Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/veJEUJlOM2CviEnGl10A91ot5GY.roa
File: veJEUJlOM2CviEnGl10A91ot5GY.roa (raw, json)
Hash identifier: /hB3dvMinNmS8ydpLK9fobmCgmadtOoHLY0n+FVP1Cw=
Subject key identifier: BD:E2:44:50:99:4E:33:60:AF:88:49:C6:97:5D:00:F7:5A:2D:E4:66
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449E111B3F07046FB571583D05BB8E
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/veJEUJlOM2CviEnGl10A91ot5GY.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211793
IP address blocks: 83.139.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9e:11:1b:3f:07:04:6f:b5:71:58:3d:05:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bde24450994e3360af8849c6975d00f75a2de466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:a7:e5:6b:f2:32:6f:e1:d3:e2:b7:98:ae:
ef:37:ef:de:37:66:31:72:d0:19:3d:d8:e6:a8:c1:
a4:4c:d2:14:41:41:04:9f:89:79:a0:a9:72:c5:47:
39:c7:9a:73:43:7a:45:0f:72:7f:92:f9:eb:47:b7:
3d:44:1c:e6:6b:98:63:b0:fd:d6:0d:bf:6a:b6:73:
51:3d:2b:01:00:7c:ff:62:6b:d8:6c:3c:03:a3:60:
5e:a2:fe:66:20:f9:bb:c8:fe:7f:16:96:7e:3d:d5:
d3:12:c3:a3:4f:83:42:84:ba:8e:a4:4d:fc:7e:3a:
0c:03:dc:ea:31:d9:e9:72:4c:23:b9:a1:0f:25:de:
07:78:bf:eb:39:a4:fb:7d:e0:89:1c:b6:f0:6b:5d:
f8:c8:64:e8:b7:72:d7:cc:2c:fc:cc:24:14:4e:27:
6d:27:10:26:5b:71:5b:60:c1:bc:46:9e:82:d7:9c:
17:a6:e5:ce:7c:7a:ac:0a:ed:e0:73:c2:57:da:28:
8e:95:b1:2f:00:70:03:07:89:ec:64:fd:ac:04:2a:
3a:a9:52:ac:c3:f1:23:2b:7f:a2:42:be:da:a6:6a:
68:56:0a:2e:cf:e1:08:b4:8e:56:ca:3e:a4:0e:34:
59:6d:e9:22:ec:f9:29:28:9b:98:ac:7a:09:7b:55:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:44:50:99:4E:33:60:AF:88:49:C6:97:5D:00:F7:5A:2D:E4:66
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/veJEUJlOM2CviEnGl10A91ot5GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ab:25:5b:b9:b1:0b:09:20:90:3d:b6:d5:9e:05:5d:42:ae:
6f:59:9e:71:91:54:13:6b:01:87:ba:62:a9:06:36:f1:ee:ce:
e5:7d:b6:80:73:31:ff:30:3e:f1:f6:49:f8:ba:91:b0:01:e7:
51:6f:23:0e:af:52:bd:62:ab:bb:83:75:8b:de:72:88:c0:e0:
34:57:e6:a6:4c:53:1a:ca:f8:10:09:4b:90:80:df:1b:11:b2:
b3:d5:b3:6d:9b:a1:64:04:79:1f:06:54:e7:38:df:4f:38:0f:
97:e9:5c:cb:f3:25:bf:22:d0:62:59:36:91:34:9b:ab:82:cb:
13:00:af:b0:63:d5:bf:bd:b8:e1:ca:08:87:55:ce:a8:e8:70:
95:53:ce:54:df:90:a5:5f:ea:77:b2:8d:ab:73:d9:fb:e3:d0:
d1:f6:71:f0:f9:a2:8a:9a:a7:98:18:bc:42:4a:d9:bc:b8:69:
ad:fa:6e:d3:21:27:a3:a5:6d:f7:9c:93:66:af:85:74:64:fc:
d8:28:99:13:dc:9f:1d:03:56:aa:f3:4e:d9:75:12:ef:04:da:
73:03:26:bc:42:b1:d2:05:de:99:97:3e:c5:16:35:b1:39:4a:
68:a1:44:22:2e:61:6c:b0:19:4a:69:b0:dc:c8:52:99:63:1e:
b6:d5:8c:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJ4RGz8HBG+1cVg9BbuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjUwMTAxMjM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGUyNDQ1MDk5NGUzMzYwYWY4ODQ5YzY5NzVkMDBmNzVhMmRlNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Sn5WvyMm/h0+K3mK7vN+/eN2Yx
ctAZPdjmqMGkTNIUQUEEn4l5oKlyxUc5x5pzQ3pFD3J/kvnrR7c9RBzma5hjsP3W
Db9qtnNRPSsBAHz/YmvYbDwDo2Beov5mIPm7yP5/FpZ+PdXTEsOjT4NChLqOpE38
fjoMA9zqMdnpckwjuaEPJd4HeL/rOaT7feCJHLbwa134yGTot3LXzCz8zCQUTidt
JxAmW3FbYMG8Rp6C15wXpuXOfHqsCu3gc8JX2iiOlbEvAHADB4nsZP2sBCo6qVKs
w/EjK3+iQr7apmpoVgouz+EItI5Wyj6kDjRZbeki7PkpKJuYrHoJe1Ub9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3iRFCZTjNgr4hJxpddAPdaLeRmMB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvdmVKRVVKbE9NMkN2aUVuR2wxMEE5MW90NUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4sUMA0G
CSqGSIb3DQEBCwUAA4IBAQA9qyVbubELCSCQPbbVngVdQq5vWZ5xkVQTawGHumKp
Bjbx7s7lfbaAczH/MD7x9kn4upGwAedRbyMOr1K9Yqu7g3WL3nKIwOA0V+amTFMa
yvgQCUuQgN8bEbKz1bNtm6FkBHkfBlTnON9POA+X6VzL8yW/ItBiWTaRNJurgssT
AK+wY9W/vbjhygiHVc6o6HCVU85U35ClX+p3so2rc9n749DR9nHw+aKKmqeYGLxC
Stm8uGmt+m7TISejpW33nJNmr4V0ZPzYKJkT3J8dA1aq807ZdRLvBNpzAya8QrHS
Bd6Zlz7FFjWxOUpooUQiLmFssBlKabDcyFKZYx621Yxt
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:47 2025 by rpki-client