Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Vu-AcSHw3jcheNdb3zNHApx4Zac.roa
File: Vu-AcSHw3jcheNdb3zNHApx4Zac.roa (raw, json)
Hash identifier: GS/qJBKqTt4VU4HX70dNbiu7h9HQfjih4Uiqc2LgAUo=
Subject key identifier: 56:EF:80:71:21:F0:DE:37:21:78:D7:5B:DF:33:47:02:9C:78:65:A7
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01889DACDE4F73B5501BC0F8A886A0767EBA
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Vu-AcSHw3jcheNdb3zNHApx4Zac.roa
Signing time: Fri 09 Jun 2023 01:02:11 +0000
ROA not before: Fri 09 Jun 2023 01:02:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 89.34.171.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9d:ac:de:4f:73:b5:50:1b:c0:f8:a8:86:a0:76:7e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 9 01:02:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56ef807121f0de372178d75bdf3347029c7865a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:c2:2d:05:ed:93:33:f5:a0:5a:f6:aa:14:
36:b6:18:5a:36:ab:74:b7:b4:6e:25:d3:6c:7d:20:
24:2a:b5:5e:6b:9e:67:13:7d:7c:1f:b0:1c:c8:37:
3f:b4:68:38:4c:4a:29:25:4b:dc:34:3e:b9:2b:70:
98:69:ba:c1:6e:02:64:83:88:ba:d8:86:e4:a2:14:
ec:38:eb:2b:6a:1b:31:a6:95:b0:95:f4:6f:ed:fe:
19:5d:ec:34:60:d0:55:39:45:99:d4:7e:37:10:b9:
38:40:83:46:7a:5c:95:49:7c:ba:de:20:83:c1:61:
d1:ef:ca:d0:09:49:a4:01:48:11:bc:cc:56:0f:e0:
65:b4:61:f0:e2:20:77:5d:c8:2a:1f:63:91:d4:cf:
fa:d6:29:14:bb:9b:92:43:87:66:65:52:b2:d5:da:
a3:5f:d1:58:54:30:2e:8b:cc:7a:4f:1b:96:00:45:
47:21:69:e4:2f:ee:d3:1f:e2:ce:e1:dd:d8:10:ad:
fd:19:a8:5e:4d:b1:73:f4:18:7c:8a:ca:2f:0a:63:
25:4f:3a:f4:0e:43:03:a0:86:be:3f:40:ea:f7:2c:
c3:62:12:c7:5d:dc:57:4b:23:09:4b:ef:c0:af:fc:
20:39:5e:9d:a0:8b:be:15:4f:e8:a2:f1:ab:6f:88:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:80:71:21:F0:DE:37:21:78:D7:5B:DF:33:47:02:9C:78:65:A7
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Vu-AcSHw3jcheNdb3zNHApx4Zac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.171.0/24
176.223.181.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1f:3f:a9:65:d7:6c:72:1f:dc:2d:eb:d0:06:f5:b4:21:1c:
6d:0c:69:f0:4c:f5:17:fa:e0:43:d6:aa:be:7b:74:83:b8:ab:
46:26:d2:9c:a8:d6:e3:c7:2c:aa:2e:f1:f3:a3:1d:c8:ca:92:
52:32:40:d4:53:9c:65:98:3f:00:1a:a3:00:26:9a:07:af:84:
4c:52:27:73:c9:15:b9:73:11:f0:6b:86:dc:af:c3:4b:fa:5a:
fa:7b:02:34:66:05:39:d7:14:b6:43:f2:d8:46:e8:13:68:99:
ad:12:dc:97:25:ff:42:14:11:c2:02:a7:38:28:63:53:fd:26:
1a:9f:0f:9d:d6:fa:f1:67:da:2f:e6:2f:95:b4:f1:98:1d:fb:
b7:52:93:e5:5f:ed:50:13:77:4a:78:3a:fe:fb:26:2f:44:8d:
a9:4c:1a:89:13:4d:ef:6c:0a:fb:0c:bd:10:f5:d7:c6:83:5b:
37:ea:69:9f:a1:c4:68:c1:3b:21:79:5d:dd:d6:9e:1d:1b:4b:
5e:3c:c0:98:ec:a5:8f:25:64:e5:29:be:46:e2:cb:d1:bc:d5:
f8:cf:f4:b9:32:d0:52:15:30:47:21:68:ea:fe:1b:52:3d:64:
7a:a3:2e:2c:ad:33:d8:bf:fa:66:62:99:33:a4:a3:30:95:77:
e4:f6:fc:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYidrN5Pc7VQG8D4qIagdn66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNjA5MDEwMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmVmODA3MTIxZjBkZTM3MjE3OGQ3NWJkZjMzNDcwMjljNzg2NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFjCLQXtkzP1oFr2qhQ2thhaNqt0
t7RuJdNsfSAkKrVea55nE318H7AcyDc/tGg4TEopJUvcND65K3CYabrBbgJkg4i6
2IbkohTsOOsrahsxppWwlfRv7f4ZXew0YNBVOUWZ1H43ELk4QINGelyVSXy63iCD
wWHR78rQCUmkAUgRvMxWD+BltGHw4iB3XcgqH2OR1M/61ikUu5uSQ4dmZVKy1dqj
X9FYVDAui8x6TxuWAEVHIWnkL+7TH+LO4d3YEK39GaheTbFz9Bh8isovCmMlTzr0
DkMDoIa+P0Dq9yzDYhLHXdxXSyMJS+/Ar/wgOV6doIu+FU/oovGrb4hSmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFbvgHEh8N43IXjXW98zRwKceGWnMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvVnUtQWNTSHczamNoZU5kYjN6TkhBcHg0WmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSKrAwQA
sN+1MA0GCSqGSIb3DQEBCwUAA4IBAQAUHz+pZddsch/cLevQBvW0IRxtDGnwTPUX
+uBD1qq+e3SDuKtGJtKcqNbjxyyqLvHzox3IypJSMkDUU5xlmD8AGqMAJpoHr4RM
UidzyRW5cxHwa4bcr8NL+lr6ewI0ZgU51xS2Q/LYRugTaJmtEtyXJf9CFBHCAqc4
KGNT/SYanw+d1vrxZ9ov5i+VtPGYHfu3UpPlX+1QE3dKeDr++yYvRI2pTBqJE03v
bAr7DL0Q9dfGg1s36mmfocRowTsheV3d1p4dG0tePMCY7KWPJWTlKb5G4svRvNX4
z/S5MtBSFTBHIWjq/htSPWR6oy4srTPYv/pmYpkzpKMwlXfk9vxD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:14 2025 by rpki-client