Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/vuckuXbmedLIJWITtJ1gJzQY8X0.roa
File: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (raw, json)
Hash identifier: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=
Subject key identifier: BE:E7:24:B9:76:E6:79:D2:C8:25:62:13:B4:9D:60:27:34:18:F1:7D
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019424B36AB48265D40570906622FB3E1301
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/vuckuXbmedLIJWITtJ1gJzQY8X0.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61060
IP address blocks: 45.158.204.0/23 maxlen: 23
185.132.236.0/22 maxlen: 22
194.120.124.0/23 maxlen: 23
194.120.190.0/23 maxlen: 23
194.122.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6a:b4:82:65:d4:05:70:90:66:22:fb:3e:13:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bee724b976e679d2c8256213b49d60273418f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:36:fc:11:9a:03:10:b4:d9:97:b7:76:81:
2f:56:7a:03:37:48:a1:33:e5:9e:57:6d:ec:93:5c:
70:2a:c6:9b:8f:6d:fb:ef:cd:9f:aa:e0:98:ca:9a:
10:ad:31:51:e9:36:89:a4:07:8c:c8:52:b9:d8:aa:
da:27:a9:96:7b:e0:74:17:7e:47:e0:ac:fc:52:f8:
57:24:cb:ba:2a:6e:a5:d2:9f:d7:2b:ca:b7:b8:f8:
ec:57:99:c6:52:79:a7:08:79:80:2e:06:fd:87:d2:
a5:6b:f3:8a:25:e4:b6:2c:cf:d2:dc:1c:22:6e:ea:
3a:af:58:00:99:e0:f5:b1:00:ae:9c:16:6f:d8:6c:
48:e2:3f:c2:9a:0a:64:9b:d3:a9:d7:9d:1e:77:85:
d9:a8:be:c2:4d:bc:51:90:52:31:e8:18:52:85:8a:
0c:c3:b1:e4:45:fd:97:00:40:6d:29:93:2c:da:69:
cf:6a:49:66:5c:87:70:17:18:b2:b7:29:4f:e5:e1:
ba:da:d1:cb:09:1b:70:2f:28:21:1d:a9:89:ab:ca:
e2:0a:9d:98:34:b5:fc:ca:c0:dd:45:62:d1:7f:32:
54:bd:88:7b:1a:19:2d:4c:c4:f1:d8:93:a2:f1:04:
fe:b8:9d:da:bd:81:97:70:cc:90:06:0e:2b:f7:76:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:24:B9:76:E6:79:D2:C8:25:62:13:B4:9D:60:27:34:18:F1:7D
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/vuckuXbmedLIJWITtJ1gJzQY8X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.204.0/23
185.132.236.0/22
194.120.124.0/23
194.120.190.0/23
194.122.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:66:b5:54:41:00:ed:be:64:ea:44:14:49:6b:4f:fb:40:9e:
eb:44:39:40:44:30:2b:9a:21:63:38:8c:df:76:4f:e9:d8:08:
3a:4b:92:9d:1c:de:71:34:49:59:e0:06:8e:c6:30:e8:ff:ce:
e8:b6:bd:4e:d4:86:4a:ab:45:50:f2:9e:6c:6e:61:2f:e7:08:
30:8e:ae:11:df:90:8b:e3:3a:8d:b2:8d:d1:cd:da:8f:2a:3b:
1d:35:1b:b4:6b:17:23:4b:24:d9:54:3a:99:dc:51:ea:17:58:
2d:51:13:a7:55:58:f4:3c:b9:92:9f:6b:80:53:84:b2:ee:33:
d6:05:61:23:45:c2:09:e8:93:e8:47:67:a6:71:26:dd:06:52:
70:c6:11:49:6a:eb:63:f2:47:1d:11:3d:0a:77:4c:f2:a7:dd:
97:65:48:4b:84:7f:b4:20:2b:ee:67:b5:68:d1:75:8f:7c:a0:
6c:ab:b0:e0:a1:6b:2c:b1:1e:20:3d:c0:e9:79:8c:05:6f:c7:
14:dd:de:eb:80:51:01:04:af:ff:ac:fd:e6:87:d3:50:52:c9:
03:77:a3:c8:cb:e5:75:21:24:8d:ee:1d:bd:6b:d3:d5:95:44:
4b:07:9c:c6:4a:5d:2b:21:e9:04:bf:c2:b2:62:f9:ea:48:a7:
b2:eb:13:12
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQks2q0gmXUBXCQZiL7PhMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5
NjNmZDIwHhcNMjUwMTAyMDE0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU3MjRiOTc2ZTY3OWQyYzgyNTYyMTNiNDlkNjAyNzM0MThmMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59k2/BGaAxC02Ze3doEvVnoDN0ih
M+WeV23sk1xwKsabj237782fquCYypoQrTFR6TaJpAeMyFK52KraJ6mWe+B0F35H
4Kz8UvhXJMu6Km6l0p/XK8q3uPjsV5nGUnmnCHmALgb9h9Kla/OKJeS2LM/S3Bwi
buo6r1gAmeD1sQCunBZv2GxI4j/Cmgpkm9Op150ed4XZqL7CTbxRkFIx6BhShYoM
w7HkRf2XAEBtKZMs2mnPaklmXIdwFxiytylP5eG62tHLCRtwLyghHamJq8riCp2Y
NLX8ysDdRWLRfzJUvYh7GhktTMTx2JOi8QT+uJ3avYGXcMyQBg4r93ZWiQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFL7nJLl25nnSyCViE7SdYCc0GPF9MB8GA1UdIwQY
MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt
MjkxYWFlZGQ1OGNjLzEvdnVja3VYYm1lZExJSldJVHRKMWdKelFZOFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj
LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLZ7MAwQC
uYTsAwQBwnh8AwQBwni+AwQCwnrwMA0GCSqGSIb3DQEBCwUAA4IBAQCoZrVUQQDt
vmTqRBRJa0/7QJ7rRDlARDArmiFjOIzfdk/p2Ag6S5KdHN5xNElZ4AaOxjDo/87o
tr1O1IZKq0VQ8p5sbmEv5wgwjq4R35CL4zqNso3RzdqPKjsdNRu0axcjSyTZVDqZ
3FHqF1gtUROnVVj0PLmSn2uAU4Sy7jPWBWEjRcIJ6JPoR2emcSbdBlJwxhFJautj
8kcdET0Kd0zyp92XZUhLhH+0ICvuZ7Vo0XWPfKBsq7DgoWsssR4gPcDpeYwFb8cU
3d7rgFEBBK//rP3mh9NQUskDd6PIy+V1ISSN7h29a9PVlURLB5zGSl0rIekEv8Ky
YvnqSKey6xMS
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:02 2025 by rpki-client