Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_vYyrixRE-yXYNd95EagmmedMZs.roa
File: _vYyrixRE-yXYNd95EagmmedMZs.roa (raw, json)
Hash identifier: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=
Subject key identifier: FE:F6:32:AE:2C:51:13:EC:97:60:D7:7D:E4:46:A0:9A:67:9D:31:9B
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 01942369183C564741B032EFF56C15C71403
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_vYyrixRE-yXYNd95EagmmedMZs.roa
Signing time: Wed 01 Jan 2025 19:47:57 +0000
ROA not before: Wed 01 Jan 2025 19:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202943
IP address blocks: 193.109.82.0/24 maxlen: 24
195.216.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:18:3c:56:47:41:b0:32:ef:f5:6c:15:c7:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 1 19:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fef632ae2c5113ec9760d77de446a09a679d319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ea:9f:5b:80:d1:16:55:88:e6:a0:3e:19:91:
03:5b:fe:9a:c0:77:5c:fd:21:3d:b3:36:07:25:1d:
14:d3:49:59:fa:05:24:76:5c:e5:be:15:1e:0b:bf:
65:e4:7e:12:73:20:bc:db:76:59:8d:38:55:54:0e:
09:2f:5b:88:25:91:76:8d:d9:44:f4:dc:b0:66:cd:
9c:1b:6e:28:e9:66:38:f4:db:4a:c3:35:15:01:1f:
d2:f1:3f:0e:04:71:23:f0:4e:d1:df:cc:7b:87:1e:
e2:b4:5e:b6:4b:03:81:69:20:d7:2d:4d:18:8d:27:
e1:38:85:55:fd:92:f5:0c:96:ee:ec:36:ec:af:6e:
5c:57:a0:9a:b9:ce:53:0c:7b:ce:fa:05:cd:0b:35:
8d:f7:7e:9f:0f:1d:73:5a:c8:bc:5f:57:8f:8c:c1:
16:50:7f:44:f7:fb:0d:f0:5e:c6:0f:46:3d:27:8e:
e1:f5:85:84:12:ff:51:b4:96:e3:7b:0f:5b:c1:ef:
c6:a8:d4:f9:79:dc:90:7c:ac:6b:8d:01:f6:9f:a5:
c0:44:36:8d:52:5a:c7:78:94:87:77:0d:bf:21:34:
30:d5:9f:88:eb:27:d5:99:61:96:3d:06:d9:b6:3d:
5a:ee:8f:df:ea:74:8f:9d:f3:a0:da:17:0c:12:3c:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F6:32:AE:2C:51:13:EC:97:60:D7:7D:E4:46:A0:9A:67:9D:31:9B
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/_vYyrixRE-yXYNd95EagmmedMZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.82.0/24
195.216.248.0/24
Signature Algorithm: sha256WithRSAEncryption
96:78:9c:a8:da:07:61:e9:22:a8:93:a4:17:29:9d:3d:aa:c7:
0a:2e:74:af:51:90:c4:4f:59:f1:9b:5c:96:34:a9:cb:b2:60:
73:a8:74:7b:5b:6a:9b:fd:a1:8b:99:71:86:ed:c4:c8:7a:b9:
3d:fe:3d:cf:ba:87:8e:f7:59:7a:79:9f:80:ff:2c:38:4c:a5:
27:4c:5f:68:bf:88:6c:1f:bc:d1:e1:91:60:7b:71:6d:12:be:
46:0e:dd:7b:44:97:b9:68:56:d5:f6:52:04:32:49:17:5c:a2:
89:34:fd:af:fb:1d:12:df:53:e7:65:f1:3a:d7:bd:7b:66:03:
ba:9c:cf:54:31:c2:4b:a1:3d:6e:de:3a:2b:75:a8:d2:28:00:
62:9b:a4:1d:81:3c:8c:5e:78:f9:9f:47:95:99:42:a6:ca:84:
71:91:cd:c5:bf:a2:ab:c4:41:df:6d:ca:4d:a6:8a:85:39:70:
80:8f:4a:21:a8:98:70:11:4c:1a:45:aa:a0:ef:e1:19:e5:45:
72:5e:0d:a3:08:45:25:d6:66:62:58:d4:99:66:a8:58:17:4d:
8d:92:84:82:44:1c:c8:10:6b:84:c8:31:ce:86:0e:5e:44:20:
99:75:60:46:1a:a3:65:f7:f7:30:e0:38:44:8e:7c:0e:1d:8e:
40:3c:84:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaRg8VkdBsDLv9WwVxxQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjUwMTAxMTk0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWY2MzJhZTJjNTExM2VjOTc2MGQ3N2RlNDQ2YTA5YTY3OWQzMTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OqfW4DRFlWI5qA+GZEDW/6awHdc
/SE9szYHJR0U00lZ+gUkdlzlvhUeC79l5H4ScyC823ZZjThVVA4JL1uIJZF2jdlE
9NywZs2cG24o6WY49NtKwzUVAR/S8T8OBHEj8E7R38x7hx7itF62SwOBaSDXLU0Y
jSfhOIVV/ZL1DJbu7Dbsr25cV6Cauc5TDHvO+gXNCzWN936fDx1zWsi8X1ePjMEW
UH9E9/sN8F7GD0Y9J47h9YWEEv9RtJbjew9bwe/GqNT5edyQfKxrjQH2n6XARDaN
UlrHeJSHdw2/ITQw1Z+I6yfVmWGWPQbZtj1a7o/f6nSPnfOg2hcMEjxXHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP72Mq4sURPsl2DXfeRGoJpnnTGbMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvX3ZZeXJpeFJFLXlYWU5kOTVFYWdtbWVkTVpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwW1SAwQA
w9j4MA0GCSqGSIb3DQEBCwUAA4IBAQCWeJyo2gdh6SKok6QXKZ09qscKLnSvUZDE
T1nxm1yWNKnLsmBzqHR7W2qb/aGLmXGG7cTIerk9/j3PuoeO91l6eZ+A/yw4TKUn
TF9ov4hsH7zR4ZFge3FtEr5GDt17RJe5aFbV9lIEMkkXXKKJNP2v+x0S31PnZfE6
1717ZgO6nM9UMcJLoT1u3jordajSKABim6QdgTyMXnj5n0eVmUKmyoRxkc3Fv6Kr
xEHfbcpNpoqFOXCAj0ohqJhwEUwaRaqg7+EZ5UVyXg2jCEUl1mZiWNSZZqhYF02N
koSCRBzIEGuEyDHOhg5eRCCZdWBGGqNl9/cw4DhEjnwOHY5APITQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:59 2025 by rpki-client