Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/veJWpL99-cS6vE5iUdCS70XVp1A.roa
File: veJWpL99-cS6vE5iUdCS70XVp1A.roa (raw, json)
Hash identifier: JfaZAl5cXtJ4CsYEeWqbefsfLTxnqonvG32uA1ONLHs=
Subject key identifier: BD:E2:56:A4:BF:7D:F9:C4:BA:BC:4E:62:51:D0:92:EF:45:D5:A7:50
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194FFB029CE378BD0ECE10E158FF6F520FC
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/veJWpL99-cS6vE5iUdCS70XVp1A.roa
Signing time: Thu 13 Feb 2025 14:22:02 +0000
ROA not before: Thu 13 Feb 2025 14:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
128.65.168.0/22 maxlen: 24
188.214.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:b0:29:ce:37:8b:d0:ec:e1:0e:15:8f:f6:f5:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Feb 13 14:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde256a4bf7df9c4babc4e6251d092ef45d5a750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:f2:82:c7:ea:00:da:d1:39:15:94:03:28:
74:50:c6:c5:78:23:65:a8:37:e5:40:81:23:30:0e:
03:06:98:87:46:14:bb:8c:8d:11:c7:fe:65:6b:8e:
45:5c:b9:c1:8f:1c:0d:2f:07:c8:b3:31:df:a1:fe:
52:b8:c2:91:fa:29:41:b6:cf:60:b2:06:db:40:1a:
93:6e:ac:37:ce:a2:06:bf:39:a1:98:5f:40:69:fd:
3e:c6:00:ab:8b:46:07:f6:4b:1b:5f:e9:a0:fc:9e:
88:c2:4f:ee:a6:1d:f1:8a:8b:b0:48:a1:13:db:14:
19:d8:2d:b7:a0:4e:d7:2a:9c:37:c0:e8:c6:ea:c8:
ec:13:ca:91:bf:40:af:26:34:87:63:22:f1:04:55:
58:d3:7b:13:70:2f:5a:81:af:ca:35:fd:c6:21:29:
be:9f:f8:39:64:5c:0e:6e:d0:62:3a:0b:bd:46:bc:
c7:4a:5a:cc:ec:1f:f0:7c:09:35:45:7f:90:c1:31:
55:18:a0:09:6a:da:98:02:e7:7d:ae:a5:9a:88:5b:
fe:a4:2d:4e:6c:d4:61:f9:7f:f3:e9:d5:ae:16:a1:
b6:13:2b:82:35:99:e4:54:9c:a3:97:c0:21:82:d5:
74:84:de:49:19:82:41:98:d4:f7:79:be:af:2e:c3:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:56:A4:BF:7D:F9:C4:BA:BC:4E:62:51:D0:92:EF:45:D5:A7:50
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/veJWpL99-cS6vE5iUdCS70XVp1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
128.65.168.0/22
188.214.234.0/23
Signature Algorithm: sha256WithRSAEncryption
44:93:b2:b5:c2:92:19:8a:f2:08:74:29:5c:64:b9:01:d2:91:
69:39:02:38:91:83:a9:5d:f1:58:ba:cd:f7:9e:e4:1e:68:7f:
48:1a:fa:59:bc:f2:d2:c6:f0:7b:57:23:a9:d0:05:cb:12:6f:
c5:bd:33:6b:75:c9:ee:09:55:28:71:44:2b:92:40:75:6d:b7:
ad:4d:6d:74:2c:55:18:3d:7d:74:95:19:06:ba:3f:ae:e0:bf:
c0:50:6f:46:cd:e3:4b:a5:51:64:5b:a1:46:99:a6:2f:3b:18:
83:10:f0:47:02:b6:f4:5f:e4:23:af:12:aa:08:51:92:60:ed:
2a:89:e8:41:4f:f0:fa:bb:9f:16:51:e1:cc:b5:92:dd:59:b9:
ad:cb:0f:98:2f:65:f7:b3:c0:ac:f7:3a:04:4c:12:35:04:35:
09:c5:c4:d5:56:d5:49:43:f3:3a:fd:38:b6:4b:de:26:9e:a7:
32:e5:58:d1:6e:8e:eb:c2:a3:df:5a:ae:02:58:e0:b9:8d:c9:
53:14:54:0f:aa:d2:d6:db:bc:39:d2:74:d3:ec:7c:89:06:5d:
64:1b:e9:b7:23:52:c6:e5:75:7a:d7:cd:4d:6a:83:d3:de:03:
3c:e6:e0:17:fa:81:2e:75:9b:2d:d5:42:3a:37:d7:c7:bf:9d:
37:dd:60:9c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZT/sCnON4vQ7OEOFY/29SD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZjlmNTBjYTFjMzRhM2JlNjEwMDQ4ZDEzOGFmM2MwNzUz
YWY5MmIwHhcNMjUwMjEzMTQyMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGUyNTZhNGJmN2RmOWM0YmFiYzRlNjI1MWQwOTJlZjQ1ZDVhNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUfygsfqANrRORWUAyh0UMbFeCNl
qDflQIEjMA4DBpiHRhS7jI0Rx/5la45FXLnBjxwNLwfIszHfof5SuMKR+ilBts9g
sgbbQBqTbqw3zqIGvzmhmF9Aaf0+xgCri0YH9ksbX+mg/J6Iwk/uph3xiouwSKET
2xQZ2C23oE7XKpw3wOjG6sjsE8qRv0CvJjSHYyLxBFVY03sTcC9aga/KNf3GISm+
n/g5ZFwObtBiOgu9RrzHSlrM7B/wfAk1RX+QwTFVGKAJatqYAud9rqWaiFv+pC1O
bNRh+X/z6dWuFqG2EyuCNZnkVJyjl8AhgtV0hN5JGYJBmNT3eb6vLsOzFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL3iVqS/ffnEurxOYlHQku9F1adQMB8GA1UdIwQY
MBaAFMX59Qyhw0o75hAEjROK88B1OvkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEt
OTBhZDBjYWRmZjc5LzEvdmVKV3BMOTktY1M2dkU1aVVkQ1M3MFhWcDFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mMjE5NmEtMzg5ZS00Y2NlLTgxNzEtOTBhZDBjYWRmZjc5
LzEveGZuMURLSERTanZtRUFTTkU0cnp3SFU2LVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBTVFQAwQC
gEGoAwQBvNbqMA0GCSqGSIb3DQEBCwUAA4IBAQBEk7K1wpIZivIIdClcZLkB0pFp
OQI4kYOpXfFYus33nuQeaH9IGvpZvPLSxvB7VyOp0AXLEm/FvTNrdcnuCVUocUQr
kkB1bbetTW10LFUYPX10lRkGuj+u4L/AUG9GzeNLpVFkW6FGmaYvOxiDEPBHArb0
X+QjrxKqCFGSYO0qiehBT/D6u58WUeHMtZLdWbmtyw+YL2X3s8Cs9zoETBI1BDUJ
xcTVVtVJQ/M6/Ti2S94mnqcy5VjRbo7rwqPfWq4CWOC5jclTFFQPqtLW27w50nTT
7HyJBl1kG+m3I1LG5XV6181NaoPT3gM85uAX+oEudZst1UI6N9fHv5033WCc
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:44 2025 by rpki-client