Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/vfOml30VnmMaHPLSbUW9RqxZCTI.roa
File: vfOml30VnmMaHPLSbUW9RqxZCTI.roa (raw, json)
Hash identifier: AcS9v04FHl67/rkfzkbQneddw3zTaSVnL/p2EjA5xGM=
Subject key identifier: BD:F3:A6:97:7D:15:9E:63:1A:1C:F2:D2:6D:45:BD:46:AC:59:09:32
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 0194F43D684D764C40E897295C305B99FAE7
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/vfOml30VnmMaHPLSbUW9RqxZCTI.roa
Signing time: Tue 11 Feb 2025 09:00:52 +0000
ROA not before: Tue 11 Feb 2025 09:00:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.112.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:3d:68:4d:76:4c:40:e8:97:29:5c:30:5b:99:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Feb 11 09:00:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdf3a6977d159e631a1cf2d26d45bd46ac590932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:e5:52:ed:cc:ee:67:68:c8:ac:4c:a2:5a:
1d:cd:f0:33:9b:ee:26:4a:a8:4d:de:7a:eb:03:91:
da:ba:11:e7:2c:50:e3:f5:17:ca:3e:0d:9a:f7:e4:
74:c5:0f:9f:52:1c:65:e2:f5:69:0b:6f:a7:13:88:
dd:57:0b:ff:1c:84:d7:6e:33:d5:e6:62:38:b4:2c:
1b:57:f1:ad:20:1e:1b:78:78:1e:61:20:32:96:fe:
da:3e:45:51:6a:2d:4d:b6:6b:af:72:58:25:2f:78:
31:56:97:91:7a:a4:e3:66:ff:0e:2c:83:38:89:c8:
9d:d2:f9:a4:f2:f7:30:91:ba:c5:d0:0b:ed:ac:12:
ba:c2:7d:8c:4a:28:a7:36:50:cf:dc:7a:c9:0b:e0:
bb:09:63:ab:fd:97:56:ce:8e:51:a8:2d:be:75:b9:
dc:87:3a:0c:ae:d7:27:35:6c:a9:14:d6:be:51:36:
a8:f2:b6:52:35:55:8f:21:f0:cf:67:8f:0f:8e:cc:
d6:67:43:f7:86:c2:8e:99:49:a8:03:be:07:dc:e1:
ad:e1:eb:c7:da:0c:ff:b5:ac:87:5e:d8:8a:ba:e5:
66:a5:70:63:4f:d9:81:9c:0b:fc:ec:63:6b:ed:eb:
c2:33:09:49:a4:4e:d3:70:a9:1d:3a:b6:3a:57:b2:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:A6:97:7D:15:9E:63:1A:1C:F2:D2:6D:45:BD:46:AC:59:09:32
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/vfOml30VnmMaHPLSbUW9RqxZCTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.132.0/24
Signature Algorithm: sha256WithRSAEncryption
79:57:62:c7:db:13:5e:a8:1b:dd:6a:13:76:d5:98:77:53:c6:
b4:f7:3e:83:dc:c0:ad:d0:aa:49:db:a9:e7:94:0e:26:ff:32:
8a:8d:75:57:f2:c0:44:ed:b0:ea:a6:90:fe:dc:68:d1:20:35:
83:74:76:55:4d:ed:77:36:f6:06:26:66:f9:03:e0:cf:33:7e:
ed:a0:f9:68:15:30:f9:6d:8c:fb:07:39:41:0e:9d:aa:9b:1b:
59:31:b5:61:de:2b:fc:36:fd:a6:4a:59:c7:8b:0a:25:6c:1d:
c7:30:19:66:e2:b5:ec:10:84:18:29:54:06:17:a6:db:b4:34:
97:0e:88:10:4f:8a:3f:7a:94:92:07:43:69:a2:aa:01:4b:4a:
2b:f7:47:c8:80:5e:02:41:4f:50:76:10:5f:00:40:cd:f2:5e:
60:02:28:a9:b1:e7:05:da:3f:3f:f1:fa:71:8c:76:e1:67:f7:
f3:62:ae:e6:a0:2f:0d:61:d3:01:bf:51:6e:d3:20:5d:fb:c8:
f8:58:dc:1e:0d:ee:6e:66:c9:72:2e:f7:6d:51:df:9c:25:43:
3b:05:a5:f1:4c:97:5a:9c:60:a6:91:c9:bf:94:f9:fb:c4:fa:
10:ef:cc:36:20:cd:24:92:33:29:3f:df:47:ff:5c:8a:5f:39:
b7:2f:0a:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT0PWhNdkxA6JcpXDBbmfrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw
MGM0YzIwHhcNMjUwMjExMDkwMDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGYzYTY5NzdkMTU5ZTYzMWExY2YyZDI2ZDQ1YmQ0NmFjNTkwOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhblUu3M7mdoyKxMolodzfAzm+4m
SqhN3nrrA5HauhHnLFDj9RfKPg2a9+R0xQ+fUhxl4vVpC2+nE4jdVwv/HITXbjPV
5mI4tCwbV/GtIB4beHgeYSAylv7aPkVRai1NtmuvclglL3gxVpeReqTjZv8OLIM4
icid0vmk8vcwkbrF0AvtrBK6wn2MSiinNlDP3HrJC+C7CWOr/ZdWzo5RqC2+dbnc
hzoMrtcnNWypFNa+UTao8rZSNVWPIfDPZ48PjszWZ0P3hsKOmUmoA74H3OGt4evH
2gz/tayHXtiKuuVmpXBjT9mBnAv87GNr7evCMwlJpE7TcKkdOrY6V7LYnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3zppd9FZ5jGhzy0m1FvUasWQkyMB8GA1UdIwQY
MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt
MDQwNTIzNGFiM2YxLzEvdmZPbWwzMFZubU1hSFBMU2JVVzlScXhaQ1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx
LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXCEMA0G
CSqGSIb3DQEBCwUAA4IBAQB5V2LH2xNeqBvdahN21Zh3U8a09z6D3MCt0KpJ26nn
lA4m/zKKjXVX8sBE7bDqppD+3GjRIDWDdHZVTe13NvYGJmb5A+DPM37toPloFTD5
bYz7BzlBDp2qmxtZMbVh3iv8Nv2mSlnHiwolbB3HMBlm4rXsEIQYKVQGF6bbtDSX
DogQT4o/epSSB0NpoqoBS0or90fIgF4CQU9QdhBfAEDN8l5gAiipsecF2j8/8fpx
jHbhZ/fzYq7moC8NYdMBv1Fu0yBd+8j4WNweDe5uZslyLvdtUd+cJUM7BaXxTJda
nGCmkcm/lPn7xPoQ78w2IM0kkjMpP99H/1yKXzm3Lwpd
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:24 2025 by rpki-client