Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/vgIq0oA7dsz4YveZyNyrfiJkguc.roa
File: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (raw, json)
Hash identifier: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=
Subject key identifier: BE:02:2A:D2:80:3B:76:CC:F8:62:F7:99:C8:DC:AB:7E:22:64:82:E7
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 0194266B72A68BF7385DBC232BA6BDF89275
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/vgIq0oA7dsz4YveZyNyrfiJkguc.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 185.194.84.0/23 maxlen: 24
194.213.114.0/23 maxlen: 24
194.213.114.0/24 maxlen: 24
194.213.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:72:a6:8b:f7:38:5d:bc:23:2b:a6:bd:f8:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be022ad2803b76ccf862f799c8dcab7e226482e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:41:d5:29:71:79:9f:f5:5a:13:05:0e:8f:
77:b4:f7:2c:a9:df:5d:e5:25:9b:08:f2:50:f2:41:
17:28:ab:3e:b0:5f:25:e6:5e:fe:b8:77:93:96:c4:
b7:aa:7b:72:4d:9d:2d:85:95:ca:6a:8d:fe:90:e2:
68:85:21:c5:20:0b:02:c8:0d:27:01:1e:e2:8b:c1:
05:c3:2e:9e:b9:82:3e:6f:34:e2:06:7b:7d:97:e7:
68:39:c8:9d:85:a1:79:90:34:d3:26:b9:19:04:77:
e4:60:a2:24:67:7c:1b:48:6c:57:82:55:fa:1f:76:
81:47:ed:bc:a9:b6:c2:e3:84:9d:43:8f:a8:ff:2c:
e4:3c:0b:2a:6e:95:1e:7d:24:bb:ea:5c:6e:e9:eb:
60:d8:1f:a9:6e:b7:a5:df:45:8a:42:86:32:5b:53:
5d:a5:ec:01:6c:87:9e:8b:30:e4:2e:07:c7:7c:3f:
07:b5:86:41:b0:59:d0:e0:2b:d6:ef:b6:2a:d7:dc:
81:30:e1:88:e3:cf:76:bf:88:49:41:5d:f6:3a:4b:
93:53:0c:75:97:0a:eb:a3:40:09:f4:91:82:4c:75:
e3:46:e2:dc:56:5e:24:30:35:ff:e5:a7:3b:97:94:
09:a4:be:08:a9:07:a2:42:26:a4:69:9a:89:ee:16:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:02:2A:D2:80:3B:76:CC:F8:62:F7:99:C8:DC:AB:7E:22:64:82:E7
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/vgIq0oA7dsz4YveZyNyrfiJkguc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.84.0/23
194.213.114.0/23
Signature Algorithm: sha256WithRSAEncryption
43:be:27:e8:56:38:de:92:c4:eb:39:cc:cf:78:cc:cf:2f:ca:
43:49:67:86:01:08:1b:8e:33:b3:66:b5:e2:be:98:b8:a0:f9:
9b:da:49:f6:b5:34:04:11:7d:69:a9:b0:e6:33:77:74:c7:dc:
a8:af:6f:b7:b8:e2:5a:88:9e:4f:c1:45:17:ac:de:33:e1:a6:
a7:35:06:e5:4b:cc:0c:8c:79:fa:16:45:4d:f6:21:45:ee:4a:
5c:ab:27:56:06:f3:b6:5c:f0:70:c1:97:44:4f:0e:99:a4:45:
8f:ca:fd:de:30:7c:93:f0:73:60:b5:01:45:cd:88:ce:36:53:
7b:aa:5a:0e:18:02:90:96:ec:2f:64:82:09:88:92:c5:e6:4e:
14:cf:a4:76:2b:ea:53:2b:2f:2f:fc:67:37:07:73:86:32:76:
5b:cb:38:3c:5b:10:df:35:f2:c4:61:e2:1d:b5:2b:f7:7b:cf:
b5:43:b1:51:b3:b8:89:f3:fb:f9:8b:b7:c8:97:fd:81:b1:69:
a7:86:1e:c9:a7:a1:7a:cc:94:97:fd:2d:f8:7f:46:10:7a:90:
2b:a0:8d:84:be:2e:dd:7d:9c:b5:fc:0e:ed:27:cc:e2:8e:a3:
0a:aa:32:00:cc:e5:d2:03:56:23:a0:34:99:7e:b3:40:f3:43:
83:91:85:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma3Kmi/c4XbwjK6a9+JJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw
YjY4NmEwHhcNMjUwMTAyMDk0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTAyMmFkMjgwM2I3NmNjZjg2MmY3OTljOGRjYWI3ZTIyNjQ4MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KdB1SlxeZ/1WhMFDo93tPcsqd9d
5SWbCPJQ8kEXKKs+sF8l5l7+uHeTlsS3qntyTZ0thZXKao3+kOJohSHFIAsCyA0n
AR7ii8EFwy6euYI+bzTiBnt9l+doOcidhaF5kDTTJrkZBHfkYKIkZ3wbSGxXglX6
H3aBR+28qbbC44SdQ4+o/yzkPAsqbpUefSS76lxu6etg2B+pbrel30WKQoYyW1Nd
pewBbIeeizDkLgfHfD8HtYZBsFnQ4CvW77Yq19yBMOGI4892v4hJQV32OkuTUwx1
lwrro0AJ9JGCTHXjRuLcVl4kMDX/5ac7l5QJpL4IqQeiQiakaZqJ7haaywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL4CKtKAO3bM+GL3mcjcq34iZILnMB8GA1UdIwQY
MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt
ZTVkNTA3YTgyNmJmLzEvdmdJcTBvQTdkc3o0WXZlWnlOeXJmaUprZ3VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm
LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBucJUAwQB
wtVyMA0GCSqGSIb3DQEBCwUAA4IBAQBDvifoVjjeksTrOczPeMzPL8pDSWeGAQgb
jjOzZrXivpi4oPmb2kn2tTQEEX1pqbDmM3d0x9yor2+3uOJaiJ5PwUUXrN4z4aan
NQblS8wMjHn6FkVN9iFF7kpcqydWBvO2XPBwwZdETw6ZpEWPyv3eMHyT8HNgtQFF
zYjONlN7qloOGAKQluwvZIIJiJLF5k4Uz6R2K+pTKy8v/Gc3B3OGMnZbyzg8WxDf
NfLEYeIdtSv3e8+1Q7FRs7iJ8/v5i7fIl/2BsWmnhh7Jp6F6zJSX/S34f0YQepAr
oI2Evi7dfZy1/A7tJ8zijqMKqjIAzOXSA1YjoDSZfrNA80ODkYWa
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:45:27 2025 by rpki-client