Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa
File: VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa (raw, json)
Hash identifier: g8P7wwNKLRxTvKsPwE4zpfRuDPifBy4qLKB2zlBcTlw=
Subject key identifier: 56:B5:3B:66:37:13:1B:D4:48:92:E2:2F:84:F1:C3:71:A7:68:29:93
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019422FB9FF600B56C44038F0ADE3991C7EC
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa
Signing time: Wed 01 Jan 2025 17:48:23 +0000
ROA not before: Wed 01 Jan 2025 17:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202636
IP address blocks: 185.142.200.0/24 maxlen: 24
185.142.201.0/24 maxlen: 24
185.142.202.0/24 maxlen: 24
185.142.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9f:f6:00:b5:6c:44:03:8f:0a:de:39:91:c7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 1 17:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b53b6637131bd44892e22f84f1c371a7682993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:dc:ef:cd:25:3f:ef:ae:5c:86:88:7a:db:
44:b7:9f:38:b8:80:d1:6c:43:c8:b6:10:48:f0:98:
86:e2:0c:49:c6:83:7c:d8:97:b7:4f:db:65:f5:90:
b6:49:47:f1:8e:f9:53:ef:e0:40:7e:ba:41:25:f8:
fb:b0:2b:9d:90:72:9e:f1:b8:71:c7:38:50:39:00:
42:0d:84:c6:17:49:14:a5:e3:8a:1d:db:ba:c6:10:
a0:fc:75:36:48:59:80:3f:0b:6d:ab:2e:d6:61:da:
d1:01:cb:f5:29:6e:13:2b:83:43:af:c9:56:7a:03:
36:68:82:22:93:16:ea:ba:c0:39:d8:d5:8e:a4:18:
d1:b3:69:45:07:3a:0d:17:56:29:5b:ae:00:37:5b:
94:a3:19:9a:c7:ac:fc:4e:e6:b9:fa:54:b1:e6:3c:
17:1c:cd:80:2e:78:74:cb:27:f1:cc:18:a8:f9:40:
61:91:56:78:ad:b7:97:55:ec:a7:7b:bb:45:28:1b:
58:31:66:d2:14:5d:61:0c:a1:c6:db:db:20:b1:a2:
60:cc:1b:84:cd:4b:66:eb:01:ba:8a:27:56:8e:ab:
c1:a2:03:82:63:58:bb:34:f2:68:b6:c8:ac:de:aa:
7c:3b:a9:db:56:cf:8c:3a:4e:e0:a0:cf:5f:3a:09:
6a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:3B:66:37:13:1B:D4:48:92:E2:2F:84:F1:C3:71:A7:68:29:93
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/VrU7ZjcTG9RIkuIvhPHDcadoKZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.200.0/22
Signature Algorithm: sha256WithRSAEncryption
07:92:fc:34:8f:15:fd:40:ab:c6:93:5e:80:58:3a:a7:bd:0d:
a9:49:c8:11:56:4e:d1:3f:58:55:ec:a1:97:81:24:ca:1c:0c:
d9:fa:8b:1f:34:9c:75:98:cc:df:74:93:a3:df:1f:d2:59:68:
dc:47:89:6b:be:20:4a:c3:83:d5:57:1d:29:f9:51:7d:f5:24:
45:aa:82:59:b7:1f:63:b5:f8:7d:fc:2b:50:02:2b:54:91:d4:
2a:6b:13:67:c8:4d:00:5f:f1:ac:d0:de:96:9f:a8:cc:e0:77:
12:c0:07:a3:e4:ff:34:d2:54:30:7a:e0:53:40:dd:b6:19:3d:
14:d6:2f:4a:ad:af:8b:83:21:6b:94:9d:c9:52:60:35:9c:dd:
29:08:7f:64:e6:9e:b3:6f:26:e8:34:55:78:91:83:b0:1a:14:
51:28:5a:d1:44:32:03:a1:3e:23:c3:5b:b4:a5:c5:91:89:dd:
94:39:a3:94:14:f4:a7:17:63:c4:2a:8a:e0:13:3e:26:7a:ac:
d4:ca:92:75:31:57:ce:70:94:35:e7:39:11:49:99:b7:f4:b6:
be:9c:d2:ab:dd:24:8c:66:0e:48:40:bd:f9:72:e2:b9:91:09:
01:d6:f7:74:84:b5:21:40:72:91:68:2d:db:8b:b9:6a:46:cd:
aa:c2:b9:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5/2ALVsRAOPCt45kcfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjUwMTAxMTc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmI1M2I2NjM3MTMxYmQ0NDg5MmUyMmY4NGYxYzM3MWE3NjgyOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAporc780lP++uXIaIettEt584uIDR
bEPIthBI8JiG4gxJxoN82Je3T9tl9ZC2SUfxjvlT7+BAfrpBJfj7sCudkHKe8bhx
xzhQOQBCDYTGF0kUpeOKHdu6xhCg/HU2SFmAPwttqy7WYdrRAcv1KW4TK4NDr8lW
egM2aIIikxbqusA52NWOpBjRs2lFBzoNF1YpW64AN1uUoxmax6z8Tua5+lSx5jwX
HM2ALnh0yyfxzBio+UBhkVZ4rbeXVeyne7tFKBtYMWbSFF1hDKHG29sgsaJgzBuE
zUtm6wG6iidWjqvBogOCY1i7NPJotsis3qp8O6nbVs+MOk7goM9fOglqiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFa1O2Y3ExvUSJLiL4Txw3GnaCmTMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvVnJVN1pqY1RHOVJJa3VJdmhQSERjYWRvS1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY7IMA0G
CSqGSIb3DQEBCwUAA4IBAQAHkvw0jxX9QKvGk16AWDqnvQ2pScgRVk7RP1hV7KGX
gSTKHAzZ+osfNJx1mMzfdJOj3x/SWWjcR4lrviBKw4PVVx0p+VF99SRFqoJZtx9j
tfh9/CtQAitUkdQqaxNnyE0AX/Gs0N6Wn6jM4HcSwAej5P800lQweuBTQN22GT0U
1i9Kra+LgyFrlJ3JUmA1nN0pCH9k5p6zbyboNFV4kYOwGhRRKFrRRDIDoT4jw1u0
pcWRid2UOaOUFPSnF2PEKorgEz4meqzUypJ1MVfOcJQ15zkRSZm39La+nNKr3SSM
Zg5IQL35cuK5kQkB1vd0hLUhQHKRaC3bi7lqRs2qwrml
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:25 2025 by rpki-client