Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/V9bu_0z7-vke15TqRAacNobtW_w.roa
File: V9bu_0z7-vke15TqRAacNobtW_w.roa (raw, json)
Hash identifier: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=
Subject key identifier: 57:D6:EE:FF:4C:FB:FA:F9:1E:D7:94:EA:44:06:9C:36:86:ED:5B:FC
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 0194228DE88A3DC04C299E1F9DCC92B052F2
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/V9bu_0z7-vke15TqRAacNobtW_w.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202710
IP address blocks: 185.9.139.0/24 maxlen: 24
2a0c:b600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e8:8a:3d:c0:4c:29:9e:1f:9d:cc:92:b0:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d6eeff4cfbfaf91ed794ea44069c3686ed5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:7d:9a:7c:c9:8f:a2:84:b8:18:51:7e:ce:
82:a8:80:71:5e:5d:6a:df:00:00:42:a1:14:9f:0a:
58:2e:27:d5:54:f7:0c:20:c6:52:46:0a:c0:98:ed:
56:44:0c:37:a0:3d:b7:b2:05:6c:d7:a3:77:67:f8:
e1:6b:22:c2:25:72:a8:91:09:3a:4f:91:58:1c:a5:
b6:97:e9:1c:b8:13:ee:e7:f1:e4:60:23:60:0d:f2:
fb:3c:ff:17:20:ba:0f:61:d0:59:eb:79:da:75:f7:
14:a1:3c:eb:6a:aa:2e:cd:b1:65:b0:19:d4:47:7a:
c2:c2:60:1b:e0:15:a4:ec:18:12:44:55:86:64:dd:
8d:01:04:4d:26:9d:23:88:bf:f1:38:22:4f:49:81:
8d:91:c5:67:da:2d:3e:a0:07:21:55:c0:4f:4a:82:
d9:8a:f9:c7:2f:49:ed:e3:8e:06:e1:d8:9c:07:ca:
ac:47:b5:f7:9f:cb:23:59:4b:8a:4f:8d:be:48:bb:
e9:5f:5d:2c:4e:70:da:ca:32:dd:0c:47:64:8b:70:
e5:cd:ee:6a:e3:18:63:7e:b2:7d:c4:3d:3a:91:4d:
0b:40:1c:ff:4a:13:2f:e7:76:13:f5:52:7e:9e:20:
87:25:c6:1d:5d:f6:d6:1b:6d:f5:a3:b7:36:1e:35:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:EE:FF:4C:FB:FA:F9:1E:D7:94:EA:44:06:9C:36:86:ED:5B:FC
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/V9bu_0z7-vke15TqRAacNobtW_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.139.0/24
IPv6:
2a0c:b600::/29
Signature Algorithm: sha256WithRSAEncryption
1e:1a:78:0f:dd:ad:eb:ec:03:5b:b6:65:01:6f:00:f9:b0:31:
d0:25:93:80:a3:a4:6e:c9:ae:f5:1d:f9:56:9a:c2:0a:c4:5a:
9c:18:af:25:87:4a:57:11:d8:1d:4e:2f:bd:d7:06:3d:3d:2f:
d0:9a:b6:d6:50:09:31:1c:b8:bb:ac:53:ff:22:c3:05:35:fb:
84:2b:32:4f:c8:21:81:83:24:7f:d0:9d:b1:68:80:40:e3:42:
e2:eb:bb:c3:fa:71:76:00:13:7e:62:97:3f:17:76:d5:7c:13:
03:fc:d5:eb:b9:bd:4c:16:06:88:67:87:e6:32:06:e6:04:aa:
4e:f8:d1:00:15:84:db:b9:f6:93:f9:35:af:7f:54:2c:3f:03:
7e:b8:c9:bd:6f:c6:f3:1f:99:4d:fc:6d:ff:b8:f1:f7:b2:4c:
34:57:a6:11:3c:2e:41:d6:9b:c9:ef:28:10:65:a3:29:33:2f:
d3:f5:db:da:9f:f9:78:c9:26:83:e6:b3:67:c6:b4:96:61:a0:
ac:cb:50:fe:ff:e2:4f:a8:33:66:11:e1:58:97:98:63:29:54:
53:ef:47:ef:a4:d7:7c:46:10:17:95:b9:8a:77:32:32:52:19:
eb:7b:99:b7:de:1f:55:f1:7e:10:47:ca:16:84:c5:16:8b:95:
0e:31:73:42
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijeiKPcBMKZ4fncySsFLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx
NmFmM2UwHhcNMjUwMTAxMTU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Q2ZWVmZjRjZmJmYWY5MWVkNzk0ZWE0NDA2OWMzNjg2ZWQ1YmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2F9mnzJj6KEuBhRfs6CqIBxXl1q
3wAAQqEUnwpYLifVVPcMIMZSRgrAmO1WRAw3oD23sgVs16N3Z/jhayLCJXKokQk6
T5FYHKW2l+kcuBPu5/HkYCNgDfL7PP8XILoPYdBZ63nadfcUoTzraqouzbFlsBnU
R3rCwmAb4BWk7BgSRFWGZN2NAQRNJp0jiL/xOCJPSYGNkcVn2i0+oAchVcBPSoLZ
ivnHL0nt444G4dicB8qsR7X3n8sjWUuKT42+SLvpX10sTnDayjLdDEdki3Dlze5q
4xhjfrJ9xD06kU0LQBz/ShMv53YT9VJ+niCHJcYdXfbWG231o7c2HjV6GQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFfW7v9M+/r5HteU6kQGnDaG7Vv8MB8GA1UdIwQY
MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt
M2E1ZmVjYWNkNDlhLzEvVjlidV8wejctdmtlMTVUcVJBYWNOb2J0V193LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh
LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuQmLMA0E
AgACMAcDBQMqDLYAMA0GCSqGSIb3DQEBCwUAA4IBAQAeGngP3a3r7ANbtmUBbwD5
sDHQJZOAo6Ruya71HflWmsIKxFqcGK8lh0pXEdgdTi+91wY9PS/QmrbWUAkxHLi7
rFP/IsMFNfuEKzJPyCGBgyR/0J2xaIBA40Li67vD+nF2ABN+Ypc/F3bVfBMD/NXr
ub1MFgaIZ4fmMgbmBKpO+NEAFYTbufaT+TWvf1QsPwN+uMm9b8bzH5lN/G3/uPH3
skw0V6YRPC5B1pvJ7ygQZaMpMy/T9dvan/l4ySaD5rNnxrSWYaCsy1D+/+JPqDNm
EeFYl5hjKVRT70fvpNd8RhAXlbmKdzIyUhnre5m33h9V8X4QR8oWhMUWi5UOMXNC
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:52 2025 by rpki-client