Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/VCOPnV4kZuweFLb_llPPHRAXNUA.roa
File: VCOPnV4kZuweFLb_llPPHRAXNUA.roa (raw, json)
Hash identifier: cRLhBmbu/yT6hrLfR7qsKhKnC8knJg7oOO9Ome0I9Gw=
Subject key identifier: 54:23:8F:9D:5E:24:66:EC:1E:14:B6:FF:96:53:CF:1D:10:17:35:40
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 019427B561107573F8A9F0E0987C463ECE6F
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/VCOPnV4kZuweFLb_llPPHRAXNUA.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 194.35.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:61:10:75:73:f8:a9:f0:e0:98:7c:46:3e:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54238f9d5e2466ec1e14b6ff9653cf1d10173540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:8c:d3:ac:4c:d6:dc:5d:01:b0:23:af:ee:
46:df:87:20:fb:16:18:62:a6:4c:c9:24:ba:c4:62:
33:c1:23:f4:d1:58:cc:58:b7:74:74:d3:7e:d5:9f:
97:64:dd:01:de:4a:01:b6:35:4a:e7:af:9c:62:b0:
50:b1:3e:e6:61:9b:f9:f2:e4:cf:0f:3f:6f:6a:3a:
f8:85:5a:08:00:88:34:d1:0e:c2:84:9d:d6:62:b2:
fe:cb:fd:53:d0:25:22:34:11:be:6d:1b:a7:88:e5:
ea:d1:27:94:d5:27:26:c8:8d:2e:25:26:fa:65:ad:
db:0d:2a:85:08:75:1f:41:68:46:20:dd:8f:dc:c4:
9e:08:d3:74:79:fd:45:38:b1:12:cc:8e:a0:7a:be:
71:7c:10:0a:07:d0:be:5d:4c:49:d0:75:04:f0:b6:
85:16:90:fd:55:c4:1f:e7:28:e6:df:5f:fa:47:27:
5c:ad:ed:c3:00:b2:cd:5b:73:33:a1:d6:bf:fb:8c:
93:9b:ed:8c:31:55:aa:11:f2:5b:66:43:f8:2d:74:
c2:45:cf:8d:f8:b3:48:9d:07:6b:62:3e:e2:6f:b2:
a5:40:98:b9:4a:42:b0:a6:5d:e7:1b:97:4e:bf:a5:
cc:6f:cd:0c:40:44:7e:d1:d4:fb:24:de:ab:26:78:
80:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:8F:9D:5E:24:66:EC:1E:14:B6:FF:96:53:CF:1D:10:17:35:40
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/VCOPnV4kZuweFLb_llPPHRAXNUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.252.0/22
Signature Algorithm: sha256WithRSAEncryption
92:cd:d1:90:7d:29:59:a4:6d:08:ba:93:99:4b:e9:af:a1:bf:
aa:55:92:88:04:4b:e9:23:e1:81:01:2c:01:78:36:ab:2f:8e:
54:3a:35:24:90:2d:11:46:97:fc:cd:12:e2:83:67:fc:aa:b9:
c3:8a:ce:3f:f2:c3:81:d0:6f:61:c4:65:47:1c:88:c9:7e:02:
3b:b4:82:7e:93:14:c7:09:02:d1:7a:a5:cb:93:a5:4b:5c:59:
61:87:4c:cf:2f:10:4c:95:43:dc:c4:a4:fe:c4:f8:4f:d6:b5:
cd:46:67:64:35:3a:a1:63:f2:f5:c6:12:ef:eb:b2:4c:d8:cf:
f4:46:65:2e:7f:b0:af:f8:e6:cd:7b:bd:36:a3:b2:cc:ad:20:
b7:e5:af:cf:60:e6:a5:18:1e:a3:29:f3:e7:7a:da:2f:be:bc:
52:03:75:dd:79:08:9a:9d:67:0d:17:09:e9:89:f0:98:85:c4:
2f:38:a1:3d:e8:9d:be:92:a8:b1:9a:a0:4d:af:97:ae:4e:a9:
86:c4:45:1d:32:94:c0:0d:57:5e:1a:80:41:26:3b:d7:19:8a:
a7:2b:cc:46:69:53:e6:85:c1:8e:fe:4e:65:13:62:f3:a3:c7:
57:44:e0:f8:47:b6:a8:3a:52:06:01:e8:af:87:a2:37:0b:e5:
ea:9a:da:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntWEQdXP4qfDgmHxGPs5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjNjMzE2NGQzZDhjMjY0NGNmMjliMzIzNjc2MWE1NzFl
ZTU4YmEwHhcNMjUwMTAyMTU0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDIzOGY5ZDVlMjQ2NmVjMWUxNGI2ZmY5NjUzY2YxZDEwMTczNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWM06xM1txdAbAjr+5G34cg+xYY
YqZMySS6xGIzwSP00VjMWLd0dNN+1Z+XZN0B3koBtjVK56+cYrBQsT7mYZv58uTP
Dz9vajr4hVoIAIg00Q7ChJ3WYrL+y/1T0CUiNBG+bRuniOXq0SeU1ScmyI0uJSb6
Za3bDSqFCHUfQWhGIN2P3MSeCNN0ef1FOLESzI6ger5xfBAKB9C+XUxJ0HUE8LaF
FpD9VcQf5yjm31/6Rydcre3DALLNW3Mzoda/+4yTm+2MMVWqEfJbZkP4LXTCRc+N
+LNInQdrYj7ib7KlQJi5SkKwpl3nG5dOv6XMb80MQER+0dT7JN6rJniASQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQjj51eJGbsHhS2/5ZTzx0QFzVAMB8GA1UdIwQY
MBaAFA2zwxZNPYwmRM8psyNnYaVx7li6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWIt
M2Q0NjQzOWFhNDFjLzEvVkNPUG5WNGtadXdlRkxiX2xsUFBIUkFYTlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82Y2QzNjYtMzU1Ny00MmIyLTg4NWItM2Q0NjQzOWFhNDFj
LzEvRGJQREZrMDlqQ1pFenltekkyZGhwWEh1V0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiP8MA0G
CSqGSIb3DQEBCwUAA4IBAQCSzdGQfSlZpG0IupOZS+mvob+qVZKIBEvpI+GBASwB
eDarL45UOjUkkC0RRpf8zRLig2f8qrnDis4/8sOB0G9hxGVHHIjJfgI7tIJ+kxTH
CQLReqXLk6VLXFlhh0zPLxBMlUPcxKT+xPhP1rXNRmdkNTqhY/L1xhLv67JM2M/0
RmUuf7Cv+ObNe702o7LMrSC35a/PYOalGB6jKfPnetovvrxSA3XdeQianWcNFwnp
ifCYhcQvOKE96J2+kqixmqBNr5euTqmGxEUdMpTADVdeGoBBJjvXGYqnK8xGaVPm
hcGO/k5lE2Lzo8dXROD4R7aoOlIGAeivh6I3C+XqmtrG
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:39 2025 by rpki-client