Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa
File: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (raw, json)
Hash identifier: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=
Subject key identifier: BD:90:66:4B:E1:00:DA:E0:54:85:C0:08:E1:D7:82:B4:6D:2D:31:B4
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 01942669D30E3DE4E7E182A6FDB252B54FF7
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa
Signing time: Thu 02 Jan 2025 09:47:37 +0000
ROA not before: Thu 02 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200470
IP address blocks: 185.104.100.0/23 maxlen: 23
185.104.102.0/24 maxlen: 24
185.104.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:d3:0e:3d:e4:e7:e1:82:a6:fd:b2:52:b5:4f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Jan 2 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd90664be100dae05485c008e1d782b46d2d31b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:fe:af:40:6b:5a:9c:a6:55:94:ea:a1:85:
8d:cf:49:09:97:fa:29:6b:23:c4:2e:3d:85:5e:0b:
89:e9:8e:ad:bc:c5:13:0b:5c:23:89:b0:6e:e6:89:
0a:ee:17:b4:8c:81:c9:12:68:61:7a:9b:87:cc:03:
90:15:c1:75:a7:22:f2:a5:1f:33:89:59:d3:51:d4:
7b:b5:8a:2b:f8:78:ab:03:c5:de:2a:81:c9:68:b4:
de:3b:57:13:f5:b9:0f:d0:96:ae:69:22:10:e8:77:
40:04:7e:9e:9c:99:55:8f:92:7f:4e:97:03:78:a4:
ee:ba:04:c8:63:29:4d:f4:a6:e2:9b:e0:c5:7f:04:
7e:45:37:55:f7:dc:ef:8e:b0:da:7d:ca:25:06:c4:
97:c9:28:79:83:d8:46:bb:db:e1:4c:5c:93:a4:86:
3d:8a:cc:4c:ad:db:7c:4e:0c:34:b4:12:7e:b1:8e:
3e:05:f0:95:9b:85:64:27:af:1a:6a:6d:8c:2d:92:
fd:98:0c:03:fb:b6:3e:e1:1d:93:e9:ac:11:f8:c6:
0e:3f:87:db:c0:be:f2:d8:73:a0:3a:24:98:e5:a9:
77:9a:84:be:07:e8:fb:f5:60:88:a6:f3:b4:97:44:
77:85:3c:21:c2:ff:ac:1a:85:ef:7d:0d:91:51:f0:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:66:4B:E1:00:DA:E0:54:85:C0:08:E1:D7:82:B4:6D:2D:31:B4
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.100.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c3:03:50:02:64:c5:76:ae:27:4d:b6:d3:46:1c:77:15:e5:
21:27:6e:af:5f:07:6d:f4:d0:02:52:33:c4:c6:24:47:bd:e7:
55:d7:94:37:37:8e:e1:72:4d:c3:30:eb:c5:52:a3:ac:88:c0:
75:df:a0:5c:c4:18:ed:cc:a9:ef:42:8b:0d:ab:33:03:ac:68:
54:5c:90:93:51:be:40:ed:8d:91:d0:81:47:6f:e4:f8:12:d6:
d1:04:5a:8d:f9:b9:04:62:72:4e:b4:8f:57:61:56:27:25:cb:
b3:f9:ae:f1:95:79:46:c9:83:bc:ce:17:a8:39:a7:fc:ba:86:
e3:b8:8c:3d:70:31:82:38:b3:58:67:e2:fa:e4:e7:70:33:2f:
1d:6f:93:85:9b:6d:a8:ec:55:7d:dc:2c:0c:bb:8a:c6:dd:3c:
95:d4:c2:49:ac:55:06:d9:15:64:b6:60:8d:28:67:29:24:54:
a7:a3:50:f3:b0:66:e7:c9:58:1e:36:c2:47:3f:64:91:2c:27:
36:42:7f:34:ca:36:df:76:a3:c2:fa:a5:b2:48:79:60:13:c0:
24:3e:2e:7a:f4:dc:b0:8d:28:e9:69:1a:5c:f5:48:6c:d7:52:
96:3c:b7:2f:6f:23:87:8c:86:e6:08:be:1a:05:5e:85:63:b4:
89:c6:d9:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmadMOPeTn4YKm/bJStU/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0
OGI2ZTcwHhcNMjUwMTAyMDk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDkwNjY0YmUxMDBkYWUwNTQ4NWMwMDhlMWQ3ODJiNDZkMmQzMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUT+r0BrWpymVZTqoYWNz0kJl/op
ayPELj2FXguJ6Y6tvMUTC1wjibBu5okK7he0jIHJEmhhepuHzAOQFcF1pyLypR8z
iVnTUdR7tYor+HirA8XeKoHJaLTeO1cT9bkP0JauaSIQ6HdABH6enJlVj5J/TpcD
eKTuugTIYylN9Kbim+DFfwR+RTdV99zvjrDafcolBsSXySh5g9hGu9vhTFyTpIY9
isxMrdt8Tgw0tBJ+sY4+BfCVm4VkJ68aam2MLZL9mAwD+7Y+4R2T6awR+MYOP4fb
wL7y2HOgOiSY5al3moS+B+j79WCIpvO0l0R3hTwhwv+sGoXvfQ2RUfCNywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2QZkvhANrgVIXACOHXgrRtLTG0MB8GA1UdIwQY
MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt
YjJhMTNhM2E5YjhhLzEvdlpCbVMtRUEydUJVaGNBSTRkZUN0RzB0TWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh
LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWhkMA0G
CSqGSIb3DQEBCwUAA4IBAQAJwwNQAmTFdq4nTbbTRhx3FeUhJ26vXwdt9NACUjPE
xiRHvedV15Q3N47hck3DMOvFUqOsiMB136BcxBjtzKnvQosNqzMDrGhUXJCTUb5A
7Y2R0IFHb+T4EtbRBFqN+bkEYnJOtI9XYVYnJcuz+a7xlXlGyYO8zheoOaf8uobj
uIw9cDGCOLNYZ+L65OdwMy8db5OFm22o7FV93CwMu4rG3TyV1MJJrFUG2RVktmCN
KGcpJFSno1DzsGbnyVgeNsJHP2SRLCc2Qn80yjbfdqPC+qWySHlgE8AkPi569Nyw
jSjpaRpc9Uhs11KWPLcvbyOHjIbmCL4aBV6FY7SJxtle
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:10 2025 by rpki-client