Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VgyhdSB8I1Z7UAcWcf0HW1GELHs.roa
File: VgyhdSB8I1Z7UAcWcf0HW1GELHs.roa (raw, json)
Hash identifier: prepKcG8KrQ710OfPwAJ/bRum+paPgRKEzvfE9g/gF8=
Subject key identifier: 56:0C:A1:75:20:7C:23:56:7B:50:07:16:71:FD:07:5B:51:84:2C:7B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019488D1EE6C6F906510F2DC6A0732883895
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VgyhdSB8I1Z7UAcWcf0HW1GELHs.roa
Signing time: Tue 21 Jan 2025 12:24:06 +0000
ROA not before: Tue 21 Jan 2025 12:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 85.204.241.0/24 maxlen: 24
92.114.86.0/23 maxlen: 24
94.177.98.0/23 maxlen: 24
188.212.131.0/24 maxlen: 24
188.241.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:d1:ee:6c:6f:90:65:10:f2:dc:6a:07:32:88:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 21 12:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=560ca175207c23567b50071671fd075b51842c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7c:9d:cf:65:0e:c0:fd:9c:d6:34:8f:cc:19:
3e:97:40:cf:05:10:ed:57:0f:df:bf:14:00:8c:c3:
07:68:4a:62:2b:dc:58:f9:f6:61:02:bf:fb:1e:2b:
15:8d:cc:ad:67:9b:2e:55:52:e8:82:c2:55:cc:2a:
36:87:db:e3:bd:11:42:70:64:3b:52:44:a7:9a:52:
71:e9:f5:75:0d:4d:3f:8e:f2:a0:9e:a6:1b:44:e2:
b3:67:49:de:5c:f3:1b:32:ce:e2:07:f8:83:38:6b:
f5:c0:26:08:05:10:cb:e2:ff:46:f8:5c:5d:5f:a8:
7a:c3:2c:6b:a0:e1:dc:c8:c0:89:dd:1e:ac:ec:9f:
b9:72:da:7f:85:fb:6d:f6:72:5a:ff:a1:fc:84:5d:
1c:58:09:a7:8d:00:26:8a:d6:a3:3f:71:dc:f7:f3:
1d:bd:15:32:9a:74:7d:9a:33:81:a2:bf:0c:fa:92:
00:8c:3f:07:35:d4:fd:a4:39:48:10:d9:cb:0c:50:
05:be:01:75:78:6d:33:d0:5d:1a:4d:1b:d3:7d:3f:
bb:6a:30:b4:30:0b:c7:44:25:a4:97:be:7b:58:ce:
42:34:8e:af:de:da:03:af:93:35:06:b8:9f:09:20:
41:d6:ca:4a:d6:ce:44:13:bd:04:07:e9:a4:5f:c9:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0C:A1:75:20:7C:23:56:7B:50:07:16:71:FD:07:5B:51:84:2C:7B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/VgyhdSB8I1Z7UAcWcf0HW1GELHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.241.0/24
92.114.86.0/23
94.177.98.0/23
188.212.131.0/24
188.241.127.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:e9:30:72:46:9b:95:45:9b:48:e2:45:c1:ba:5e:1f:e9:
0e:ce:fd:ad:97:14:ac:82:1c:6f:b5:61:b8:3b:61:76:f4:07:
ad:9c:ba:7c:c9:12:67:58:d3:b9:0f:e5:03:df:c8:3d:84:d4:
2c:ba:15:c1:dc:78:86:f4:8f:89:8e:c9:5a:dd:95:3a:e8:13:
3f:13:56:89:b1:5c:ff:f3:f7:c1:5f:6a:f5:1d:d6:ec:d4:85:
09:f6:60:98:b5:75:bb:94:c2:03:e1:44:6c:53:6e:6d:8a:7c:
07:6c:b6:ce:26:ab:5e:08:7e:c9:a3:0a:f0:d5:6b:4a:b1:52:
2e:bd:bf:a7:f7:7d:cf:db:39:71:04:f1:84:ff:cb:7e:a8:21:
da:03:c9:ed:7e:13:eb:5b:20:07:d3:22:39:37:3e:7c:70:bd:
49:d4:18:3b:42:c9:02:16:b4:f0:c5:c6:f1:99:55:0b:90:9d:
c0:9e:59:d3:fe:f1:a9:8c:25:13:4c:1b:f6:5c:07:41:6e:bb:
cf:a4:c6:bf:9e:d5:5f:3a:45:1e:2a:09:2b:77:e8:fe:db:07:
1e:68:2c:19:79:e7:33:64:f6:60:0c:8b:24:8b:12:bd:d4:1e:
05:25:db:be:9a:6f:65:b3:32:5e:3f:17:ae:c5:7e:5c:9a:c3:
f2:5a:13:b4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZSI0e5sb5BlEPLcagcyiDiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTIxMTIyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjBjYTE3NTIwN2MyMzU2N2I1MDA3MTY3MWZkMDc1YjUxODQyYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Xydz2UOwP2c1jSPzBk+l0DPBRDt
Vw/fvxQAjMMHaEpiK9xY+fZhAr/7HisVjcytZ5suVVLogsJVzCo2h9vjvRFCcGQ7
UkSnmlJx6fV1DU0/jvKgnqYbROKzZ0neXPMbMs7iB/iDOGv1wCYIBRDL4v9G+Fxd
X6h6wyxroOHcyMCJ3R6s7J+5ctp/hftt9nJa/6H8hF0cWAmnjQAmitajP3Hc9/Md
vRUymnR9mjOBor8M+pIAjD8HNdT9pDlIENnLDFAFvgF1eG0z0F0aTRvTfT+7ajC0
MAvHRCWkl757WM5CNI6v3toDr5M1BrifCSBB1spK1s5EE70EB+mkX8md1wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFYMoXUgfCNWe1AHFnH9B1tRhCx7MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1ZneWhkU0I4STFaN1VBY1djZjBIVzFHRUxIcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABVzPED
BAFcclYDBAFesWIDBAC81IMDBAC88X8wDQYJKoZIhvcNAQELBQADggEBAHRs6TBy
RpuVRZtI4kXBul4f6Q7O/a2XFKyCHG+1Ybg7YXb0B62cunzJEmdY07kP5QPfyD2E
1Cy6FcHceIb0j4mOyVrdlTroEz8TVomxXP/z98FfavUd1uzUhQn2YJi1dbuUwgPh
RGxTbm2KfAdsts4mq14IfsmjCvDVa0qxUi69v6f3fc/bOXEE8YT/y36oIdoDye1+
E+tbIAfTIjk3PnxwvUnUGDtCyQIWtPDFxvGZVQuQncCeWdP+8amMJRNMG/ZcB0Fu
u8+kxr+e1V86RR4qCSt36P7bBx5oLBl55zNk9mAMiySLEr3UHgUl276ab2WzMl4/
F67Fflyaw/JaE7Q=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:02 2025 by rpki-client