Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa
File: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (raw, json)
Hash identifier: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=
Subject key identifier: BF:8A:DD:FA:7F:69:3F:BB:09:E4:63:A1:D0:A8:96:ED:F9:F1:EF:08
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DEB755FCF95727BAE9C26849D1745
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41689
IP address blocks: 31.7.64.0/20 maxlen: 32
31.25.128.0/21 maxlen: 32
37.156.144.0/22 maxlen: 32
46.143.0.0/17 maxlen: 32
77.238.120.0/22 maxlen: 32
79.127.0.0/17 maxlen: 32
89.41.40.0/22 maxlen: 32
89.235.96.0/22 maxlen: 32
93.115.144.0/21 maxlen: 32
93.118.180.0/22 maxlen: 32
128.65.176.0/20 maxlen: 32
176.65.240.0/22 maxlen: 32
176.65.252.0/23 maxlen: 32
176.65.254.0/23 maxlen: 32
178.22.120.0/21 maxlen: 32
185.49.84.0/22 maxlen: 32
185.98.112.0/22 maxlen: 32
185.99.212.0/22 maxlen: 32
185.109.244.0/22 maxlen: 32
185.109.248.0/22 maxlen: 32
185.112.32.0/22 maxlen: 32
185.112.36.0/22 maxlen: 32
185.120.220.0/22 maxlen: 32
185.120.248.0/22 maxlen: 32
188.0.240.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:eb:75:5f:cf:95:72:7b:ae:9c:26:84:9d:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf8addfa7f693fbb09e463a1d0a896edf9f1ef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:43:b2:7f:87:d2:e3:f1:fd:53:fd:fc:b9:
19:8b:cd:4c:10:4c:51:9f:45:4e:3f:e2:80:fc:07:
09:46:bd:cf:71:2f:c2:c3:5a:87:0d:dc:41:8b:ce:
a4:d0:b5:ff:30:07:e1:0e:53:77:6e:8d:5a:e5:ea:
72:ae:b0:44:f8:f2:e2:22:5b:86:38:97:dd:b4:be:
1e:2e:ae:ec:f9:7d:75:d9:15:ac:b4:bf:d2:1c:27:
ea:b5:1e:72:a4:d3:45:3d:69:4d:64:d8:73:2a:7f:
3c:17:5c:c4:cf:84:0c:e7:72:7e:4d:22:fb:eb:a7:
99:5b:ec:3d:e7:01:f3:5e:ad:e2:7d:ec:0b:8a:33:
b7:83:39:24:37:bc:4f:d7:ba:93:f3:d2:e9:10:18:
0a:26:f3:96:13:1b:38:1c:1d:eb:ee:ed:c8:e8:bd:
d5:03:6d:df:a4:8d:d8:2a:31:44:cc:bb:95:f7:d8:
c6:c6:e4:07:0c:58:71:59:43:33:86:10:1c:8c:4a:
d9:3c:16:20:c4:96:be:4d:14:aa:53:73:eb:2f:85:
c2:f7:b4:db:3f:30:83:8b:be:74:52:54:da:85:87:
78:cb:20:8d:62:3c:41:03:9f:f0:7a:09:dd:85:53:
89:dd:8c:6b:b4:8e:1b:b8:56:80:41:4d:d8:0e:7b:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8A:DD:FA:7F:69:3F:BB:09:E4:63:A1:D0:A8:96:ED:F9:F1:EF:08
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/20
31.25.128.0/21
37.156.144.0/22
46.143.0.0/17
77.238.120.0/22
79.127.0.0/17
89.41.40.0/22
89.235.96.0/22
93.115.144.0/21
93.118.180.0/22
128.65.176.0/20
176.65.240.0/22
176.65.252.0/22
178.22.120.0/21
