15:e4:f3:8d:29:b6:b0:4f:25:a2:6d:89:f3:68:29:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:AD:62:C2:0C:AF:F8:CF:48:2D:A2:70:2E:21:C1:41:86:33:57
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/vkOtYsIMr_jPSC2icC4hwUGGM1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.13.0-138.124.14.255
Signature Algorithm: sha256WithRSAEncryption
29:41:cd:f5:08:c7:87:0e:13:8b:34:3e:21:70:21:f0:d1:96:
ca:89:ae:22:0e:8d:22:7d:37:13:4a:41:22:6d:f0:86:fa:e9:
30:2a:47:1a:0e:75:05:61:60:d6:29:c4:6d:1d:ef:b6:51:c0:
50:d7:42:fb:bb:33:9a:13:e6:e4:cc:64:c4:79:9a:a9:cf:27:
84:9b:f9:a5:2d:3f:08:78:31:8c:e6:0c:27:f4:47:dd:36:f4:
68:f1:bb:e8:10:3a:98:a1:8a:ff:81:2e:6b:04:e3:32:c9:fc:
36:dc:aa:22:5f:2b:a7:a5:a0:af:66:3b:27:86:48:8b:f9:bb:
ec:b5:0a:b9:ce:04:45:9e:a8:8c:16:02:f8:e0:a6:e2:fa:09:
36:61:d5:67:0b:b1:e2:91:be:a4:7e:61:cf:e0:72:6c:87:82:
84:83:5a:fc:87:26:95:39:33:90:a6:93:b0:dc:79:20:e0:4b:
e9:83:c0:4e:6b:59:91:f6:38:b5:eb:d5:c9:8d:24:8f:93:9a:
4c:c7:b1:dc:ce:36:41:e7:43:f2:28:e6:1e:c7:b9:53:61:2d:
c1:70:bb:f6:d3:f6:6b:86:99:bd:29:9e:2b:b0:30:4c:d0:ac:
6d:b5:e5:d0:cc:4e:3c:8d:2e:39:de:0d:a9:6d:f0:75:5e:4a:
f9:1a:71:75
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQmbCSMuQ70mNacwq2m4WPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx
N2U1MmMwHhcNMjUwMTAyMDk1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTQzYWQ2MmMyMGNhZmY4Y2Y0ODJkYTI3MDJlMjFjMTQxODYzMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1st3MrXCBofPfhJPccf7To9b3yt
B950LJvCN1uB146JSIEU3DsoER1O4yE+3yeVQHCyMFKUoMaQ6bfKy41kS6G+PAG9
/GEk9QvbCrWB01EWfBRgAS3P2CWGBt1Nb4LPGerORtCQG3SxNeUH7KZDJ5kQRSh9
ExsZGuSuc/nRW0N9kn6oezlPGKXdhPFy7+F0/I3lniOo7158eeSKOS/24Jdk/sv1
i2M7cu294JJ+HCv/j2CgHup9mzYv7oua9oEQjDD/KWPbEyKm6iYBGiL592hCpXCr
0qm8V1hL0jEWB80+of6No2QgyP1MlZj/ClIV5PONKbawTyWibYnzaClCAQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFL5DrWLCDK/4z0gtonAuIcFBhjNXMB8GA1UdIwQY
MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt
ZTAxZTk0MTI0Njc0LzEvdmtPdFlzSU1yX2pQU0MyaWNDNGh3VUdHTTFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0
LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKfA0D
BACKfA4wDQYJKoZIhvcNAQELBQADggEBAClBzfUIx4cOE4s0PiFwIfDRlsqJriIO
jSJ9NxNKQSJt8Ib66TAqRxoOdQVhYNYpxG0d77ZRwFDXQvu7M5oT5uTMZMR5mqnP
J4Sb+aUtPwh4MYzmDCf0R9029Gjxu+gQOpihiv+BLmsE4zLJ/DbcqiJfK6eloK9m
OyeGSIv5u+y1CrnOBEWeqIwWAvjgpuL6CTZh1WcLseKRvqR+Yc/gcmyHgoSDWvyH
JpU5M5Cmk7DceSDgS+mDwE5rWZH2OLXr1cmNJI+TmkzHsdzONkHnQ/Io5h7HuVNh
LcFwu/bT9muGmb0pniuwMEzQrG215dDMTjyNLjneDalt8HVeSvkacXU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:44:54 2025 by rpki-client