Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/vtIvq3lk3sRiDcgDlTRS2VVt5yE.roa
File: vtIvq3lk3sRiDcgDlTRS2VVt5yE.roa (raw, json)
Hash identifier: jiLu70KHLH7RIt7BqnR2plfyr+sz9effpqeTpZHZCpI=
Subject key identifier: BE:D2:2F:AB:79:64:DE:C4:62:0D:C8:03:95:34:52:D9:55:6D:E7:21
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019423D6AB19DA9AC99B4A2D4A41BEE0B5B3
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/vtIvq3lk3sRiDcgDlTRS2VVt5yE.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35614
IP address blocks: 94.124.166.0/24 maxlen: 24
2a0c:29c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:19:da:9a:c9:9b:4a:2d:4a:41:be:e0:b5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed22fab7964dec4620dc803953452d9556de721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:db:b0:8e:34:65:8f:55:fb:bd:27:4d:7c:
8b:0c:1f:49:5b:db:0e:15:0a:85:3c:12:f3:e1:32:
57:96:a5:17:5f:0b:bc:ab:b6:f5:31:a2:1e:dd:06:
d3:43:4a:45:74:31:ba:89:02:8d:33:ea:72:7f:32:
ab:b3:f8:bd:30:5c:39:c5:36:90:25:01:b1:6a:83:
06:5b:ea:40:3d:24:41:dd:33:4c:5d:f6:ec:e1:2e:
80:3b:ec:aa:60:50:4c:35:2f:c0:a2:d4:13:10:49:
06:e9:d6:99:bc:51:1b:37:6f:ea:25:9b:c7:23:33:
a6:25:93:a8:41:6a:15:cb:95:cf:4f:c0:72:43:6f:
dd:30:5b:78:3f:82:df:ec:14:a0:57:9e:59:35:45:
24:70:4e:6a:6a:78:f4:f3:ae:22:10:90:63:e1:3d:
f7:a2:da:06:16:21:72:1a:85:02:cc:a9:f1:dd:1f:
ed:6a:18:b6:b6:1f:83:3f:4b:8d:7e:63:20:f6:35:
c9:d0:8f:f1:14:0a:be:0c:8e:32:b6:71:77:f6:ab:
63:97:5b:52:62:a6:0b:e1:34:f7:ac:f3:1e:f8:7b:
a6:34:c7:3f:fc:6b:ca:2c:50:13:73:3e:6c:57:6b:
c8:ba:db:86:79:fe:04:8e:59:d8:a4:82:bf:13:7a:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:2F:AB:79:64:DE:C4:62:0D:C8:03:95:34:52:D9:55:6D:E7:21
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/vtIvq3lk3sRiDcgDlTRS2VVt5yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.166.0/24
IPv6:
2a0c:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
13:50:68:28:b8:69:05:b1:ce:fa:3e:25:2e:a0:0c:35:ea:91:
71:4b:8e:64:48:5c:58:54:a6:dd:80:d3:4e:ab:d6:ab:02:4d:
d3:b8:4f:7b:20:5f:46:79:b0:52:a8:8a:a6:c3:a0:b6:1b:33:
59:46:55:4a:ce:30:cc:e6:4d:05:62:7e:ce:bc:5f:eb:1d:47:
68:d3:47:b6:b0:01:7b:99:21:0e:fa:8c:60:2f:96:d8:7a:6a:
63:6d:2a:8d:0b:ae:9b:49:02:d2:f5:7f:97:7f:b1:11:71:c4:
10:63:0e:11:86:a4:95:ac:6d:0c:91:a2:d5:56:a5:73:2d:97:
96:d6:ae:f6:df:bc:51:e0:c2:87:aa:79:7b:02:cb:8b:b9:2a:
3e:94:4d:53:74:b6:25:42:fa:d7:b3:f8:95:db:90:c6:2f:e9:
70:c5:c3:30:61:63:ed:0c:19:c2:bf:cd:b5:54:db:8c:27:01:
21:0d:10:b8:c9:99:60:f0:88:3a:ea:58:c7:61:16:c3:31:5a:
45:15:60:91:dc:c0:9b:7b:18:ec:42:38:dd:53:89:28:b8:0b:
e8:5f:ba:1f:07:35:b2:a0:4f:52:18:f7:13:b8:f3:c6:62:ed:
3e:8f:8c:2e:ee:2c:67:f0:87:15:b1:74:e2:d0:bd:e2:fb:ed:
74:da:f1:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQj1qsZ2prJm0otSkG+4LWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUwMTAxMjE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWQyMmZhYjc5NjRkZWM0NjIwZGM4MDM5NTM0NTJkOTU1NmRlNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuULbsI40ZY9V+70nTXyLDB9JW9sO
FQqFPBLz4TJXlqUXXwu8q7b1MaIe3QbTQ0pFdDG6iQKNM+pyfzKrs/i9MFw5xTaQ
JQGxaoMGW+pAPSRB3TNMXfbs4S6AO+yqYFBMNS/AotQTEEkG6daZvFEbN2/qJZvH
IzOmJZOoQWoVy5XPT8ByQ2/dMFt4P4Lf7BSgV55ZNUUkcE5qanj0864iEJBj4T33
otoGFiFyGoUCzKnx3R/tahi2th+DP0uNfmMg9jXJ0I/xFAq+DI4ytnF39qtjl1tS
YqYL4TT3rPMe+HumNMc//GvKLFATcz5sV2vIutuGef4EjlnYpIK/E3qddwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL7SL6t5ZN7EYg3IA5U0UtlVbechMB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvdnRJdnEzbGszc1JpRGNnRGxUUlMyVlZ0NXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXnymMA0E
AgACMAcDBQAqDCnAMA0GCSqGSIb3DQEBCwUAA4IBAQATUGgouGkFsc76PiUuoAw1
6pFxS45kSFxYVKbdgNNOq9arAk3TuE97IF9GebBSqIqmw6C2GzNZRlVKzjDM5k0F
Yn7OvF/rHUdo00e2sAF7mSEO+oxgL5bYempjbSqNC66bSQLS9X+Xf7ERccQQYw4R
hqSVrG0MkaLVVqVzLZeW1q7237xR4MKHqnl7AsuLuSo+lE1TdLYlQvrXs/iV25DG
L+lwxcMwYWPtDBnCv821VNuMJwEhDRC4yZlg8Ig66ljHYRbDMVpFFWCR3MCbexjs
QjjdU4kouAvoX7ofBzWyoE9SGPcTuPPGYu0+j4wu7ixn8IcVsXTi0L3i++102vFt
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:31:08 2025 by rpki-client