185.49.84.0/22
185.98.112.0/22
185.99.212.0/22
185.109.244.0-185.109.251.255
185.112.32.0/21
185.120.220.0/22
185.120.248.0/22
188.0.240.0/23
Signature Algorithm: sha256WithRSAEncryption
60:72:16:ac:63:77:96:e9:76:de:ae:cc:14:da:f5:d3:ab:2e:
2d:44:3d:1d:a4:77:92:c7:85:80:1c:dd:08:36:19:d5:36:5d:
1f:aa:d0:3b:3a:08:fd:4a:15:bb:f5:eb:71:89:50:80:e3:1c:
03:11:b4:93:a5:0d:2b:b7:b6:59:c7:95:bd:6a:a9:34:5b:0a:
3e:d2:48:15:3c:2e:23:e5:5b:d6:0d:9d:b1:46:16:62:80:2d:
18:3a:06:ff:ac:ca:0f:ab:a9:a3:76:39:4d:4a:d3:d1:9b:f4:
6e:0f:55:48:ab:8f:53:73:b3:47:22:9a:6f:f0:99:4f:ec:87:
07:bb:1a:50:fd:e8:9e:dd:bc:30:24:54:5d:c6:27:1c:d8:fb:
e1:f9:c8:ae:2f:c7:47:4d:aa:1e:7a:dc:54:d8:ff:12:f6:68:
b0:6d:44:43:b3:8b:55:da:44:24:02:f4:b8:f3:45:5e:68:fc:
d1:d0:a9:95:2b:8a:82:05:31:8d:b8:dd:5b:50:dd:e7:d4:c2:
55:d1:1a:6e:ce:da:a0:05:7e:9c:39:2a:af:89:38:fd:9c:f3:
db:6b:a6:bb:22:ba:c5:e5:9c:7f:40:cc:0b:e1:f7:54:b4:d0:
0a:9f:3f:b1:eb:91:84:48:91:80:bf:23:bf:0a:25:50:d9:cb:
db:16:23:b3
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZQijet1X8+VcnuunCaEnRdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUwMTAxMTU0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjhhZGRmYTdmNjkzZmJiMDllNDYzYTFkMGE4OTZlZGY5ZjFlZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CBDsn+H0uPx/VP9/LkZi81MEExR
n0VOP+KA/AcJRr3PcS/Cw1qHDdxBi86k0LX/MAfhDlN3bo1a5epyrrBE+PLiIluG
OJfdtL4eLq7s+X112RWstL/SHCfqtR5ypNNFPWlNZNhzKn88F1zEz4QM53J+TSL7
66eZW+w95wHzXq3ifewLijO3gzkkN7xP17qT89LpEBgKJvOWExs4HB3r7u3I6L3V
A23fpI3YKjFEzLuV99jGxuQHDFhxWUMzhhAcjErZPBYgxJa+TRSqU3PrL4XC97Tb
PzCDi750UlTahYd4yyCNYjxBA5/wegndhVOJ3YxrtI4buFaAQU3YDnuZ+QIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFL+K3fp/aT+7CeRjodColu358e8IMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvdjRyZC1uOXBQN3NKNUdPaDBLaVc3Zm54N3dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAQf
B0ADBAMfGYADBAIlnJADBAcujwADBAJN7ngDBAdPfwADBAJZKSgDBAJZ62ADBANd
c5ADBAJddrQDBASAQbADBAKwQfADBAKwQfwDBAOyFngDBAK5MVQDBAK5YnADBAK5
Y9QwDAMEArlt9AMEArlt+AMEA7lwIAMEArl43AMEArl4+AMEAbwA8DANBgkqhkiG
9w0BAQsFAAOCAQEAYHIWrGN3lul23q7MFNr106suLUQ9HaR3kseFgBzdCDYZ1TZd
H6rQOzoI/UoVu/XrcYlQgOMcAxG0k6UNK7e2WceVvWqpNFsKPtJIFTwuI+Vb1g2d
sUYWYoAtGDoG/6zKD6upo3Y5TUrT0Zv0bg9VSKuPU3OzRyKab/CZT+yHB7saUP3o
nt28MCRUXcYnHNj74fnIri/HR02qHnrcVNj/EvZosG1EQ7OLVdpEJAL0uPNFXmj8
0dCplSuKggUxjbjdW1Dd59TCVdEabs7aoAV+nDkqr4k4/Zzz22umuyK6xeWcf0DM
C+H3VLTQCp8/seuRhEiRgL8jvwolUNnL2xYjsw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:19:20 2025 by rpki-client