Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/vijarIUYgiNYSjUBEIP4lkhLgNI.roa
File: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (raw, json)
Hash identifier: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=
Subject key identifier: BE:28:DA:AC:85:18:82:23:58:4A:35:01:10:83:F8:96:48:4B:80:D2
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 01942369E135A607D4AD66CBC166403AE118
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/vijarIUYgiNYSjUBEIP4lkhLgNI.roa
Signing time: Wed 01 Jan 2025 19:48:48 +0000
ROA not before: Wed 01 Jan 2025 19:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 130.185.72.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
185.8.172.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
185.208.174.0/24 maxlen: 24
185.208.175.0/24 maxlen: 24
2a03:2dc0::/36 maxlen: 36
2a03:2dc0:1000::/36 maxlen: 36
2a03:2dc0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e1:35:a6:07:d4:ad:66:cb:c1:66:40:3a:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 1 19:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be28daac85188223584a35011083f896484b80d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:91:a0:ad:b5:27:93:1f:92:05:cd:92:da:
51:97:ff:66:b7:83:1d:0d:e6:5f:6f:2f:f6:31:95:
02:f9:82:e4:ac:f4:a2:c8:98:06:65:20:4d:a5:65:
03:8b:6c:6f:32:56:1c:49:f9:17:d7:c1:81:75:50:
e9:96:30:c0:5e:21:2d:5d:6a:23:ec:a4:c1:98:46:
4a:c6:9b:4c:9b:64:5d:61:ed:c9:16:34:ea:ce:5a:
d7:6f:b9:d1:b1:48:27:b5:97:0e:60:0d:5d:fc:fb:
30:f6:9c:97:54:63:db:1a:7f:cd:26:f6:bf:64:00:
58:0c:fc:0d:b0:f7:2d:fe:ca:a3:f1:d7:65:9a:13:
30:f6:f5:5d:4d:3d:a5:22:09:e1:b8:ac:53:36:43:
8b:9c:d9:eb:e8:df:1b:77:0d:6c:7a:71:df:37:44:
bc:75:1b:be:2d:cc:60:57:48:35:21:88:60:40:ba:
50:3c:07:f7:b8:d2:d2:16:91:c4:0b:bf:a5:a3:7c:
2b:9a:5f:86:08:87:27:f3:5b:57:5c:af:e8:60:84:
e7:d8:f2:2e:ba:a1:93:ad:47:c4:14:3b:29:f2:17:
49:12:79:b1:a5:6e:e9:67:47:d8:46:9d:8d:58:61:
49:2d:62:cd:a9:ab:ce:ba:13:58:3b:62:62:04:a0:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:DA:AC:85:18:82:23:58:4A:35:01:10:83:F8:96:48:4B:80:D2
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/vijarIUYgiNYSjUBEIP4lkhLgNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::-2a03:2dc0:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:34:b2:79:70:24:9f:5e:7d:26:9c:c5:31:a6:63:18:25:35:
5e:65:a8:f8:25:77:24:e9:49:07:bd:ea:c9:fc:38:95:29:f7:
ca:58:87:39:2c:08:ef:af:59:ae:49:0e:1a:df:0b:72:f0:48:
d0:ad:0e:75:62:3e:80:8e:bc:44:ba:e0:49:43:f1:98:46:b6:
f8:e9:f8:64:07:1f:a1:b3:65:a4:87:e8:ea:27:bb:42:83:73:
7f:bc:ad:44:18:97:34:e5:46:99:e9:11:2d:de:4c:7f:6a:d8:
cc:65:56:5d:3e:e3:4e:d7:d3:c2:5a:e1:00:7d:96:cc:71:a4:
0b:cb:34:49:83:ae:61:54:7a:69:2b:6c:ad:ab:75:5a:b8:c6:
00:37:70:8f:df:97:df:80:6b:04:43:6d:fa:c5:ef:31:00:69:
69:5d:f9:f1:82:84:80:e3:47:7d:3b:f4:49:87:c6:aa:1b:d6:
ae:b8:99:7b:2d:3b:13:3f:e2:a8:c1:9a:d7:b1:9b:a5:06:65:
eb:a7:62:e8:2f:57:e0:80:32:20:cd:08:79:a3:b7:41:3c:76:
1f:cb:ef:ee:2e:b1:03:31:2b:8e:e6:be:32:0d:07:6d:e5:20:
6e:a5:6f:46:fd:16:51:dc:57:6f:7a:3a:22:6d:7d:b3:c1:71:
78:fe:c7:f3
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZQjaeE1pgfUrWbLwWZAOuEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWQ2YWZiOGRkZjhmOGMwZGQ2NjA3OTBlZGNiYTFmM2Iz
NzBjNjMwHhcNMjUwMTAxMTk0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTI4ZGFhYzg1MTg4MjIzNTg0YTM1MDExMDgzZjg5NjQ4NGI4MGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HqRoK21J5MfkgXNktpRl/9mt4Md
DeZfby/2MZUC+YLkrPSiyJgGZSBNpWUDi2xvMlYcSfkX18GBdVDpljDAXiEtXWoj
7KTBmEZKxptMm2RdYe3JFjTqzlrXb7nRsUgntZcOYA1d/Psw9pyXVGPbGn/NJva/
ZABYDPwNsPct/sqj8ddlmhMw9vVdTT2lIgnhuKxTNkOLnNnr6N8bdw1senHfN0S8
dRu+LcxgV0g1IYhgQLpQPAf3uNLSFpHEC7+lo3wrml+GCIcn81tXXK/oYITn2PIu
uqGTrUfEFDsp8hdJEnmxpW7pZ0fYRp2NWGFJLWLNqavOuhNYO2JiBKAKEQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFL4o2qyFGIIjWEo1ARCD+JZIS4DSMB8GA1UdIwQY
MBaAFHWdavuN34+MDdZgeQ7cuh87NwxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUt
MjU0YmNiY2VjMDM3LzEvdmlqYXJJVVlnaU5ZU2pVQkVJUDRsa2hMZ05JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUtMjU0YmNiY2VjMDM3
LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAYBAIAATASAwQDgrlIAwQC
uQisAwQBudCuMBcEAgACMBEwDwMFBioDLcADBgQqAy3AIDANBgkqhkiG9w0BAQsF
AAOCAQEAeTSyeXAkn159JpzFMaZjGCU1XmWo+CV3JOlJB73qyfw4lSn3yliHOSwI
769ZrkkOGt8LcvBI0K0OdWI+gI68RLrgSUPxmEa2+On4ZAcfobNlpIfo6ie7QoNz
f7ytRBiXNOVGmekRLd5Mf2rYzGVWXT7jTtfTwlrhAH2WzHGkC8s0SYOuYVR6aSts
rat1WrjGADdwj9+X34BrBENt+sXvMQBpaV358YKEgONHfTv0SYfGqhvWrriZey07
Ez/iqMGa17GbpQZl66di6C9X4IAyIM0IeaO3QTx2H8vv7i6xAzErjua+Mg0HbeUg
bqVvRv0WUdxXb3o6Im19s8FxeP7H8w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:24 2025 by rpki-client