Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/0vpioq7e7IBvU0f7txi-wExHAPw.roa
File: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (raw, json)
Hash identifier: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=
Subject key identifier: D2:FA:62:A2:AE:DE:EC:80:6F:53:47:FB:B7:18:BE:C0:4C:47:00:FC
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 019424458312AB8DCE9BC8EBD22F8776F00A
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/0vpioq7e7IBvU0f7txi-wExHAPw.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211701
IP address blocks: 185.131.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:83:12:ab:8d:ce:9b:c8:eb:d2:2f:87:76:f0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2fa62a2aedeec806f5347fbb718bec04c4700fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:b8:8e:aa:95:d4:37:67:98:84:10:f5:8b:
0e:82:73:32:e1:81:d4:0e:98:9c:04:51:07:15:b0:
7a:a0:7d:6e:e2:fd:0e:9c:8f:4e:f5:0e:1b:dc:49:
ef:db:b2:83:f6:11:1e:f0:b0:08:5e:3e:73:cf:11:
0d:4c:85:65:ca:0d:c4:d6:9e:bb:cb:db:de:e5:54:
e5:c4:08:0d:3e:b6:74:18:18:6d:85:10:be:db:d9:
4a:f4:f4:8c:7f:95:2e:0c:66:22:8a:e3:cd:c6:1d:
be:33:32:8e:d2:03:46:b7:e2:5f:f0:19:55:c7:f7:
d4:d0:77:43:f9:4e:f8:d2:65:f3:4d:6e:7a:cd:41:
00:6c:77:7b:31:28:29:e7:1c:33:fa:08:51:04:49:
eb:29:01:48:85:7f:dd:b1:65:92:d2:0a:cb:1e:88:
0c:20:d4:1b:cf:08:2e:2a:46:22:8a:38:b2:d3:b3:
f3:c3:ba:30:4f:d9:2a:ee:00:04:74:65:76:c8:69:
c6:21:c5:ee:a4:61:0a:1c:72:ba:6b:d7:cb:1c:72:
ba:79:84:a0:a1:2c:45:d0:bb:0e:1e:1b:d3:89:07:
9e:de:8a:89:c3:6e:cf:d3:87:05:f3:10:9c:05:b4:
a9:a6:55:f1:72:a9:66:75:12:3a:80:1e:56:37:23:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FA:62:A2:AE:DE:EC:80:6F:53:47:FB:B7:18:BE:C0:4C:47:00:FC
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/0vpioq7e7IBvU0f7txi-wExHAPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
37:8f:37:e7:cb:f1:1f:a6:f6:8b:9f:5a:80:61:5a:94:05:3f:
0f:8b:47:ea:73:01:aa:56:ae:f1:8d:fe:f1:d8:a6:12:04:c8:
49:a0:07:c0:c5:bc:02:65:17:88:cb:87:69:0c:79:70:7f:bc:
37:fa:c5:fe:bc:43:13:ca:5d:90:72:69:ae:78:a0:9b:c1:e4:
0b:e6:37:53:fb:e4:b3:d9:91:73:db:db:57:d3:22:bf:17:58:
cc:db:e9:81:ec:4a:18:ed:d5:aa:e6:a3:89:51:be:c5:f8:6d:
8a:13:8f:76:a2:a1:2b:49:15:59:1c:09:11:75:92:99:43:e5:
7b:0e:02:8c:3d:f7:f7:87:e5:41:15:29:4e:b7:bf:12:71:02:
80:c7:96:fd:d9:9e:d9:ad:e6:08:52:59:c2:48:f4:80:9a:06:
84:6a:50:67:12:c4:ca:f0:37:a8:9f:58:6b:09:f3:c9:76:d8:
bc:40:f1:d7:96:51:26:e9:82:d1:28:25:cc:5f:c4:9e:8a:1e:
78:7c:e7:fc:26:f5:91:d6:91:a5:d1:0c:fd:79:3c:a4:c8:c7:
b2:81:86:72:2c:93:06:ca:c9:b8:6f:99:02:62:88:f0:a2:4e:
38:f0:60:b6:73:13:95:4d:e1:11:06:20:ca:09:cc:ce:67:df:
da:b0:2b:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRYMSq43Om8jr0i+HdvAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1
NjI4ZjkwHhcNMjUwMTAxMjM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmZhNjJhMmFlZGVlYzgwNmY1MzQ3ZmJiNzE4YmVjMDRjNDcwMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgW4jqqV1DdnmIQQ9YsOgnMy4YHU
DpicBFEHFbB6oH1u4v0OnI9O9Q4b3Env27KD9hEe8LAIXj5zzxENTIVlyg3E1p67
y9ve5VTlxAgNPrZ0GBhthRC+29lK9PSMf5UuDGYiiuPNxh2+MzKO0gNGt+Jf8BlV
x/fU0HdD+U740mXzTW56zUEAbHd7MSgp5xwz+ghRBEnrKQFIhX/dsWWS0grLHogM
INQbzwguKkYiijiy07Pzw7owT9kq7gAEdGV2yGnGIcXupGEKHHK6a9fLHHK6eYSg
oSxF0LsOHhvTiQee3oqJw27P04cF8xCcBbSpplXxcqlmdRI6gB5WNyMAfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNL6YqKu3uyAb1NH+7cYvsBMRwD8MB8GA1UdIwQY
MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt
ZTQ0MTliNjQyMTJlLzEvMHZwaW9xN2U3SUJ2VTBmN3R4aS13RXhIQVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl
LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPfMA0G
CSqGSIb3DQEBCwUAA4IBAQA3jzfny/EfpvaLn1qAYVqUBT8Pi0fqcwGqVq7xjf7x
2KYSBMhJoAfAxbwCZReIy4dpDHlwf7w3+sX+vEMTyl2QcmmueKCbweQL5jdT++Sz
2ZFz29tX0yK/F1jM2+mB7EoY7dWq5qOJUb7F+G2KE492oqErSRVZHAkRdZKZQ+V7
DgKMPff3h+VBFSlOt78ScQKAx5b92Z7ZreYIUlnCSPSAmgaEalBnEsTK8Deon1hr
CfPJdti8QPHXllEm6YLRKCXMX8Seih54fOf8JvWR1pGl0Qz9eTykyMeygYZyLJMG
ysm4b5kCYojwok448GC2cxOVTeERBiDKCczOZ9/asCsP
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:19 2025 by rpki-client