Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/vs_wrAmuGIug1GU_WsE0c2zCmpU.roa
File: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (raw, json)
Hash identifier: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=
Subject key identifier: BE:CF:F0:AC:09:AE:18:8B:A0:D4:65:3F:5A:C1:34:73:6C:C2:9A:95
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 019420D5D0D8BC80D8808ED875C74D2CA340
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/vs_wrAmuGIug1GU_WsE0c2zCmpU.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205375
IP address blocks: 185.220.84.0/24 maxlen: 24
185.220.85.0/24 maxlen: 24
185.220.86.0/24 maxlen: 24
185.220.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d0:d8:bc:80:d8:80:8e:d8:75:c7:4d:2c:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=becff0ac09ae188ba0d4653f5ac134736cc29a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:88:35:25:0b:b0:2c:79:cb:69:ca:cf:45:
47:c5:91:7e:e4:54:ad:51:06:53:7a:ff:48:bf:89:
d3:eb:25:f4:2e:14:a1:51:04:f4:21:a7:38:12:fe:
a6:c8:3a:25:56:20:63:cd:9d:bb:34:b0:6b:ae:26:
c3:f1:fb:07:2d:98:13:be:e7:69:e1:c3:b6:13:22:
04:b0:2d:b0:09:e8:fa:94:2b:08:13:88:61:25:31:
04:ec:a3:50:5e:74:33:26:77:26:c8:e4:74:23:8d:
01:72:89:5a:e9:98:b3:5b:a7:1c:92:03:ed:ee:14:
45:43:70:06:b3:fb:6b:2b:12:77:bb:f5:af:eb:cd:
9d:de:09:f7:6c:81:1a:fe:5f:fa:f5:d3:66:ae:b5:
e3:f4:f2:dd:62:31:b3:33:db:3c:8a:ea:b5:9f:02:
88:ec:1e:8e:71:9b:20:e6:f6:b1:4e:de:b2:65:2b:
ee:da:ea:b6:0d:05:16:90:ab:42:83:e2:0c:eb:d4:
12:5e:ff:ac:c2:b7:9d:50:13:d9:af:dc:f7:be:15:
7f:06:b5:52:8b:ad:5b:c2:2e:14:db:24:36:a8:fe:
2b:15:fc:92:59:e8:28:c0:7c:6d:dc:4a:0d:2f:4d:
0b:e5:3c:75:7b:e9:c8:2a:98:26:3f:00:93:64:82:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:F0:AC:09:AE:18:8B:A0:D4:65:3F:5A:C1:34:73:6C:C2:9A:95
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/vs_wrAmuGIug1GU_WsE0c2zCmpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:39:52:e0:0b:d2:cd:d6:ee:38:d8:e5:d5:05:1f:6e:25:83:
27:ef:95:a1:6e:e2:3f:1b:e8:2e:e2:fe:8e:e9:cc:74:22:6f:
eb:e0:b2:e0:d2:c6:0d:76:85:33:14:7d:b5:28:28:f7:ad:7b:
e2:6c:07:1f:c3:ae:70:53:a5:e7:bf:71:2f:87:42:76:7e:83:
ce:ff:d7:87:f0:de:33:f8:5e:d1:3e:74:be:0a:1c:02:2e:55:
66:e3:20:e6:6b:dc:5f:cb:85:36:4c:ce:7f:4e:f9:42:9b:9a:
90:d9:78:cc:4b:a2:3d:b6:59:83:1f:79:e5:47:59:f9:14:6a:
0b:f9:ca:7d:58:09:6f:76:f1:a8:27:40:20:a0:12:4e:bd:c2:
8d:3a:85:14:82:8a:a3:03:99:6a:7d:9d:7c:4e:28:22:4b:d6:
9a:fd:7b:04:5b:a0:2c:38:06:8e:23:df:c4:ea:03:7c:b9:f6:
54:8e:38:ea:be:f2:eb:d3:94:5b:e3:39:e4:fd:3f:da:fd:b5:
66:64:12:9e:1b:33:fe:da:c2:bd:a6:96:12:83:2c:d2:86:40:
7a:43:18:5a:c9:5e:ba:6d:7a:e6:d4:e0:f9:8b:80:c4:50:49:
99:07:da:9b:4b:79:c4:f8:6a:7b:65:09:d2:dd:b2:3c:ec:6e:
a2:0a:53:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1dDYvIDYgI7YdcdNLKNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYmU2ZWE2ZWYzMzA4OWU1MjU5ZDI0OWM1YjBkZmFhMTNh
OTRkNzgwHhcNMjUwMTAxMDc0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWNmZjBhYzA5YWUxODhiYTBkNDY1M2Y1YWMxMzQ3MzZjYzI5YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs46INSULsCx5y2nKz0VHxZF+5FSt
UQZTev9Iv4nT6yX0LhShUQT0Iac4Ev6myDolViBjzZ27NLBrribD8fsHLZgTvudp
4cO2EyIEsC2wCej6lCsIE4hhJTEE7KNQXnQzJncmyOR0I40Bcola6ZizW6cckgPt
7hRFQ3AGs/trKxJ3u/Wv682d3gn3bIEa/l/69dNmrrXj9PLdYjGzM9s8iuq1nwKI
7B6OcZsg5vaxTt6yZSvu2uq2DQUWkKtCg+IM69QSXv+swredUBPZr9z3vhV/BrVS
i61bwi4U2yQ2qP4rFfySWegowHxt3EoNL00L5Tx1e+nIKpgmPwCTZIIqpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL7P8KwJrhiLoNRlP1rBNHNswpqVMB8GA1UdIwQY
MBaAFMq+bqbvMwieUlnSScWw36oTqU14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMt
ZDMzNWMyMDQyNDAzLzEvdnNfd3JBbXVHSXVnMUdVX1dzRTBjMnpDbXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wOGQ2YmYtZWY4Ni00Yzc0LWFhMjMtZDMzNWMyMDQyNDAz
LzEveXI1dXB1OHpDSjVTV2RKSnhiRGZxaE9wVFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudxUMA0G
CSqGSIb3DQEBCwUAA4IBAQAPOVLgC9LN1u442OXVBR9uJYMn75WhbuI/G+gu4v6O
6cx0Im/r4LLg0sYNdoUzFH21KCj3rXvibAcfw65wU6Xnv3Evh0J2foPO/9eH8N4z
+F7RPnS+ChwCLlVm4yDma9xfy4U2TM5/TvlCm5qQ2XjMS6I9tlmDH3nlR1n5FGoL
+cp9WAlvdvGoJ0AgoBJOvcKNOoUUgoqjA5lqfZ18TigiS9aa/XsEW6AsOAaOI9/E
6gN8ufZUjjjqvvLr05Rb4znk/T/a/bVmZBKeGzP+2sK9ppYSgyzShkB6QxhayV66
bXrm1OD5i4DEUEmZB9qbS3nE+Gp7ZQnS3bI87G6iClNA
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:57:50 2025 by rpki-client