Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vfMSVp4XTyEruVHZ0YrpNiPStvU.roa
File: vfMSVp4XTyEruVHZ0YrpNiPStvU.roa (raw, json)
Hash identifier: 2s9I3jze/b4F9Z53KMQkFVMQoIYg81frFvNsI+IKcNg=
Subject key identifier: BD:F3:12:56:9E:17:4F:21:2B:B9:51:D9:D1:8A:E9:36:23:D2:B6:F5
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019423D7F7BDFC9CF3297CA2840D650B7191
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vfMSVp4XTyEruVHZ0YrpNiPStvU.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 146.247.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f7:bd:fc:9c:f3:29:7c:a2:84:0d:65:0b:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdf312569e174f212bb951d9d18ae93623d2b6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:89:ce:7e:4b:eb:8c:4a:4d:b2:7a:af:72:
24:37:36:bc:59:9f:31:c0:eb:ea:8d:88:c1:dc:e9:
58:96:91:10:ec:9b:e6:5d:c0:f7:ef:07:62:54:2d:
99:bd:74:27:e1:6f:b0:d9:95:5a:73:9b:8d:76:2d:
6c:8e:f6:5f:17:49:b6:e9:2c:63:13:3b:28:10:53:
bf:39:19:6e:35:56:d9:26:4e:f9:eb:cb:2f:f7:70:
03:68:dd:45:3f:d1:ae:c0:98:1c:e5:11:49:fe:10:
3c:e6:94:f0:b6:3a:88:13:09:66:45:35:3b:27:33:
28:e5:ff:43:ab:5c:31:e1:22:7f:a0:df:10:00:4c:
37:3b:21:55:eb:3e:85:ab:84:89:69:f8:0b:d7:90:
59:db:e7:ad:2c:02:c2:23:9c:f1:86:dd:17:54:c1:
08:92:3d:9b:b5:eb:56:9e:9a:5f:55:a2:02:12:44:
07:4e:df:eb:df:54:3e:34:ac:28:68:1f:87:72:93:
09:67:52:3a:0b:2e:f4:ea:37:31:49:b9:97:6b:be:
38:38:a1:09:21:76:c0:74:2d:cd:0d:37:0f:96:88:
c0:82:91:e8:7e:80:d7:9b:13:8a:4d:ce:f6:cb:bf:
3d:fe:26:e9:b0:6c:a8:29:16:6f:61:dd:04:11:2b:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:12:56:9E:17:4F:21:2B:B9:51:D9:D1:8A:E9:36:23:D2:B6:F5
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vfMSVp4XTyEruVHZ0YrpNiPStvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0f:55:9c:d8:f5:81:e2:62:b7:58:e7:4f:4a:52:c3:c1:13:
44:f2:17:42:29:93:e6:0d:6d:75:dd:f7:39:72:65:b3:61:8c:
44:f1:1e:27:a9:21:33:0c:71:71:35:8f:9b:50:e5:40:20:92:
59:1c:a8:54:f2:f3:c5:00:5e:8f:60:e6:b4:9a:f1:9c:dc:a4:
a1:d9:3e:91:6d:89:02:c6:c0:4a:5e:fb:1a:66:5b:35:ad:7b:
af:ec:2e:ca:1c:7a:ab:d2:0d:0e:a4:18:d8:d1:00:23:4c:cd:
ab:8f:79:9b:f8:70:bf:54:29:4d:09:69:d9:a7:7b:5e:86:45:
96:70:d8:ee:71:03:0c:22:4c:f2:16:13:0d:0b:0b:fe:35:b9:
ca:01:2c:10:27:09:d5:ce:1f:4b:90:17:d5:ae:59:aa:d6:5a:
0f:5b:f6:c1:51:80:d5:ae:25:78:e8:cc:d9:4a:e8:23:79:ba:
6d:d5:82:c1:4f:4a:ed:ca:1b:3b:16:5f:7f:93:38:7a:9a:40:
f8:09:15:89:05:aa:64:58:00:7c:c6:e0:a7:2e:88:16:6b:8d:
e4:af:5c:9a:5b:d5:17:cd:38:e6:ea:22:3f:6c:b4:d8:85:fe:
ec:c2:89:7b:79:02:db:0a:71:ac:11:c5:28:52:b7:fe:8c:e4:
eb:71:f0:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1/e9/JzzKXyihA1lC3GRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjUwMTAxMjE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGYzMTI1NjllMTc0ZjIxMmJiOTUxZDlkMThhZTkzNjIzZDJiNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKmJzn5L64xKTbJ6r3IkNza8WZ8x
wOvqjYjB3OlYlpEQ7JvmXcD37wdiVC2ZvXQn4W+w2ZVac5uNdi1sjvZfF0m26Sxj
EzsoEFO/ORluNVbZJk7568sv93ADaN1FP9GuwJgc5RFJ/hA85pTwtjqIEwlmRTU7
JzMo5f9Dq1wx4SJ/oN8QAEw3OyFV6z6Fq4SJafgL15BZ2+etLALCI5zxht0XVMEI
kj2btetWnppfVaICEkQHTt/r31Q+NKwoaB+HcpMJZ1I6Cy706jcxSbmXa744OKEJ
IXbAdC3NDTcPlojAgpHofoDXmxOKTc72y789/ibpsGyoKRZvYd0EESvJzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3zElaeF08hK7lR2dGK6TYj0rb1MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvdmZNU1ZwNFhUeUVydVZIWjBZcnBOaVBTdHZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdoMA0G
CSqGSIb3DQEBCwUAA4IBAQAfD1Wc2PWB4mK3WOdPSlLDwRNE8hdCKZPmDW113fc5
cmWzYYxE8R4nqSEzDHFxNY+bUOVAIJJZHKhU8vPFAF6PYOa0mvGc3KSh2T6RbYkC
xsBKXvsaZls1rXuv7C7KHHqr0g0OpBjY0QAjTM2rj3mb+HC/VClNCWnZp3tehkWW
cNjucQMMIkzyFhMNCwv+NbnKASwQJwnVzh9LkBfVrlmq1loPW/bBUYDVriV46MzZ
Sugjebpt1YLBT0rtyhs7Fl9/kzh6mkD4CRWJBapkWAB8xuCnLogWa43kr1yaW9UX
zTjm6iI/bLTYhf7swol7eQLbCnGsEcUoUrf+jOTrcfDr
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:44 2025 by rpki-client