Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/vrGI5wRnffUMHMDGcEI1Q2-_R0c.roa
File: vrGI5wRnffUMHMDGcEI1Q2-_R0c.roa (raw, json)
Hash identifier: sOswXC69NMqAaUVtEgCAVsFZLGsMtcpYOiqBxosKy3Q=
Subject key identifier: BE:B1:88:E7:04:67:7D:F5:0C:1C:C0:C6:70:42:35:43:6F:BF:47:47
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 018E1DACD527D9A23B26CBD6DEB471AAE3B5
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/vrGI5wRnffUMHMDGcEI1Q2-_R0c.roa
Signing time: Fri 08 Mar 2024 10:47:29 +0000
ROA not before: Fri 08 Mar 2024 10:47:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210176
IP address blocks: 192.64.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:ac:d5:27:d9:a2:3b:26:cb:d6:de:b4:71:aa:e3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Mar 8 10:47:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beb188e704677df50c1cc0c6704235436fbf4747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:51:de:7c:78:44:80:71:92:f9:e0:d4:b4:
b9:b3:07:e0:99:54:de:48:da:aa:e7:13:46:e3:05:
83:48:9e:f0:5f:1c:ce:65:9d:19:30:cd:f5:64:0b:
5d:b3:db:dc:df:75:a1:d9:36:db:6c:76:69:ad:d6:
f4:72:f3:c5:6e:e3:67:e8:5d:8b:61:ea:5d:6c:28:
a2:52:fe:7a:33:05:22:05:ac:78:81:63:47:07:a6:
0c:a4:81:98:d8:fc:d5:c5:ef:78:04:b0:28:cc:b4:
46:6a:ee:78:fb:0e:f9:ed:08:6d:c8:66:d0:8d:25:
b0:81:14:fb:cc:df:c4:fb:ee:51:da:3f:5c:a3:1f:
a5:32:18:70:0d:05:c7:b7:48:3b:ac:de:fa:fa:a8:
26:c7:7e:e4:f5:7a:52:f2:54:b0:75:46:53:02:69:
4e:d2:d7:4a:11:ff:2d:ce:af:4c:6d:80:41:ce:b9:
64:88:b9:00:9f:52:c6:a3:28:5f:36:f7:5f:61:35:
d0:a5:58:b6:00:35:19:84:3c:75:c9:82:b8:58:eb:
5f:d1:4b:b9:0a:d6:bf:58:8c:f3:5f:f4:45:a8:d9:
61:2e:cf:14:bf:4d:59:86:3b:fc:bf:9a:aa:12:cc:
c7:84:97:bb:94:42:fb:8a:74:8f:b2:42:61:8c:25:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:88:E7:04:67:7D:F5:0C:1C:C0:C6:70:42:35:43:6F:BF:47:47
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/vrGI5wRnffUMHMDGcEI1Q2-_R0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.64.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:3b:f4:56:df:82:c9:26:fa:37:3a:df:ce:b9:0e:c2:3b:d4:
58:79:3f:3d:05:b9:fe:4f:95:89:1f:4b:e2:ca:fc:33:ce:ca:
29:7b:45:19:5e:00:18:b6:92:e2:20:4f:ac:ac:fd:86:21:b5:
d3:87:87:52:95:8f:a8:c2:b9:4c:71:91:e8:f6:55:ce:19:80:
75:36:3f:cb:b8:61:36:64:e1:6d:d1:6a:00:01:9b:5c:7b:21:
95:ec:04:8e:17:55:c7:c4:7a:c7:4b:b7:0f:fa:2d:e5:86:0a:
1c:3a:14:b0:24:09:02:eb:a4:51:01:95:28:e3:46:74:1b:86:
32:16:3b:0c:92:3f:46:c1:13:03:cf:54:1a:5c:78:3a:9c:c7:
6d:86:18:7b:7a:72:43:f6:5c:79:fb:81:52:66:eb:fd:b9:7e:
4e:41:2e:1d:21:d1:c5:7f:7d:0b:54:d0:85:8b:1a:08:63:70:
e6:1a:d1:25:d0:57:39:01:c1:cd:5d:73:5b:81:02:ac:8f:b0:
24:0b:c4:06:89:90:f9:e9:0e:25:fe:15:85:64:a3:e9:9a:a2:
37:72:5d:12:32:99:92:17:4f:03:98:7a:8a:ac:26:14:a4:a7:
9c:b7:30:e6:18:36:e0:01:76:d4:73:cd:d9:19:15:d5:5f:fa:
4f:10:b2:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4drNUn2aI7JsvW3rRxquO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZThjYzhmNWFmMWU3MzYyZDQ1NGYzZGQ5MWE4Mjk1Mjkx
OWRiNjEwHhcNMjQwMzA4MTA0NzI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWIxODhlNzA0Njc3ZGY1MGMxY2MwYzY3MDQyMzU0MzZmYmY0NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrlR3nx4RIBxkvng1LS5swfgmVTe
SNqq5xNG4wWDSJ7wXxzOZZ0ZMM31ZAtds9vc33Wh2TbbbHZprdb0cvPFbuNn6F2L
YepdbCiiUv56MwUiBax4gWNHB6YMpIGY2PzVxe94BLAozLRGau54+w757QhtyGbQ
jSWwgRT7zN/E++5R2j9cox+lMhhwDQXHt0g7rN76+qgmx37k9XpS8lSwdUZTAmlO
0tdKEf8tzq9MbYBBzrlkiLkAn1LGoyhfNvdfYTXQpVi2ADUZhDx1yYK4WOtf0Uu5
Cta/WIzzX/RFqNlhLs8Uv01Zhjv8v5qqEszHhJe7lEL7inSPskJhjCXpnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6xiOcEZ331DBzAxnBCNUNvv0dHMB8GA1UdIwQY
MBaAFNvozI9a8ec2LUVPPdkagpUpGdthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMt
MjYyMWQ1Yzk5Y2FiLzEvdnJHSTV3Um5mZlVNSE1ER2NFSTFRMi1fUjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNTczZmUtNmUwZS00YmZmLTk5ZmMtMjYyMWQ1Yzk5Y2Fi
LzEvMi1qTWoxcng1ell0UlU4OTJScUNsU2taMjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwEAsMA0G
CSqGSIb3DQEBCwUAA4IBAQBdO/RW34LJJvo3Ot/OuQ7CO9RYeT89Bbn+T5WJH0vi
yvwzzsope0UZXgAYtpLiIE+srP2GIbXTh4dSlY+owrlMcZHo9lXOGYB1Nj/LuGE2
ZOFt0WoAAZtceyGV7ASOF1XHxHrHS7cP+i3lhgocOhSwJAkC66RRAZUo40Z0G4Yy
FjsMkj9GwRMDz1QaXHg6nMdthhh7enJD9lx5+4FSZuv9uX5OQS4dIdHFf30LVNCF
ixoIY3DmGtEl0Fc5AcHNXXNbgQKsj7AkC8QGiZD56Q4l/hWFZKPpmqI3cl0SMpmS
F08DmHqKrCYUpKectzDmGDbgAXbUc83ZGRXVX/pPELLf
-----END CERTIFICATE-----
Generated at Wed Mar 12 07:04:38 2025 by rpki-client