Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/vx3EOBZmb8ykEZkmbz4ar6PLH9U.roa
File: vx3EOBZmb8ykEZkmbz4ar6PLH9U.roa (raw, json)
Hash identifier: RKeuK4fqdpxlxMSfs8n73j4gAwBCaJIPwHFL14ybUZo=
Subject key identifier: BF:1D:C4:38:16:66:6F:CC:A4:11:99:26:6F:3E:1A:AF:A3:CB:1F:D5
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018400C8F6FBD1D5780F38A5C05AD06F7B02
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/vx3EOBZmb8ykEZkmbz4ar6PLH9U.roa
Signing time: Sat 22 Oct 2022 17:41:21 +0000
ROA not before: Sat 22 Oct 2022 17:41:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 152.89.28.0/22 maxlen: 22
45.138.12.0/23 maxlen: 23
91.132.160.0/22 maxlen: 22
193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:c8:f6:fb:d1:d5:78:0f:38:a5:c0:5a:d0:6f:7b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 22 17:41:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf1dc43816666fcca41199266f3e1aafa3cb1fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:9b:fa:ad:4c:21:79:96:be:0f:74:13:5d:
fa:f2:55:d3:9e:1b:f3:72:61:c6:67:4d:5e:ff:b7:
2e:46:02:cb:84:26:5c:4d:a4:34:e6:95:46:c3:ad:
82:97:44:97:59:8e:c6:32:72:ad:66:b5:dc:e3:76:
3c:86:98:93:2f:be:ec:18:00:7c:78:0d:82:66:1f:
6a:b7:9a:f2:e4:ec:18:ac:40:1d:32:8b:35:89:4f:
6a:ba:93:04:bc:0c:ab:c2:89:b1:63:67:9c:36:64:
97:b3:3d:0e:cd:76:c4:33:1a:0c:5b:b9:d1:2c:bb:
37:c2:b1:d6:94:87:7d:2f:45:63:e0:2d:7b:f2:67:
d8:18:8a:3a:e8:d6:9d:a0:52:31:af:28:05:3a:63:
80:54:24:40:4f:db:f0:fa:d7:d9:44:71:47:db:8d:
1c:52:8c:5c:47:3c:58:e6:7c:63:51:db:86:73:54:
9d:bd:34:6b:74:9d:3d:3e:1e:67:ea:c1:d4:bc:5d:
4c:b2:d8:61:e3:ed:cf:42:a0:49:97:cd:9a:18:79:
c1:08:f0:60:61:64:0d:da:71:f5:1f:e5:48:4f:f2:
5a:34:6a:c6:24:73:80:78:82:66:b4:83:f7:62:41:
64:65:ae:d9:d4:24:58:4a:23:ce:06:83:3a:58:d1:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:C4:38:16:66:6F:CC:A4:11:99:26:6F:3E:1A:AF:A3:CB:1F:D5
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/vx3EOBZmb8ykEZkmbz4ar6PLH9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/23
91.132.160.0/22
152.89.28.0/22
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:95:48:a0:d9:ad:5a:58:f5:3e:d0:f5:e3:3b:2e:7d:4d:d8:
61:38:cf:8e:f6:7d:5a:f5:d0:79:2f:45:12:25:2e:37:06:2b:
4b:9f:9f:f2:bc:52:25:a6:1d:9a:27:ba:cf:ac:ce:7b:e7:14:
c4:37:ed:db:fc:66:7e:bb:9f:53:8d:5a:14:4d:7e:4b:08:db:
43:e5:09:f4:b6:7a:6b:46:66:bc:3b:ae:af:86:31:ea:6b:3e:
d7:c1:ee:3c:52:ad:4b:01:6b:ec:6b:5b:62:bb:78:3b:31:3b:
77:38:28:49:a0:fa:0b:d0:89:de:b5:b0:f0:19:2e:ad:d8:6d:
34:8a:dd:3f:96:93:1b:4f:5c:9f:c9:98:6d:98:f5:86:d2:44:
03:d0:d2:a3:b5:08:1e:06:9c:a7:04:7d:27:d6:66:63:84:88:
3c:ae:2d:38:dd:df:8f:9f:43:b1:a7:db:4a:b4:aa:b8:1c:c3:
64:04:29:6b:63:d8:df:d2:57:0b:ce:02:7a:a4:aa:8a:4f:e8:
18:7d:e1:40:ce:89:80:73:e1:88:26:a0:e9:56:d7:ae:aa:48:
f3:7f:eb:e8:60:b6:fd:96:b5:77:13:a8:16:ba:ca:72:fc:51:
c8:a8:23:c5:35:97:8c:fd:a3:6e:f0:0c:0d:33:08:6e:5c:bf:
30:ce:b2:20
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQAyPb70dV4DzilwFrQb3sCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjIxMDIyMTc0MTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjFkYzQzODE2NjY2ZmNjYTQxMTk5MjY2ZjNlMWFhZmEzY2IxZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIGb+q1MIXmWvg90E1368lXTnhvz
cmHGZ01e/7cuRgLLhCZcTaQ05pVGw62Cl0SXWY7GMnKtZrXc43Y8hpiTL77sGAB8
eA2CZh9qt5ry5OwYrEAdMos1iU9qupMEvAyrwomxY2ecNmSXsz0OzXbEMxoMW7nR
LLs3wrHWlId9L0Vj4C178mfYGIo66NadoFIxrygFOmOAVCRAT9vw+tfZRHFH240c
UoxcRzxY5nxjUduGc1SdvTRrdJ09Ph5n6sHUvF1Msthh4+3PQqBJl82aGHnBCPBg
YWQN2nH1H+VIT/JaNGrGJHOAeIJmtIP3YkFkZa7Z1CRYSiPOBoM6WNGJnQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFL8dxDgWZm/MpBGZJm8+Gq+jyx/VMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvdngzRU9CWm1iOHlrRVprbWJ6NGFyNlBMSDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYoMAwQC
W4SgAwQCmFkcAwQAwYeuMA0GCSqGSIb3DQEBCwUAA4IBAQAulUig2a1aWPU+0PXj
Oy59TdhhOM+O9n1a9dB5L0USJS43BitLn5/yvFIlph2aJ7rPrM575xTEN+3b/GZ+
u59TjVoUTX5LCNtD5Qn0tnprRma8O66vhjHqaz7Xwe48Uq1LAWvsa1tiu3g7MTt3
OChJoPoL0InetbDwGS6t2G00it0/lpMbT1yfyZhtmPWG0kQD0NKjtQgeBpynBH0n
1mZjhIg8ri043d+Pn0Oxp9tKtKq4HMNkBClrY9jf0lcLzgJ6pKqKT+gYfeFAzomA
c+GIJqDpVteuqkjzf+voYLb9lrV3E6gWuspy/FHIqCPFNZeM/aNu8AwNMwhuXL8w
zrIg
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:01 2025 by rpki-client