Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/VDcjC7Lq0qRZDHHqx3Bj2Mex9u8.roa
File: VDcjC7Lq0qRZDHHqx3Bj2Mex9u8.roa (raw, json)
Hash identifier: LBJHlmPyA1B4dSDpIzPPlnsVP2CyGB0QxEO2awZNRU8=
Subject key identifier: 54:37:23:0B:B2:EA:D2:A4:59:0C:71:EA:C7:70:63:D8:C7:B1:F6:EF
Certificate issuer: /CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Certificate serial: 01870DEAD61E1C0DB224FF14ED7D7A5ED60C
Authority key identifier: A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/VDcjC7Lq0qRZDHHqx3Bj2Mex9u8.roa
Signing time: Thu 23 Mar 2023 10:01:46 +0000
ROA not before: Thu 23 Mar 2023 10:01:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 194.88.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:ea:d6:1e:1c:0d:b2:24:ff:14:ed:7d:7a:5e:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62f2d3c269d935227690b28b7fbdd953e1e9edc
Validity
Not Before: Mar 23 10:01:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5437230bb2ead2a4590c71eac77063d8c7b1f6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:9d:3b:74:b3:de:3b:49:6b:cf:e0:41:bf:
1d:77:3d:ec:ba:b9:2c:d7:ad:d8:2f:55:6f:8e:ac:
39:16:7b:a2:4c:bf:05:0c:e9:97:bf:66:90:d1:6f:
7e:9e:9d:03:70:f1:0d:7f:2a:72:e3:e2:23:ff:03:
88:0c:bf:c4:7d:4b:38:ea:f4:ad:ca:08:61:98:39:
b0:4a:3d:95:d5:c4:d8:55:e1:17:35:21:43:74:6f:
1f:52:39:4a:7d:4f:e6:32:06:9e:ab:c3:23:a4:9c:
95:b1:c7:8c:c2:6c:38:98:60:df:74:fa:ba:87:f7:
6f:0b:17:1e:b0:24:d2:05:b4:71:ce:0a:f8:da:cb:
4e:ba:cf:35:bc:37:f4:4b:c4:8a:be:a0:7f:8c:9a:
a1:99:99:1d:18:86:6a:f1:31:fd:d3:90:de:24:3d:
10:51:cb:7e:04:fe:09:74:bb:b8:31:0f:7f:27:02:
4d:10:e0:1b:3a:94:e3:b5:51:53:eb:d9:ab:1c:11:
91:d8:cb:cf:8d:0c:d7:df:8c:58:56:32:42:ad:c3:
d0:a0:9b:eb:b6:52:d7:d4:9f:b4:1b:13:f0:4d:73:
43:99:c7:fd:74:fa:a1:29:02:e6:3d:67:ea:42:5e:
6f:73:92:4b:30:7c:85:34:4a:e4:69:17:96:80:99:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:37:23:0B:B2:EA:D2:A4:59:0C:71:EA:C7:70:63:D8:C7:B1:F6:EF
X509v3 Authority Key Identifier:
keyid:A6:2F:2D:3C:26:9D:93:52:27:69:0B:28:B7:FB:DD:95:3E:1E:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi8tPCadk1InaQsot_vdlT4entw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/VDcjC7Lq0qRZDHHqx3Bj2Mex9u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/325b84-2ed4-4092-906c-100eed812c40/1/pi8tPCadk1InaQsot_vdlT4entw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.223.0/24
Signature Algorithm: sha256WithRSAEncryption
