Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa
File: vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa (raw, json)
Hash identifier: yR9f2kZ/nIXVrv9dXrEzRY+6fv+TWV0eQZK0RZqpM/c=
Subject key identifier: BD:86:A8:AC:FA:50:16:E3:A1:A4:13:AF:4B:46:3B:B4:D3:C0:51:FC
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 01941F8C52546C30B8220D27AEBD32640EC5
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25773
IP address blocks: 141.226.100.0/24 maxlen: 24
141.226.110.0/24 maxlen: 24
141.226.252.0/22 maxlen: 24
176.100.161.0/24 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:52:54:6c:30:b8:22:0d:27:ae:bd:32:64:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd86a8acfa5016e3a1a413af4b463bb4d3c051fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:05:70:d7:f7:73:d2:22:31:84:a5:dd:b8:
bb:1a:f1:ed:f9:e5:e0:98:1a:b2:d6:c4:7a:c1:23:
31:1b:d0:6a:a2:41:e6:ed:67:b1:f6:38:64:76:06:
8c:57:68:bb:b7:c9:b0:6a:a3:40:d8:1a:c9:82:6e:
17:06:26:16:5b:75:d8:86:14:37:be:ae:7d:a7:36:
e7:90:16:61:25:e7:e2:8d:db:4d:4e:ef:92:b9:b8:
6a:f2:03:e2:7b:bc:c2:2c:ef:94:e8:20:7d:69:14:
4e:22:4e:b7:73:eb:fe:38:eb:fd:64:af:3f:d3:d8:
a5:94:f3:28:b7:c1:3a:d8:41:c7:cc:55:02:8a:1b:
64:7a:69:6f:b1:fb:98:1e:19:e9:b9:9b:57:dd:0d:
eb:c6:02:db:8e:a2:c9:64:4e:a1:88:24:0c:86:0d:
b7:47:0f:4f:95:f1:bf:ca:01:87:3f:97:e2:19:1f:
e3:bc:fe:cc:24:d1:08:99:16:0c:45:ca:99:ad:5f:
1e:9b:de:d8:e0:ce:09:ac:41:11:4c:5e:c6:03:a7:
05:fa:35:d4:c5:37:7a:dd:99:5c:ef:04:de:0b:67:
cd:98:0d:40:33:fa:73:0e:63:52:6b:5d:a7:27:89:
84:ad:19:ec:86:35:93:be:af:fb:54:70:ea:86:17:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:A8:AC:FA:50:16:E3:A1:A4:13:AF:4B:46:3B:B4:D3:C0:51:FC
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.100.0/24
141.226.110.0/24
141.226.252.0/22
176.100.161.0/24
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
66:3b:3b:0a:d5:18:e0:41:60:78:4c:46:87:e5:2e:69:8e:80:
13:9b:28:9c:25:49:60:c2:b2:e4:5a:c4:9d:1f:20:40:68:6e:
95:37:43:e3:9c:c0:5a:8f:04:ea:05:2a:e8:ae:b3:06:99:f7:
f7:41:83:d8:92:57:79:4f:f0:59:7e:bd:3d:b9:6d:3e:1b:42:
b5:3b:8e:49:07:69:5b:da:f6:34:c6:20:77:37:99:27:08:a8:
66:5f:c3:68:b0:98:42:25:30:18:bb:b8:14:c3:79:94:ef:0f:
ee:cf:54:72:f1:56:2b:54:ef:e7:d7:2b:1b:96:5a:15:61:49:
96:ff:06:8c:17:85:61:4f:ea:f9:f5:90:8d:7e:38:61:35:60:
18:4d:11:ab:e6:4b:e4:a1:fa:e5:33:41:e2:a0:55:ec:70:fd:
b3:94:86:d4:bb:55:c4:21:cc:80:d6:bc:d0:54:17:d4:32:e0:
e4:87:01:ae:bf:7a:9b:ac:36:29:27:5d:3e:b3:06:77:20:8c:
25:3c:13:43:db:2e:eb:75:ce:21:a0:02:3b:b2:ac:2e:6a:2b:
7f:96:9c:dd:89:e1:b7:ef:69:3e:f4:69:b7:a9:c2:28:ce:3a:
45:a2:a1:03:97:de:2e:9a:89:23:e9:d9:e7:9f:97:98:84:51:
07:9a:24:8b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQfjFJUbDC4Ig0nrr0yZA7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjUwMTAxMDE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDg2YThhY2ZhNTAxNmUzYTFhNDEzYWY0YjQ2M2JiNGQzYzA1MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oQFcNf3c9IiMYSl3bi7GvHt+eXg
mBqy1sR6wSMxG9BqokHm7Wex9jhkdgaMV2i7t8mwaqNA2BrJgm4XBiYWW3XYhhQ3
vq59pzbnkBZhJefijdtNTu+Subhq8gPie7zCLO+U6CB9aRROIk63c+v+OOv9ZK8/
09illPMot8E62EHHzFUCihtkemlvsfuYHhnpuZtX3Q3rxgLbjqLJZE6hiCQMhg23
Rw9PlfG/ygGHP5fiGR/jvP7MJNEImRYMRcqZrV8em97Y4M4JrEERTF7GA6cF+jXU
xTd63Zlc7wTeC2fNmA1AM/pzDmNSa12nJ4mErRnshjWTvq/7VHDqhhfxLQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFL2GqKz6UBbjoaQTr0tGO7TTwFH8MB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvdllhb3JQcFFGdU9ocEJPdlMwWTd0TlBBVWZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAjeJkAwQA
jeJuAwQCjeL8AwQAsGShAwQCuYvwMA0EAgACMAcDBQMqBxmAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmOzsK1RjgQWB4TEaH5S5pjoATmyicJUlgwrLkWsSdHyBAaG6VN0Pj
nMBajwTqBSrorrMGmff3QYPYkld5T/BZfr09uW0+G0K1O45JB2lb2vY0xiB3N5kn
CKhmX8NosJhCJTAYu7gUw3mU7w/uz1Ry8VYrVO/n1ysblloVYUmW/waMF4VhT+r5
9ZCNfjhhNWAYTRGr5kvkofrlM0HioFXscP2zlIbUu1XEIcyA1rzQVBfUMuDkhwGu
v3qbrDYpJ10+swZ3IIwlPBND2y7rdc4hoAI7sqwuait/lpzdieG372k+9Gm3qcIo
zjpFoqEDl94umokj6dnnn5eYhFEHmiSL
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:12 2025 by rpki-client