Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/vQoI-4y6Tfml573DLn2pCriBNl4.roa
File: vQoI-4y6Tfml573DLn2pCriBNl4.roa (raw, json)
Hash identifier: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=
Subject key identifier: BD:0A:08:FB:8C:BA:4D:F9:A5:E7:BD:C3:2E:7D:A9:0A:B8:81:36:5E
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019421B1F8065F6260702D12FC281EA9934E
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/vQoI-4y6Tfml573DLn2pCriBNl4.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57469
IP address blocks: 194.26.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:06:5f:62:60:70:2d:12:fc:28:1e:a9:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd0a08fb8cba4df9a5e7bdc32e7da90ab881365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:16:d1:49:68:2a:60:7d:65:cb:a3:f7:20:
97:a2:c2:cf:b3:f8:95:c5:54:dd:d2:5c:83:93:b2:
dd:bc:fe:ae:d3:16:66:24:e8:3e:bc:f5:ad:de:ec:
2a:a8:7c:30:ac:4c:2a:fa:5b:1d:55:4a:bb:93:de:
ed:9e:e6:36:b6:32:f4:b2:cf:10:2c:fb:d2:e5:c7:
ce:6c:4f:f5:56:0d:b9:18:3c:0f:1b:93:e5:55:ae:
cb:dd:c8:64:26:fb:f7:30:bd:b4:bf:52:fa:ad:2d:
57:ee:79:44:15:6e:12:98:18:7f:9d:24:d7:ab:87:
c5:49:f8:30:5f:49:c8:e9:6f:66:8a:52:6c:2d:ea:
98:3e:a7:ff:6e:26:c6:55:9e:83:1c:9a:df:6b:83:
8e:fd:a6:0c:69:c9:89:4b:6d:62:0e:3c:0a:59:d8:
fa:6f:ce:53:a6:f7:ea:d7:3d:56:10:37:4f:87:0a:
06:91:c0:75:98:34:29:b5:7f:3f:11:5e:16:73:c2:
e6:b3:47:8c:1b:23:73:9b:30:20:db:1c:66:9a:fd:
fd:94:dd:0c:dd:71:3b:93:03:cb:41:1e:5b:b7:86:
76:b8:83:74:59:7d:dc:a5:88:91:60:97:5f:e0:ab:
4c:ca:01:38:77:33:f2:d6:1a:3a:e8:05:d5:ee:16:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:08:FB:8C:BA:4D:F9:A5:E7:BD:C3:2E:7D:A9:0A:B8:81:36:5E
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/vQoI-4y6Tfml573DLn2pCriBNl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:03:cb:5b:ab:3f:1b:67:78:e7:fd:ff:86:f1:8e:4d:ff:be:
17:de:6e:84:f6:64:ee:d4:96:3f:44:f6:0e:5a:b6:a0:f0:b1:
79:7c:f7:3f:14:86:01:f0:76:b4:8b:1f:5c:17:60:3e:1f:23:
4a:99:e7:b8:b3:c7:bd:b4:b4:a1:90:71:18:4e:04:69:be:39:
e1:bb:30:17:bb:a6:72:8c:22:1b:27:c3:cf:55:c9:cc:72:8e:
e5:9e:a6:0f:a1:69:ea:cb:d9:07:91:d7:fe:c0:59:3a:df:5e:
00:20:5a:6d:cb:1f:2b:dc:ff:aa:a1:14:b7:a0:5b:de:2b:38:
f7:71:43:f6:43:f2:d3:14:71:96:a2:30:a0:20:e1:b2:92:c7:
78:ce:45:3b:00:37:5d:08:92:72:6b:67:2c:f1:ba:2a:81:9e:
89:3f:b6:50:15:b5:ec:69:3b:be:30:8f:79:82:d7:26:4d:1a:
4f:94:01:8d:19:ce:7e:31:f6:87:99:f2:46:9b:52:d7:70:05:
3a:59:c3:ae:08:5b:4d:36:07:22:f0:09:89:22:6c:41:64:0b:
65:34:29:9d:a3:1c:0e:0a:bf:68:18:3e:3b:75:dd:84:1e:62:
b3:e0:52:19:98:12:41:75:54:fa:fc:5f:81:82:96:28:a2:65:
78:51:72:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsfgGX2JgcC0S/CgeqZNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz
MjUxOWYwHhcNMjUwMTAxMTE0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDBhMDhmYjhjYmE0ZGY5YTVlN2JkYzMyZTdkYTkwYWI4ODEzNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZcW0UloKmB9Zcuj9yCXosLPs/iV
xVTd0lyDk7LdvP6u0xZmJOg+vPWt3uwqqHwwrEwq+lsdVUq7k97tnuY2tjL0ss8Q
LPvS5cfObE/1Vg25GDwPG5PlVa7L3chkJvv3ML20v1L6rS1X7nlEFW4SmBh/nSTX
q4fFSfgwX0nI6W9milJsLeqYPqf/bibGVZ6DHJrfa4OO/aYMacmJS21iDjwKWdj6
b85Tpvfq1z1WEDdPhwoGkcB1mDQptX8/EV4Wc8Lms0eMGyNzmzAg2xxmmv39lN0M
3XE7kwPLQR5bt4Z2uIN0WX3cpYiRYJdf4KtMygE4dzPy1ho66AXV7hbVpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0KCPuMuk35pee9wy59qQq4gTZeMB8GA1UdIwQY
MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt
Y2ViMDcxMGEwNzUxLzEvdlFvSS00eTZUZm1sNTczRExuMnBDcmlCTmw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx
LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrhMA0G
CSqGSIb3DQEBCwUAA4IBAQCtA8tbqz8bZ3jn/f+G8Y5N/74X3m6E9mTu1JY/RPYO
Wrag8LF5fPc/FIYB8Ha0ix9cF2A+HyNKmee4s8e9tLShkHEYTgRpvjnhuzAXu6Zy
jCIbJ8PPVcnMco7lnqYPoWnqy9kHkdf+wFk6314AIFptyx8r3P+qoRS3oFveKzj3
cUP2Q/LTFHGWojCgIOGyksd4zkU7ADddCJJya2cs8boqgZ6JP7ZQFbXsaTu+MI95
gtcmTRpPlAGNGc5+MfaHmfJGm1LXcAU6WcOuCFtNNgci8AmJImxBZAtlNCmdoxwO
Cr9oGD47dd2EHmKz4FIZmBJBdVT6/F+BgpYoomV4UXJZ
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:23 2025 by rpki-client