Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/VBBzWe5SpTdzDV0BcDm-lI8HigE.roa
File: VBBzWe5SpTdzDV0BcDm-lI8HigE.roa (raw, json)
Hash identifier: E1zYiYAQtmcgmIEoOBfC7DxXV7UWd45FAvdAZbvFvVg=
Subject key identifier: 54:10:73:59:EE:52:A5:37:73:0D:5D:01:70:39:BE:94:8F:07:8A:01
Certificate issuer: /CN=85af77d448a811387a71527fc334dcc4ff71de8f
Certificate serial: 018CC64B4E0A65B54E27E56B5AC0567D7782
Authority key identifier: 85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/VBBzWe5SpTdzDV0BcDm-lI8HigE.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 192.175.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4e:0a:65:b5:4e:27:e5:6b:5a:c0:56:7d:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af77d448a811387a71527fc334dcc4ff71de8f
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54107359ee52a537730d5d017039be948f078a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:b3:ec:bc:11:ff:b8:e9:7d:32:e5:27:23:
ec:a7:ee:4e:3b:b6:0f:fa:98:25:1f:32:ef:4a:93:
70:0b:b8:e2:b8:f2:74:be:c4:b8:8a:e3:b1:94:99:
10:cd:b5:39:f1:48:2c:16:c7:94:78:af:e0:51:64:
01:2a:f1:87:95:33:d0:6c:f4:ab:de:a2:7c:43:8a:
d9:38:1b:18:f1:9b:8f:b6:bd:07:d0:57:16:4a:8a:
9f:4c:c2:fe:2a:bd:43:c0:13:e4:a4:ed:1b:f7:e4:
63:39:b6:27:e4:e5:62:b7:0f:de:71:52:70:8d:c2:
7d:84:9e:32:81:a0:08:aa:30:27:33:43:e5:8c:30:
01:08:b6:b6:61:d6:ca:4e:f9:95:2d:f9:fc:0a:ca:
ef:e8:fc:be:3c:73:c3:38:71:b2:05:76:c1:f9:af:
8c:4e:17:6b:80:f8:80:43:6b:2d:da:56:66:ec:ec:
15:4c:1a:33:6e:f1:7e:50:33:ba:1b:b1:eb:20:87:
fe:cb:42:b5:ac:db:75:72:16:40:1f:bc:b5:53:dc:
6d:a5:ac:9b:97:c1:e5:30:be:a4:09:3b:6d:88:84:
02:c1:74:9d:3e:a9:6e:6f:f5:66:51:0c:7f:9c:c3:
92:64:98:c2:b1:00:2c:f9:7e:33:df:99:0c:c1:a3:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:73:59:EE:52:A5:37:73:0D:5D:01:70:39:BE:94:8F:07:8A:01
X509v3 Authority Key Identifier:
keyid:85:AF:77:D4:48:A8:11:38:7A:71:52:7F:C3:34:DC:C4:FF:71:DE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha931EioETh6cVJ_wzTcxP9x3o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/VBBzWe5SpTdzDV0BcDm-lI8HigE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/55de73-dd5e-414f-a3d4-21d7de2499de/1/ha931EioETh6cVJ_wzTcxP9x3o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.175.1.0/24
Signature Algorithm: sha256WithRSAEncryption
04:35:e8:33:01:6b:77:d4:3b:2a:9e:67:d6:08:86:63:d1:a9:
d1:ad:41:3d:ef:49:3b:51:39:1a:c4:a2:ba:44:5c:cf:9a:50:
09:6c:73:65:0d:24:a7:95:1b:a2:a0:be:23:64:b9:1c:bd:81:
d1:de:80:c2:1b:c1:7d:28:7b:2e:4d:b6:1e:31:26:41:a0:35:
2f:f9:99:90:59:f9:f9:8a:d7:05:6a:f1:9c:4f:a7:39:1d:37:
11:82:98:11:75:08:0a:b4:1b:4c:65:6c:2e:6c:6d:d3:54:69:
63:de:01:10:6f:8c:9c:63:69:8c:6a:aa:02:aa:86:58:a8:70:
13:1d:35:00:7e:3a:a0:f4:b3:c2:26:c3:6d:1f:70:2e:be:f2:
0f:2c:b4:8e:4f:9f:e1:c1:12:ac:f0:a7:b8:ef:58:fb:f9:08:
72:72:6d:4d:3e:46:16:94:b8:2e:a0:c6:38:d4:ea:be:8a:aa:
fb:3a:0c:1d:d5:72:42:a1:fc:f3:6c:71:69:5f:75:3d:10:bf:
39:dc:93:c7:0f:e4:5e:2c:9f:c8:64:25:8b:a5:f6:0d:51:a2:
44:30:bb:55:f9:2b:77:45:ae:73:aa:7c:0d:50:33:ec:6e:1d:
44:bc:ef:28:b9:96:9e:d9:c7:ed:55:07:a5:01:6a:c8:60:ff:
99:11:d0:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS04KZbVOJ+VrWsBWfXeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY3N2Q0NDhhODExMzg3YTcxNTI3ZmMzMzRkY2M0ZmY3
MWRlOGYwHhcNMjQwMTAxMTgzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDEwNzM1OWVlNTJhNTM3NzMwZDVkMDE3MDM5YmU5NDhmMDc4YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRSz7LwR/7jpfTLlJyPsp+5OO7YP
+pglHzLvSpNwC7jiuPJ0vsS4iuOxlJkQzbU58UgsFseUeK/gUWQBKvGHlTPQbPSr
3qJ8Q4rZOBsY8ZuPtr0H0FcWSoqfTML+Kr1DwBPkpO0b9+RjObYn5OVitw/ecVJw
jcJ9hJ4ygaAIqjAnM0PljDABCLa2YdbKTvmVLfn8Csrv6Py+PHPDOHGyBXbB+a+M
ThdrgPiAQ2st2lZm7OwVTBozbvF+UDO6G7HrIIf+y0K1rNt1chZAH7y1U9xtpayb
l8HlML6kCTttiIQCwXSdPqlub/VmUQx/nMOSZJjCsQAs+X4z35kMwaMm/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQQc1nuUqU3cw1dAXA5vpSPB4oBMB8GA1UdIwQY
MBaAFIWvd9RIqBE4enFSf8M03MT/cd6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81NWRlNzMtZGQ1ZS00MTRmLWEzZDQt
MjFkN2RlMjQ5OWRlLzEvVkJCeldlNVNwVGR6RFYwQmNEbS1sSThIaWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81NWRlNzMtZGQ1ZS00MTRmLWEzZDQtMjFkN2RlMjQ5OWRl
LzEvaGE5MzFFaW9FVGg2Y1ZKX3d6VGN4UDl4M284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8BMA0G
CSqGSIb3DQEBCwUAA4IBAQAENegzAWt31DsqnmfWCIZj0anRrUE970k7UTkaxKK6
RFzPmlAJbHNlDSSnlRuioL4jZLkcvYHR3oDCG8F9KHsuTbYeMSZBoDUv+ZmQWfn5
itcFavGcT6c5HTcRgpgRdQgKtBtMZWwubG3TVGlj3gEQb4ycY2mMaqoCqoZYqHAT
HTUAfjqg9LPCJsNtH3AuvvIPLLSOT5/hwRKs8Ke471j7+Qhycm1NPkYWlLguoMY4
1Oq+iqr7Ogwd1XJCofzzbHFpX3U9EL853JPHD+ReLJ/IZCWLpfYNUaJEMLtV+St3
Ra5zqnwNUDPsbh1EvO8ouZae2cftVQelAWrIYP+ZEdBH
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:58 2025 by rpki-client