Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/VBdlzQepZhRzVI3GMFuIisHWvHs.roa
File: VBdlzQepZhRzVI3GMFuIisHWvHs.roa (raw, json)
Hash identifier: tDzz5RSgxplAOBfK4jeYvC6tYAF1FAEBi5P7ELhyNtQ=
Subject key identifier: 54:17:65:CD:07:A9:66:14:73:54:8D:C6:30:5B:88:8A:C1:D6:BC:7B
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 0194236A40DE6C14181CD4BCD099F0EDAA97
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/VBdlzQepZhRzVI3GMFuIisHWvHs.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49198
IP address blocks: 185.47.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:40:de:6c:14:18:1c:d4:bc:d0:99:f0:ed:aa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=541765cd07a9661473548dc6305b888ac1d6bc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5d:bf:b6:5e:32:17:20:fe:df:b7:39:42:64:
12:90:3c:a6:d7:a0:01:fc:b8:a1:e9:e2:ed:a7:63:
2c:9b:8a:9d:09:d7:cd:8b:a8:a1:a0:91:b8:08:a8:
bd:0c:64:c6:d5:02:a1:a5:5a:ab:a0:d4:9b:0a:12:
a4:09:3e:26:0d:6c:5f:f6:80:ad:0d:a4:dc:7c:e9:
85:0f:77:da:da:e3:ec:4b:f6:51:57:e0:6a:4a:9e:
76:7b:d2:9b:fc:e0:21:a0:7e:2f:7d:98:93:fc:84:
dd:f9:5a:e3:ca:bd:f4:64:1e:a2:5d:16:a1:c3:7c:
f3:5d:7e:18:49:fc:f4:ce:3d:71:6a:9a:69:2c:f5:
43:fb:4d:90:d7:0f:fc:bf:08:c7:ae:80:11:5c:4f:
48:32:a4:8c:e9:1b:f8:0e:1c:a7:61:94:e0:61:a3:
0a:97:f5:6a:d4:2a:23:e4:eb:09:7e:82:7b:57:d1:
8d:17:fb:c4:12:2e:aa:68:ff:db:96:56:14:e9:e9:
0a:93:f6:1a:b9:df:c7:99:86:96:69:f3:c9:17:9c:
f8:5d:df:59:df:a3:a5:29:e2:ab:08:a0:22:12:f4:
13:e1:ca:bc:08:78:c2:c3:33:96:96:56:50:a9:e5:
93:80:bf:09:e2:31:04:5d:a4:43:d2:9c:63:18:48:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:65:CD:07:A9:66:14:73:54:8D:C6:30:5B:88:8A:C1:D6:BC:7B
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/VBdlzQepZhRzVI3GMFuIisHWvHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.209.0/24
Signature Algorithm: sha256WithRSAEncryption
23:95:e2:1d:82:e8:eb:ea:0a:93:f3:8c:f9:04:67:38:2c:c9:
48:e2:23:d0:ee:bf:ff:d6:73:03:6a:ec:3f:21:bd:dd:c7:ba:
71:c5:47:09:2d:d5:4a:1d:56:8d:a8:ed:61:a9:db:5c:3a:a6:
97:47:f6:85:e3:9e:cd:db:eb:70:4e:1b:53:42:5e:ee:05:83:
35:e1:7e:cb:83:b2:d6:1f:c3:6e:ec:31:0c:52:0a:ae:51:c6:
24:a0:22:0d:ef:ea:05:6b:26:83:9a:29:51:f3:a3:cc:be:9d:
d7:57:f9:9a:df:74:69:98:62:fa:61:de:ad:7f:21:34:db:8c:
f9:46:6c:df:3d:0e:c6:c6:ff:50:2c:61:2f:d0:56:31:17:8c:
8f:a5:63:78:76:47:e6:b6:18:96:63:17:de:53:67:55:1a:84:
e9:a0:33:92:40:2d:8f:2e:fc:11:5d:6a:1d:53:2e:e0:ef:9d:
4d:f3:b3:56:09:d3:e3:dd:8d:5f:a6:33:2a:21:9f:50:69:40:
3c:99:46:41:29:69:d0:8d:8f:97:d9:f9:ca:04:39:13:6e:b9:
67:2a:03:35:4a:bd:09:00:fa:43:5f:03:94:51:71:b5:97:bb:
20:f9:91:9b:a5:2f:92:4b:11:81:51:c2:db:b2:6a:1b:cf:07:
e6:4e:05:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjakDebBQYHNS80Jnw7aqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhhNzY4YzkxMGJhZGNkNWM0YWVmN2MxNzJhOWYwNjE1
NDdlOGMwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE3NjVjZDA3YTk2NjE0NzM1NDhkYzYzMDViODg4YWMxZDZiYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9F2/tl4yFyD+37c5QmQSkDym16AB
/Lih6eLtp2Msm4qdCdfNi6ihoJG4CKi9DGTG1QKhpVqroNSbChKkCT4mDWxf9oCt
DaTcfOmFD3fa2uPsS/ZRV+BqSp52e9Kb/OAhoH4vfZiT/ITd+Vrjyr30ZB6iXRah
w3zzXX4YSfz0zj1xapppLPVD+02Q1w/8vwjHroARXE9IMqSM6Rv4DhynYZTgYaMK
l/Vq1Coj5OsJfoJ7V9GNF/vEEi6qaP/bllYU6ekKk/Yaud/HmYaWafPJF5z4Xd9Z
36OlKeKrCKAiEvQT4cq8CHjCwzOWllZQqeWTgL8J4jEEXaRD0pxjGEiCTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQXZc0HqWYUc1SNxjBbiIrB1rx7MB8GA1UdIwQY
MBaAFGJ4p2jJELrc1cSu98FyqfBhVH6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQt
MzQ1NGY0OTBmZDk2LzEvVkJkbHpRZXBaaFJ6VkkzR01GdUlpc0hXdkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQtMzQ1NGY0OTBmZDk2
LzEvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS/RMA0G
CSqGSIb3DQEBCwUAA4IBAQAjleIdgujr6gqT84z5BGc4LMlI4iPQ7r//1nMDauw/
Ib3dx7pxxUcJLdVKHVaNqO1hqdtcOqaXR/aF457N2+twThtTQl7uBYM14X7Lg7LW
H8Nu7DEMUgquUcYkoCIN7+oFayaDmilR86PMvp3XV/ma33RpmGL6Yd6tfyE024z5
RmzfPQ7Gxv9QLGEv0FYxF4yPpWN4dkfmthiWYxfeU2dVGoTpoDOSQC2PLvwRXWod
Uy7g751N87NWCdPj3Y1fpjMqIZ9QaUA8mUZBKWnQjY+X2fnKBDkTbrlnKgM1Sr0J
APpDXwOUUXG1l7sg+ZGbpS+SSxGBUcLbsmobzwfmTgWU
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:05 2025 by rpki-client