Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/VhS1RyH3Mcq-T4L2xynRO5eSgbY.roa
File: VhS1RyH3Mcq-T4L2xynRO5eSgbY.roa (raw, json)
Hash identifier: 4syHXAu+SYrWD8HKRxrJcgZ8BamXSKlJHvOgKLTOf/s=
Subject key identifier: 56:14:B5:47:21:F7:31:CA:BE:4F:82:F6:C7:29:D1:3B:97:92:81:B6
Certificate issuer: /CN=d4df420af45da27789ef1729e25035c427717257
Certificate serial: 01A2F3
Authority key identifier: D4:DF:42:0A:F4:5D:A2:77:89:EF:17:29:E2:50:35:C4:27:71:72:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N9CCvRdoneJ7xcp4lA1xCdxclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/VhS1RyH3Mcq-T4L2xynRO5eSgbY.roa
Signing time: Tue 01 Feb 2022 13:46:12 +0000
ROA not before: Tue 01 Feb 2022 13:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.39.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107251 (0x1a2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4df420af45da27789ef1729e25035c427717257
Validity
Not Before: Feb 1 13:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5614b54721f731cabe4f82f6c729d13b979281b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:87:63:1f:4d:dd:00:3b:85:c6:eb:18:c9:
08:de:52:68:26:57:f7:b7:b4:78:b1:0c:6c:58:07:
44:2e:72:be:db:e4:b0:fb:85:d4:28:5b:29:ff:4a:
8b:84:4e:16:cb:10:45:ad:69:85:f6:60:de:95:fb:
e8:59:90:bc:92:59:95:62:f9:7f:1a:20:b6:50:ce:
9e:a4:c0:a4:21:66:de:c0:c0:7e:6b:60:56:92:ac:
43:e8:78:2f:8c:d3:d7:ea:f3:dc:ba:44:4a:9b:42:
ad:25:17:0b:ba:e0:19:6d:52:a6:9a:c0:c0:3c:8f:
58:d6:b5:ef:3c:fe:eb:0a:0c:96:96:1d:2e:9c:b0:
2a:68:ff:41:5e:91:22:75:4a:29:a6:a0:cc:a2:0a:
ff:5c:26:b4:df:16:3b:d5:b3:3d:72:21:bc:d3:9b:
6e:36:1c:40:8b:3a:a3:a3:d2:51:ce:fd:4c:c6:54:
2b:dc:92:0f:11:b8:26:48:83:f2:a3:eb:8f:32:c0:
07:96:79:c2:1a:04:88:ac:93:46:af:2c:fd:8f:24:
be:8d:d0:66:ee:6e:6d:66:23:ef:10:17:3f:f9:2d:
b2:de:0e:5f:ba:73:a8:3f:25:ea:3f:0a:c7:c1:c4:
00:2a:eb:5d:3a:73:7e:c8:91:37:20:46:c6:02:ac:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:14:B5:47:21:F7:31:CA:BE:4F:82:F6:C7:29:D1:3B:97:92:81:B6
X509v3 Authority Key Identifier:
keyid:D4:DF:42:0A:F4:5D:A2:77:89:EF:17:29:E2:50:35:C4:27:71:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N9CCvRdoneJ7xcp4lA1xCdxclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/VhS1RyH3Mcq-T4L2xynRO5eSgbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a708a-6434-46e9-a335-fd1f36e8b5b3/1/1N9CCvRdoneJ7xcp4lA1xCdxclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d1:37:5a:39:5c:b5:c9:91:df:41:c7:c4:47:fc:55:65:7e:
