Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/QVDZyGSGE8leV4m3nFlQjeG0zeo.roa
File: QVDZyGSGE8leV4m3nFlQjeG0zeo.roa (raw, json)
Hash identifier: wjjiPyGj/k1SShnHJQ5vg5xM86+yeUphNDxttzv8s2M=
Subject key identifier: 41:50:D9:C8:64:86:13:C9:5E:57:89:B7:9C:59:50:8D:E1:B4:CD:EA
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 01942068212F6BA5B880A53EA18460EAECC3
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/QVDZyGSGE8leV4m3nFlQjeG0zeo.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 185.37.0.0/24 maxlen: 24
185.37.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:21:2f:6b:a5:b8:80:a5:3e:a1:84:60:ea:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4150d9c8648613c95e5789b79c59508de1b4cdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:4d:8b:59:9b:49:31:2f:60:2c:52:6a:17:
07:24:4e:d0:4e:c5:48:5a:93:7a:ef:ae:80:b2:21:
bb:59:6b:e3:03:6a:35:63:64:a6:43:b9:17:e7:e5:
6d:39:b1:fd:39:56:32:cd:ba:65:f8:b0:f4:ee:a8:
b1:72:61:fc:5a:28:0f:f9:64:6d:e5:b0:8c:7a:2b:
a3:3b:1f:b1:ae:c9:9b:53:e6:cc:17:bc:93:21:06:
29:6e:71:c4:a6:f2:9a:98:78:26:4b:00:d9:81:4b:
95:72:00:d2:db:62:2c:d4:eb:64:4f:72:12:52:2e:
36:b1:7c:f6:0c:bd:b4:51:38:4d:43:dc:d6:26:23:
9b:84:f4:30:b6:d7:02:79:63:e0:47:47:ca:8d:43:
fc:ca:d4:1d:c2:20:39:f7:eb:fa:7f:0c:0d:1e:fc:
c7:22:e5:a4:41:89:91:19:ea:91:6a:8c:d4:51:11:
61:37:98:74:30:fb:b8:f7:a5:fc:1a:59:c8:f8:28:
61:b0:7b:32:89:d2:db:2f:80:d8:b6:bf:e1:2b:d0:
91:29:da:8f:34:ec:19:ce:4a:25:8d:77:be:36:49:
e2:fc:dd:a9:f1:b2:15:95:8c:26:86:b2:a7:6a:ef:
7e:7d:0a:88:74:84:00:10:9f:a2:79:f1:d7:73:e3:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:50:D9:C8:64:86:13:C9:5E:57:89:B7:9C:59:50:8D:E1:B4:CD:EA
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/QVDZyGSGE8leV4m3nFlQjeG0zeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.0.0/23
Signature Algorithm: sha256WithRSAEncryption
35:5f:cc:05:72:a3:ea:48:d5:af:6b:1f:4d:7d:f8:93:a3:51:
dc:38:75:52:d1:bf:89:ff:ec:19:c1:ad:80:6c:74:2e:1f:56:
43:26:23:46:a8:af:81:d4:7f:67:28:59:8f:50:e4:6f:f8:e8:
c4:ed:7a:68:e3:85:1e:80:fa:f5:d4:e4:9b:cf:aa:2e:67:5c:
ce:6e:d1:f3:2f:cc:02:56:bc:52:9d:59:84:89:53:a0:41:28:
92:13:d9:ca:0e:19:92:8b:7d:74:f7:9b:30:74:dd:a7:ce:50:
6a:33:39:fd:e3:c3:5e:47:f9:f2:19:6c:eb:43:dd:8e:df:9a:
81:38:67:92:29:c1:ea:e0:c1:4a:8b:2e:20:c2:d2:8a:e9:63:
0e:99:59:54:8e:d4:44:31:5d:0e:4e:3f:56:5e:b4:e4:32:b6:
ec:65:37:36:79:70:34:f1:d4:79:36:84:4a:a5:e3:fd:a5:e5:
a0:75:cf:8c:c2:88:3c:ea:6d:51:c7:56:90:cf:db:6e:e8:87:
e4:6a:0e:ac:53:c0:ab:b3:7a:12:ae:b1:46:7a:e7:ef:13:47:
19:84:29:be:4e:45:27:06:d1:d2:3a:fe:9c:c9:ab:f7:1e:71:
d1:83:c6:79:53:1b:34:a7:33:6b:31:c2:fc:93:9f:ad:46:4a:
fc:07:64:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaCEva6W4gKU+oYRg6uzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjUwMTAxMDU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTUwZDljODY0ODYxM2M5NWU1Nzg5Yjc5YzU5NTA4ZGUxYjRjZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h1Ni1mbSTEvYCxSahcHJE7QTsVI
WpN6766AsiG7WWvjA2o1Y2SmQ7kX5+VtObH9OVYyzbpl+LD07qixcmH8WigP+WRt
5bCMeiujOx+xrsmbU+bMF7yTIQYpbnHEpvKamHgmSwDZgUuVcgDS22Is1OtkT3IS
Ui42sXz2DL20UThNQ9zWJiObhPQwttcCeWPgR0fKjUP8ytQdwiA59+v6fwwNHvzH
IuWkQYmRGeqRaozUURFhN5h0MPu496X8GlnI+ChhsHsyidLbL4DYtr/hK9CRKdqP
NOwZzkoljXe+Nkni/N2p8bIVlYwmhrKnau9+fQqIdIQAEJ+iefHXc+NGGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEFQ2chkhhPJXleJt5xZUI3htM3qMB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvUVZEWnlHU0dFOGxlVjRtM25GbFFqZUcwemVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSUAMA0G
CSqGSIb3DQEBCwUAA4IBAQA1X8wFcqPqSNWvax9NffiTo1HcOHVS0b+J/+wZwa2A
bHQuH1ZDJiNGqK+B1H9nKFmPUORv+OjE7Xpo44UegPr11OSbz6ouZ1zObtHzL8wC
VrxSnVmEiVOgQSiSE9nKDhmSi31095swdN2nzlBqMzn948NeR/nyGWzrQ92O35qB
OGeSKcHq4MFKiy4gwtKK6WMOmVlUjtREMV0OTj9WXrTkMrbsZTc2eXA08dR5NoRK
peP9peWgdc+Mwog86m1Rx1aQz9tu6Ifkag6sU8Crs3oSrrFGeufvE0cZhCm+TkUn
BtHSOv6cyav3HnHRg8Z5Uxs0pzNrMcL8k5+tRkr8B2TN
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:42 2025 by rpki-client