Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/VOSDfxHvYjtBiBTe909ZadJMtPA.roa
File: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (raw, json)
Hash identifier: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=
Subject key identifier: 54:E4:83:7F:11:EF:62:3B:41:88:14:DE:F7:4F:59:69:D2:4C:B4:F0
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C16161FF43738C08E9D1649114111
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/VOSDfxHvYjtBiBTe909ZadJMtPA.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1267
IP address blocks: 194.20.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:16:16:1f:f4:37:38:c0:8e:9d:16:49:11:41:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e4837f11ef623b418814def74f5969d24cb4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:1f:c3:a5:dc:8f:d8:00:fa:ab:d6:07:81:
81:ce:6a:b0:fa:20:9b:2a:44:89:73:be:c4:b9:43:
db:ee:da:7e:bc:6e:f2:fa:c9:93:74:8e:0c:41:a3:
95:43:db:b7:f5:ba:58:3f:16:7c:16:68:e8:40:3b:
81:4f:03:67:48:25:5d:96:2d:78:5a:35:01:ca:e4:
a2:f9:b1:11:5a:81:1d:cb:41:af:45:00:5e:85:d4:
45:c7:ff:ab:88:4d:8d:36:d0:61:ce:2a:bd:b2:ea:
b4:d7:46:28:ca:02:fd:59:32:66:49:f2:a2:ae:8f:
0f:37:41:e7:55:a3:54:a7:1c:71:c0:46:79:92:a6:
0e:71:da:52:b1:1c:24:93:68:ce:dd:aa:60:2e:fb:
6f:e3:b0:08:08:38:26:b9:02:cb:8b:7c:b0:1f:6c:
88:7b:f9:e4:8f:50:0a:26:3d:f6:8f:3c:99:a3:08:
ea:33:a4:34:f1:df:5f:f8:62:aa:75:c9:16:14:b6:
9a:cb:6d:da:29:76:de:77:62:a5:12:eb:50:74:8b:
f3:6e:cf:ee:d0:4d:8b:fc:a9:42:7c:83:0f:b4:0c:
69:dd:87:64:4f:98:a9:c2:73:82:be:21:34:6b:a2:
54:c9:c9:8b:79:e1:f7:e1:04:07:85:9f:01:21:0b:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:83:7F:11:EF:62:3B:41:88:14:DE:F7:4F:59:69:D2:4C:B4:F0
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/VOSDfxHvYjtBiBTe909ZadJMtPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6c:91:80:32:2b:a4:a5:b3:88:58:46:e7:5f:da:8b:7e:13:
9d:7c:b5:cd:d0:2e:ac:80:f4:19:43:a6:80:34:7f:38:e6:b3:
95:1c:c1:d6:7b:3a:e9:db:14:8d:1c:d0:c3:89:c2:bf:42:f9:
34:80:a5:dd:d5:f4:01:78:0d:94:8f:47:1c:cf:b2:8c:2b:36:
a1:e6:8a:15:89:c6:9f:21:a9:a7:90:7d:4c:70:c6:01:d2:ee:
6f:2b:dd:65:f5:57:41:99:97:26:cc:05:4f:82:b3:d0:b5:92:
57:fa:b4:47:48:96:19:d1:27:2c:c4:82:8f:4d:18:cd:8c:6a:
bc:c0:4b:96:a3:37:01:d2:ac:dd:26:e1:a1:40:af:c1:55:a4:
9a:2b:96:45:d2:1b:88:b2:c8:e5:bd:bb:33:ca:61:33:5b:cb:
d6:c3:b4:cb:b0:a7:50:70:12:52:0d:35:6d:78:42:95:f0:d3:
45:f4:58:b0:62:4e:7b:74:4a:22:09:b0:bd:6c:bd:7f:2c:0d:
1f:2f:cf:46:41:9c:43:ea:19:13:51:03:fa:e9:18:25:70:89:
10:0f:81:2d:89:a6:26:a5:b6:f6:2b:cb:1e:a6:60:56:9e:81:
30:4f:c3:9c:7d:cb:64:fb:51:40:0c:1b:af:d6:58:13:18:6b:
a3:0b:ba:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBYWH/Q3OMCOnRZJEUERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjUwMTAyMDk1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGU0ODM3ZjExZWY2MjNiNDE4ODE0ZGVmNzRmNTk2OWQyNGNiNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHgfw6Xcj9gA+qvWB4GBzmqw+iCb
KkSJc77EuUPb7tp+vG7y+smTdI4MQaOVQ9u39bpYPxZ8FmjoQDuBTwNnSCVdli14
WjUByuSi+bERWoEdy0GvRQBehdRFx/+riE2NNtBhziq9suq010YoygL9WTJmSfKi
ro8PN0HnVaNUpxxxwEZ5kqYOcdpSsRwkk2jO3apgLvtv47AICDgmuQLLi3ywH2yI
e/nkj1AKJj32jzyZowjqM6Q08d9f+GKqdckWFLaay23aKXbed2KlEutQdIvzbs/u
0E2L/KlCfIMPtAxp3YdkT5ipwnOCviE0a6JUycmLeeH34QQHhZ8BIQuAfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTkg38R72I7QYgU3vdPWWnSTLTwMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvVk9TRGZ4SHZZanRCaUJUZTkwOVphZEpNdFBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhQYMA0G
CSqGSIb3DQEBCwUAA4IBAQCNbJGAMiukpbOIWEbnX9qLfhOdfLXN0C6sgPQZQ6aA
NH845rOVHMHWezrp2xSNHNDDicK/Qvk0gKXd1fQBeA2Uj0ccz7KMKzah5ooVicaf
IamnkH1McMYB0u5vK91l9VdBmZcmzAVPgrPQtZJX+rRHSJYZ0ScsxIKPTRjNjGq8
wEuWozcB0qzdJuGhQK/BVaSaK5ZF0huIssjlvbszymEzW8vWw7TLsKdQcBJSDTVt
eEKV8NNF9FiwYk57dEoiCbC9bL1/LA0fL89GQZxD6hkTUQP66RglcIkQD4EtiaYm
pbb2K8sepmBWnoEwT8Ocfctk+1FADBuv1lgTGGujC7rW
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:59:31 2025 by rpki-client