Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa
File: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (raw, json)
Hash identifier: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=
Subject key identifier: 56:B7:C0:1F:FB:78:96:17:13:F7:F9:48:21:54:EC:9B:2F:F0:E5:29
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 019420683DB3760998781618887647E48A68
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200607
IP address blocks: 185.101.180.0/24 maxlen: 24
185.101.181.0/24 maxlen: 24
185.101.182.0/24 maxlen: 24
185.101.183.0/24 maxlen: 24
2a06:2040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3d:b3:76:09:98:78:16:18:88:76:47:e4:8a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b7c01ffb78961713f7f9482154ec9b2ff0e529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:da:10:b4:2e:5e:f4:e0:ea:0b:4a:c6:27:
1e:36:57:87:35:91:a7:66:29:89:a8:76:8e:57:74:
2f:4e:8b:39:2b:19:0f:22:51:92:b7:24:f8:9f:cc:
a4:78:10:3f:91:5f:bd:b2:3a:01:0a:a6:9d:b3:eb:
20:47:59:11:cb:68:60:c4:41:cf:20:ec:e9:4a:4c:
22:42:04:c1:e1:a6:22:e2:92:c8:02:7f:af:3f:42:
c6:a7:c5:93:8d:28:67:24:ed:98:80:2d:6c:f6:01:
ba:32:c2:5d:15:5a:2b:53:89:09:b0:2c:5c:69:3b:
e4:d3:c0:c9:40:e4:d6:7c:e2:90:cb:40:38:83:fd:
fa:c6:59:16:0d:a2:6d:4c:2b:76:bc:12:0f:8a:16:
bb:ef:5e:49:b4:df:b0:2d:b5:e6:4b:b1:08:b8:0f:
4c:5d:43:95:1e:bc:25:87:d3:ae:d2:3b:cc:12:71:
30:8e:f4:c2:98:7f:ed:ee:e6:17:a6:29:b4:6f:e1:
cb:9b:25:a5:f5:05:af:11:39:5f:4d:b0:b4:e3:b9:
aa:b1:97:1e:ad:f4:00:e8:05:0f:5b:e9:7c:66:b6:
23:58:68:ca:43:46:bd:1c:35:eb:aa:f5:fb:25:8b:
9a:b9:49:4a:ef:a4:85:76:f3:43:9c:68:bc:4d:4b:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:C0:1F:FB:78:96:17:13:F7:F9:48:21:54:EC:9B:2F:F0:E5:29
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.180.0/22
IPv6:
2a06:2040::/29
Signature Algorithm: sha256WithRSAEncryption
64:ec:5a:01:75:d1:99:84:6d:df:91:ed:2a:20:6f:0d:b2:db:
9a:1a:43:3e:77:0d:02:25:57:1f:82:d0:9d:2a:7e:34:f4:39:
fe:e2:71:4d:b7:0d:66:9c:8c:97:40:79:a5:a6:65:3d:de:25:
d5:41:5b:b1:a4:0e:6d:e7:59:2d:5d:ba:f1:7e:0a:28:5b:9a:
10:22:89:7c:32:8e:07:4a:81:24:70:cc:12:00:0e:45:7f:91:
7e:48:88:b3:01:71:1b:dc:a6:5b:4d:84:d4:d2:6c:8a:1d:19:
6b:58:70:36:92:54:71:b4:ae:3f:61:cd:e2:dc:eb:45:e9:b8:
55:bd:05:c0:2d:e2:0d:3c:85:99:5a:44:03:08:95:cd:85:13:
e6:77:41:4a:28:22:da:eb:04:f5:d1:52:f2:50:c1:b1:9c:2f:
7f:77:96:de:52:1d:81:02:f3:46:57:a4:0f:d7:b9:ef:f5:96:
61:e7:27:d0:da:4c:2e:6c:4a:49:c6:e9:62:3c:80:08:6e:1e:
92:2d:47:73:ce:55:a4:a3:ac:bd:5e:26:df:23:2a:5c:a5:3e:
9c:80:e4:a4:33:65:08:a3:88:24:2c:7c:4c:ec:81:d4:c2:b8:
50:6b:b8:43:8a:b3:ad:06:ed:11:40:52:31:f1:34:c9:f1:14:
0c:13:af:15
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaD2zdgmYeBYYiHZH5IpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDI2YzNkMTFjOWYyNGFjYzBhMWQ4NDU0Y2JjOTYwNDg2
NWE4MDkwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmI3YzAxZmZiNzg5NjE3MTNmN2Y5NDgyMTU0ZWM5YjJmZjBlNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstTaELQuXvTg6gtKxiceNleHNZGn
ZimJqHaOV3QvTos5KxkPIlGStyT4n8ykeBA/kV+9sjoBCqads+sgR1kRy2hgxEHP
IOzpSkwiQgTB4aYi4pLIAn+vP0LGp8WTjShnJO2YgC1s9gG6MsJdFVorU4kJsCxc
aTvk08DJQOTWfOKQy0A4g/36xlkWDaJtTCt2vBIPiha7715JtN+wLbXmS7EIuA9M
XUOVHrwlh9Ou0jvMEnEwjvTCmH/t7uYXpim0b+HLmyWl9QWvETlfTbC047mqsZce
rfQA6AUPW+l8ZrYjWGjKQ0a9HDXrqvX7JYuauUlK76SFdvNDnGi8TUvuhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFa3wB/7eJYXE/f5SCFU7Jsv8OUpMB8GA1UdIwQY
MBaAFHJCbD0RyfJKzAodhFTLyWBIZagJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYt
YmU5MGIwZmQxZjc4LzEvVnJmQUhfdDRsaGNUOV9sSUlWVHNteV93NVNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80YzFiMzQtOWM3MC00MTFmLWIwMWYtYmU5MGIwZmQxZjc4
LzEvY2tKc1BSSEo4a3JNQ2gyRVZNdkpZRWhscUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWW0MA0E
AgACMAcDBQMqBiBAMA0GCSqGSIb3DQEBCwUAA4IBAQBk7FoBddGZhG3fke0qIG8N
stuaGkM+dw0CJVcfgtCdKn409Dn+4nFNtw1mnIyXQHmlpmU93iXVQVuxpA5t51kt
XbrxfgooW5oQIol8Mo4HSoEkcMwSAA5Ff5F+SIizAXEb3KZbTYTU0myKHRlrWHA2
klRxtK4/Yc3i3OtF6bhVvQXALeINPIWZWkQDCJXNhRPmd0FKKCLa6wT10VLyUMGx
nC9/d5beUh2BAvNGV6QP17nv9ZZh5yfQ2kwubEpJxuliPIAIbh6SLUdzzlWko6y9
XibfIypcpT6cgOSkM2UIo4gkLHxM7IHUwrhQa7hDirOtBu0RQFIx8TTJ8RQME68V
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:29 2025 by rpki-client