26:6d:d5:98:63:34:02:13:b1:82:b5:80:32:b5:da:4d:a3:e3:
46:af:6e:52:1f:b4:be:6a:81:88:38:f7:57:5c:60:a8:5a:f8:
9e:ec:99:7a:6b:84:8e:da:c0:72:0b:77:d2:a8:0b:33:f4:4d:
bb:9e:3e:a2:21:bc:28:89:f1:4f:e7:87:12:1f:84:94:f6:8f:
bc:26:d4:6b:a5:d0:92:0e:c4:b0:93:b2:1b:00:c8:9c:06:e9:
2b:8c:75:ea:1b:c3:1a:0c:5f:a7:ab:f1:84:5e:5c:ce:1a:30:
ad:ad:58:90:b2:0a:25:df:b2:a5:12:33:cc:4a:7a:11:5b:28:
06:fd:e5:2e:cd:bb:a7:fa:4d:32:1d:cb:a7:6e:48:11:e4:d4:
58:f5:bf:0a:d3:d4:33:71:8c:d0:80:77:fe:cc:09:72:f7:10:
3e:03:fb:2a:3a:cb:ae:37:66:a4:60:f3:a3:8a:41:a2:bb:fd:
c5:e7:34:c0:82:15:4b:f4:10:9a:69:aa:01:56:c3:a3:7e:8c:
9c:bc:1a:1a:29:3f:14:a0:7f:f3:78:53:9b:52:6c:e0:cb:e9:
8e:a2:57:c8:8d:f3:19:55:3e:b8:e0:99:6f:53:00:8a:63:31:
11:04:89:12
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAaLzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ0
ZGY0MjBhZjQ1ZGEyNzc4OWVmMTcyOWUyNTAzNWM0Mjc3MTcyNTcwHhcNMjIwMjAx
MTM0NjEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1NjE0YjU0NzIxZjcz
MWNhYmU0ZjgyZjZjNzI5ZDEzYjk3OTI4MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmpSHYx9N3QA7hcbrGMkI3lJoJlf3t7R4sQxsWAdELnK+2+Sw
+4XUKFsp/0qLhE4WyxBFrWmF9mDelfvoWZC8klmVYvl/GiC2UM6epMCkIWbewMB+
a2BWkqxD6HgvjNPX6vPcukRKm0KtJRcLuuAZbVKmmsDAPI9Y1rXvPP7rCgyWlh0u
nLAqaP9BXpEidUoppqDMogr/XCa03xY71bM9ciG805tuNhxAizqjo9JRzv1MxlQr
3JIPEbgmSIPyo+uPMsAHlnnCGgSIrJNGryz9jyS+jdBm7m5tZiPvEBc/+S2y3g5f
unOoPyXqPwrHwcQAKutdOnN+yJE3IEbGAqyr3wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFYUtUch9zHKvk+C9scp0TuXkoG2MB8GA1UdIwQYMBaAFNTfQgr0XaJ3ie8X
KeJQNcQncXJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MU45Q0N2UmRvbmVKN3hjcDRsQTF4Q2R4Y2xjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85Ni85YTcwOGEtNjQzNC00NmU5LWEzMzUtZmQxZjM2ZThiNWIzLzEv
VmhTMVJ5SDNNY3EtVDRMMnh5blJPNWVTZ2JZLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85
YTcwOGEtNjQzNC00NmU5LWEzMzUtZmQxZjM2ZThiNWIzLzEvMU45Q0N2UmRvbmVK
N3hjcDRsQTF4Q2R4Y2xjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwie+MA0GCSqGSIb3DQEBCwUAA4IB
AQBt0TdaOVy1yZHfQcfER/xVZX4mbdWYYzQCE7GCtYAytdpNo+NGr25SH7S+aoGI
OPdXXGCoWvie7Jl6a4SO2sByC3fSqAsz9E27nj6iIbwoifFP54cSH4SU9o+8JtRr
pdCSDsSwk7IbAMicBukrjHXqG8MaDF+nq/GEXlzOGjCtrViQsgol37KlEjPMSnoR
WygG/eUuzbun+k0yHcunbkgR5NRY9b8K09QzcYzQgHf+zAly9xA+A/sqOsuuN2ak
YPOjikGiu/3F5zTAghVL9BCaaaoBVsOjfoycvBoaKT8UoH/zeFObUmzgy+mOolfI
jfMZVT644JlvUwCKYzERBIkS
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:20 2025 by rpki-client