40:de:8a:86:b7:63:83:09:e9:14:66:4d:7b:d7:2b:6a:37:1e:
99:54:74:49:a6:82:76:ea:84:8e:28:21:ee:2f:e0:4b:82:d2:
54:5e:bc:4b:5a:3b:3a:49:cf:46:ee:83:ba:60:19:4d:60:b2:
4a:3a:9c:82:77:5c:1d:cf:c7:2f:be:c4:e8:05:c5:c3:8d:44:
fd:d6:ee:63:8c:33:d0:3b:da:97:21:3d:86:a4:6e:07:68:16:
8b:5b:07:65:81:63:ab:f8:61:7e:c4:43:ef:75:fa:d0:f9:74:
90:7f:03:30:b8:86:b1:92:07:1d:a7:f9:5d:33:50:8e:82:00:
a1:e7:93:89:df:1b:5c:eb:49:93:5e:23:b0:a8:e0:51:99:9f:
c1:66:dc:fc:11:2f:70:79:17:7f:97:7d:7c:d1:d0:e8:05:d6:
80:20:b2:d2:a3:2f:1a:e3:33:8d:72:ab:ae:2c:24:40:28:08:
b9:40:aa:8e:3f:b4:7f:59:f7:5c:34:1a:fd:53:1a:f5:18:ba:
d5:f4:e9:d4:30:5a:15:c5:8f:ec:21:2a:0e:44:f5:53:48:97:
a3:47:21:83:b5:fb:de:23:6a:f8:3f:2a:65:55:2d:5f:66:47:
13:a5:ba:5d:a7:ec:53:7a:21:61:4c:04:33:be:33:84:9c:ce:
5f:63:72:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcN6tYeHA2yJP8U7X16XtYMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmYyZDNjMjY5ZDkzNTIyNzY5MGIyOGI3ZmJkZDk1M2Ux
ZTllZGMwHhcNMjMwMzIzMTAwMTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDM3MjMwYmIyZWFkMmE0NTkwYzcxZWFjNzcwNjNkOGM3YjFmNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuedO3Sz3jtJa8/gQb8ddz3surks
163YL1Vvjqw5FnuiTL8FDOmXv2aQ0W9+np0DcPENfypy4+Ij/wOIDL/EfUs46vSt
yghhmDmwSj2V1cTYVeEXNSFDdG8fUjlKfU/mMgaeq8MjpJyVsceMwmw4mGDfdPq6
h/dvCxcesCTSBbRxzgr42stOus81vDf0S8SKvqB/jJqhmZkdGIZq8TH905DeJD0Q
Uct+BP4JdLu4MQ9/JwJNEOAbOpTjtVFT69mrHBGR2MvPjQzX34xYVjJCrcPQoJvr
tlLX1J+0GxPwTXNDmcf9dPqhKQLmPWfqQl5vc5JLMHyFNErkaReWgJnrpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQ3Iwuy6tKkWQxx6sdwY9jHsfbvMB8GA1UdIwQY
MBaAFKYvLTwmnZNSJ2kLKLf73ZU+Hp7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMt
MTAwZWVkODEyYzQwLzEvVkRjakM3THEwcVJaREhIcXgzQmoyTWV4OXU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMjViODQtMmVkNC00MDkyLTkwNmMtMTAwZWVkODEyYzQw
LzEvcGk4dFBDYWRrMUluYVFzb3RfdmRsVDRlbnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljfMA0G
CSqGSIb3DQEBCwUAA4IBAQBA3oqGt2ODCekUZk171ytqNx6ZVHRJpoJ26oSOKCHu
L+BLgtJUXrxLWjs6Sc9G7oO6YBlNYLJKOpyCd1wdz8cvvsToBcXDjUT91u5jjDPQ
O9qXIT2GpG4HaBaLWwdlgWOr+GF+xEPvdfrQ+XSQfwMwuIaxkgcdp/ldM1COggCh
55OJ3xtc60mTXiOwqOBRmZ/BZtz8ES9weRd/l3180dDoBdaAILLSoy8a4zONcquu
LCRAKAi5QKqOP7R/WfdcNBr9Uxr1GLrV9OnUMFoVxY/sISoORPVTSJejRyGDtfve
I2r4PyplVS1fZkcTpbpdp+xTeiFhTAQzvjOEnM5fY3LC
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:55:54 2025 by rpki-client