Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa
File: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (raw, json)
Hash identifier: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=
Subject key identifier: 56:3A:49:4D:C3:A0:DC:0E:63:8F:D3:11:FC:97:FE:DA:B0:B6:EC:52
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207F97930A8D11AF3D55F0BF10F8E5
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa
Signing time: Thu 02 Jan 2025 03:47:54 +0000
ROA not before: Thu 02 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210600
IP address blocks: 213.135.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7f:97:93:0a:8d:11:af:3d:55:f0:bf:10:f8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=563a494dc3a0dc0e638fd311fc97fedab0b6ec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:0a:34:f1:b4:66:57:11:cc:36:30:f6:d8:
79:e1:ec:d7:b6:22:91:37:31:42:71:1e:19:d5:6b:
18:e2:ac:8d:dd:61:f2:10:40:c9:32:58:f9:3c:35:
1b:3b:a7:3b:e7:ed:ba:37:62:39:f0:04:d4:1c:c5:
4d:10:0b:71:74:bf:fb:a0:2f:a6:ab:af:02:c8:fa:
f5:41:c5:bb:5b:26:a8:d7:74:a1:8e:ab:af:fa:c5:
ad:c3:77:57:9d:75:f9:0f:e8:18:55:d6:b6:7b:c8:
b1:a6:50:d6:51:d4:6d:f3:71:9a:8b:15:67:f2:44:
a0:13:de:a8:43:2c:1a:02:c2:3d:84:05:ad:3b:f8:
07:72:c3:5e:a2:c2:e8:c3:2b:83:66:ef:62:c4:9c:
26:87:32:0e:fa:aa:e7:e4:65:97:2c:18:fa:a7:d3:
71:e6:4e:81:43:04:ad:87:52:ce:c6:dd:5a:3e:ee:
87:5e:9c:a1:5f:ac:19:4c:4a:0e:95:d9:89:e9:21:
97:24:7d:8e:99:80:86:7c:db:18:37:e9:66:14:fa:
82:64:11:d6:49:b2:38:f8:3b:a1:d4:08:d6:c8:61:
2b:93:67:69:81:7f:5d:81:b3:4a:9e:84:43:8b:0d:
b0:d9:0f:db:6b:7f:2f:22:5d:ea:ff:a0:0b:23:83:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:49:4D:C3:A0:DC:0E:63:8F:D3:11:FC:97:FE:DA:B0:B6:EC:52
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
38:93:73:5a:7f:d9:d7:86:e4:8f:ff:cb:3c:6b:39:33:23:87:
a8:ac:33:c4:8a:ff:84:3f:10:dd:1e:5b:f9:9f:9d:f9:5f:a9:
0b:96:31:8c:93:aa:1c:65:8b:41:90:38:8b:12:62:5f:27:1a:
41:5c:38:3a:6c:f5:ca:9b:a6:ea:3f:7e:05:e1:9d:2b:97:3c:
e1:1e:5f:7f:71:73:2e:5f:c1:81:63:14:c6:0f:6b:b2:0d:6b:
ce:e7:56:6e:59:60:df:20:ce:10:bd:b9:4d:86:17:3b:56:81:
b8:a4:5d:32:a7:da:ab:63:2a:88:93:28:7f:10:44:d2:19:76:
02:71:2f:39:93:a5:bc:62:65:2e:ec:9c:cb:89:63:9b:6c:3c:
2c:7a:ec:b8:34:db:a8:b5:75:98:3d:3b:a5:00:8e:22:64:13:
80:39:88:75:33:36:70:81:30:4a:b8:17:27:b6:55:b1:37:08:
cc:2a:14:99:b6:33:53:a7:d9:ec:1f:98:6b:4b:ef:ca:94:98:
d1:48:00:36:60:54:f4:34:fe:d8:f4:9e:30:5a:df:80:94:90:
53:d3:29:8a:8d:8a:18:ec:ba:d7:5f:de:21:5a:1f:1b:f2:b9:
8e:73:12:db:28:cb:e0:6c:ec:18:c6:f1:96:35:2e:ba:7d:ab:
ef:86:a6:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIH+XkwqNEa89VfC/EPjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjUwMTAyMDM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjNhNDk0ZGMzYTBkYzBlNjM4ZmQzMTFmYzk3ZmVkYWIwYjZlYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qMKNPG0ZlcRzDYw9th54ezXtiKR
NzFCcR4Z1WsY4qyN3WHyEEDJMlj5PDUbO6c75+26N2I58ATUHMVNEAtxdL/7oC+m
q68CyPr1QcW7Wyao13Shjquv+sWtw3dXnXX5D+gYVda2e8ixplDWUdRt83GaixVn
8kSgE96oQywaAsI9hAWtO/gHcsNeosLowyuDZu9ixJwmhzIO+qrn5GWXLBj6p9Nx
5k6BQwSth1LOxt1aPu6HXpyhX6wZTEoOldmJ6SGXJH2OmYCGfNsYN+lmFPqCZBHW
SbI4+Duh1AjWyGErk2dpgX9dgbNKnoRDiw2w2Q/ba38vIl3q/6ALI4OK0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFY6SU3DoNwOY4/TEfyX/tqwtuxSMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvVmpwSlRjT2czQTVqajlNUl9KZi0yckMyN0ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YdKMA0G
CSqGSIb3DQEBCwUAA4IBAQA4k3Naf9nXhuSP/8s8azkzI4eorDPEiv+EPxDdHlv5
n535X6kLljGMk6ocZYtBkDiLEmJfJxpBXDg6bPXKm6bqP34F4Z0rlzzhHl9/cXMu
X8GBYxTGD2uyDWvO51ZuWWDfIM4QvblNhhc7VoG4pF0yp9qrYyqIkyh/EETSGXYC
cS85k6W8YmUu7JzLiWObbDwseuy4NNuotXWYPTulAI4iZBOAOYh1MzZwgTBKuBcn
tlWxNwjMKhSZtjNTp9nsH5hrS+/KlJjRSAA2YFT0NP7Y9J4wWt+AlJBT0ymKjYoY
7LrXX94hWh8b8rmOcxLbKMvgbOwYxvGWNS66favvhqYP
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:47 2025 by rpki-client