Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/vTdkc2WjRZI77wKyTBFTapZQVng.roa
File: vTdkc2WjRZI77wKyTBFTapZQVng.roa (raw, json)
Hash identifier: eGfs9oYTpFW6sbSe0FWlo+6uWtvtpVaDkVPiueIt1K8=
Subject key identifier: BD:37:64:73:65:A3:45:92:3B:EF:02:B2:4C:11:53:6A:96:50:56:78
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019420681D3E3FD7A38919E32950BE9A7397
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/vTdkc2WjRZI77wKyTBFTapZQVng.roa
Signing time: Wed 01 Jan 2025 05:48:01 +0000
ROA not before: Wed 01 Jan 2025 05:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 185.10.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1d:3e:3f:d7:a3:89:19:e3:29:50:be:9a:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Jan 1 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd37647365a345923bef02b24c11536a96505678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:7a:15:53:1e:b3:34:7b:84:8a:56:19:28:
67:81:75:22:88:4f:79:de:62:52:4c:86:a1:07:36:
51:5f:8b:84:45:a4:02:fc:e0:d3:f8:8a:17:81:1d:
35:90:13:6f:43:7b:7f:9a:4c:35:46:7c:61:e9:70:
11:aa:c4:37:94:5f:7e:49:e1:46:48:b3:98:fc:2e:
88:d3:80:22:47:58:74:96:47:f4:66:77:3e:ba:de:
af:05:46:db:4e:1e:02:7e:3f:0d:31:b8:58:d8:e5:
19:38:55:64:5a:96:38:bb:b8:8d:28:d0:96:e1:c4:
38:eb:73:1b:16:a9:73:6a:59:cb:37:cb:4c:9e:f8:
ff:6c:be:c4:bd:4c:f4:dd:4b:1f:55:e2:b9:ae:15:
59:27:45:b3:28:b8:17:0e:5b:84:0a:1d:4a:b7:e6:
3f:99:86:d6:f9:0a:89:e3:48:39:09:20:09:c6:d8:
0f:34:70:84:53:7d:12:f2:0c:ef:49:0e:c9:f7:74:
62:a4:61:9c:f3:a8:fd:9a:32:18:79:22:53:04:8c:
65:33:a7:06:3f:2b:08:3e:49:70:88:be:61:52:7e:
92:16:ac:cc:4b:d5:90:b2:88:d5:aa:af:2a:78:29:
8a:fb:c1:20:7e:72:84:d7:fd:d1:4f:1b:2c:34:a8:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:37:64:73:65:A3:45:92:3B:EF:02:B2:4C:11:53:6A:96:50:56:78
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/vTdkc2WjRZI77wKyTBFTapZQVng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.120.0/23
Signature Algorithm: sha256WithRSAEncryption
64:d2:68:70:f0:10:82:48:f9:91:d3:1a:69:ae:56:82:01:d7:
25:f7:96:a1:f6:17:2a:44:eb:5f:9e:ee:79:41:c5:bf:2e:21:
45:ad:46:96:b7:d7:dd:8f:e4:15:88:9d:58:af:18:10:b2:61:
74:96:8d:3e:31:ef:8c:c1:7e:76:7a:93:15:7e:9c:f0:81:61:
e0:88:f9:9f:8c:b2:df:3c:15:24:bc:25:ec:f5:3c:41:88:7b:
f9:eb:20:a4:0b:5d:eb:18:11:0e:97:74:53:2f:31:f3:29:a6:
b3:7e:e0:dc:a1:4a:db:6e:91:2c:93:d5:c6:a0:e0:d5:03:ed:
1b:a8:a6:12:79:eb:c5:b8:12:f1:30:4f:2c:97:60:ae:7d:36:
bb:77:97:fc:83:1b:b9:6b:22:85:a3:17:3e:94:85:9d:b6:40:
d3:29:05:0a:a4:78:8c:6e:b5:6a:6f:9c:54:70:51:2c:57:29:
89:c8:6f:8d:56:1c:f3:2f:1c:cf:2f:1b:f6:cf:2f:31:ba:bc:
d6:f5:d1:43:c5:c9:0f:0b:48:0d:5e:ac:fd:a4:b6:65:1d:52:
94:38:22:77:a7:dd:45:bb:67:b7:59:6b:6a:be:29:ed:2b:ae:
aa:eb:09:79:d5:0c:d6:eb:8e:c4:5a:8d:5c:47:89:a0:f9:28:
73:5d:a3:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaB0+P9ejiRnjKVC+mnOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjUwMTAxMDU0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDM3NjQ3MzY1YTM0NTkyM2JlZjAyYjI0YzExNTM2YTk2NTA1Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1V6FVMeszR7hIpWGShngXUiiE95
3mJSTIahBzZRX4uERaQC/ODT+IoXgR01kBNvQ3t/mkw1Rnxh6XARqsQ3lF9+SeFG
SLOY/C6I04AiR1h0lkf0Znc+ut6vBUbbTh4Cfj8NMbhY2OUZOFVkWpY4u7iNKNCW
4cQ463MbFqlzalnLN8tMnvj/bL7EvUz03UsfVeK5rhVZJ0WzKLgXDluECh1Kt+Y/
mYbW+QqJ40g5CSAJxtgPNHCEU30S8gzvSQ7J93RipGGc86j9mjIYeSJTBIxlM6cG
PysIPklwiL5hUn6SFqzMS9WQsojVqq8qeCmK+8EgfnKE1/3RTxssNKiA1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL03ZHNlo0WSO+8CskwRU2qWUFZ4MB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvdlRka2MyV2pSWkk3N3dLeVRCRlRhcFpRVm5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQp4MA0G
CSqGSIb3DQEBCwUAA4IBAQBk0mhw8BCCSPmR0xpprlaCAdcl95ah9hcqROtfnu55
QcW/LiFFrUaWt9fdj+QViJ1YrxgQsmF0lo0+Me+MwX52epMVfpzwgWHgiPmfjLLf
PBUkvCXs9TxBiHv56yCkC13rGBEOl3RTLzHzKaazfuDcoUrbbpEsk9XGoODVA+0b
qKYSeevFuBLxME8sl2CufTa7d5f8gxu5ayKFoxc+lIWdtkDTKQUKpHiMbrVqb5xU
cFEsVymJyG+NVhzzLxzPLxv2zy8xurzW9dFDxckPC0gNXqz9pLZlHVKUOCJ3p91F
u2e3WWtqvintK66q6wl51QzW647EWo1cR4mg+ShzXaOt
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:13:34 2025 by rpki-client