Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa
File: vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa (raw, json)
Hash identifier: 2C3QYWkPGEbQmt4ETFEFUqH1R92qUMl/4nE7fTPMPhA=
Subject key identifier: BE:C7:15:EC:66:51:31:AD:02:3D:44:EF:14:B0:6E:4A:9F:A5:20:9F
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0194221F8713B6B08C5A6375304EF605098E
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50309
IP address blocks: 46.182.192.0/21 maxlen: 32
94.142.132.0/23 maxlen: 32
185.160.128.0/22 maxlen: 32
185.221.184.0/22 maxlen: 32
2a0b:5e00::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:87:13:b6:b0:8c:5a:63:75:30:4e:f6:05:09:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bec715ec665131ad023d44ef14b06e4a9fa5209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:69:e3:9c:57:c4:53:37:d2:be:b6:f0:30:
f2:ad:0c:8e:50:c5:3e:42:56:b8:06:19:01:b4:f9:
7e:00:0c:52:fc:c6:31:47:2a:80:9b:3e:d2:ca:9a:
2a:76:bd:7e:5a:cd:b9:9a:e6:1a:77:e7:f4:22:19:
f5:86:5e:4b:6a:4b:0e:0c:b0:6a:ae:f1:db:7d:13:
fc:0a:8f:5a:24:90:69:e9:ad:11:55:83:c1:dd:35:
99:40:b7:a5:b1:d9:ed:a1:62:e5:89:dd:fe:2a:f3:
d5:aa:67:6c:02:5e:fc:f8:77:71:2f:b9:36:e1:74:
e1:4d:14:c8:ed:cb:b0:19:13:9d:d7:8e:a9:db:08:
5e:05:fd:38:f2:45:54:67:b2:a9:5b:6f:76:d3:c3:
8f:21:c8:b2:72:05:d1:d2:d0:74:1b:2b:5e:c2:f4:
02:a5:da:68:b9:18:93:37:bd:e6:4d:c7:a5:cf:88:
4c:61:91:d4:46:35:c5:ac:67:e2:8d:80:56:8b:21:
b5:ab:e4:95:f2:f8:b4:cd:ce:b2:9c:3f:db:4f:7d:
db:51:14:3c:08:bf:2c:b8:11:c7:de:6a:6c:03:83:
b9:fa:6e:84:b8:da:ac:ca:47:21:f1:72:90:c6:c7:
65:67:67:80:30:52:1a:bd:34:ab:f2:3e:ec:b7:44:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:15:EC:66:51:31:AD:02:3D:44:EF:14:B0:6E:4A:9F:A5:20:9F
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/vscV7GZRMa0CPUTvFLBuSp-lIJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.192.0/21
94.142.132.0/23
185.160.128.0/22
185.221.184.0/22
IPv6:
2a0b:5e00::/29
Signature Algorithm: sha256WithRSAEncryption
80:15:df:e4:73:bc:6d:da:f7:f2:da:0f:9a:b4:65:99:04:4a:
a0:23:ae:8e:4a:b0:17:e9:e9:1a:d9:db:42:c4:78:23:ec:64:
b8:c6:58:eb:a9:97:4b:af:4d:21:e7:53:0f:ca:a7:0f:d8:9d:
43:fa:66:c9:b8:07:e0:5b:44:d8:04:6e:93:4c:1a:6e:d4:ba:
a4:01:26:ea:16:4a:d7:b9:f8:d7:1f:1d:1e:dd:83:99:e7:c8:
57:d2:c5:2b:fe:43:e0:87:2c:3a:6a:86:14:dd:1d:97:0e:6e:
b1:59:4e:71:7b:cf:73:9a:43:cd:1b:bb:a2:8f:e5:0e:a3:89:
84:6e:9d:33:33:47:5e:a9:a0:cd:95:ca:85:9a:68:a9:f6:71:
2f:fb:d3:d5:f5:2a:c8:c0:b2:69:4c:26:a9:53:56:de:f9:bf:
ac:35:7c:e9:92:44:fe:08:cc:37:e4:31:3b:0d:42:44:4e:98:
94:dd:48:91:21:c3:ed:10:fa:76:bb:86:0e:30:38:c9:df:34:
21:82:e8:fd:5b:84:c2:d9:b3:55:bf:28:e4:83:f9:08:c6:fe:
2c:b9:b8:84:4d:2a:5c:e0:b2:32:07:c5:23:55:df:2a:d6:5b:
58:5f:37:37:1e:af:c0:f2:5c:c4:c7:f4:0e:03:13:f6:83:98:
54:18:f0:b4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQiH4cTtrCMWmN1ME72BQmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNGQ3NmRkMmY0NjA2OGIwODcxYWQ0NTAwYWM2ZTU3N2Fm
ZTQ2OWMwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWM3MTVlYzY2NTEzMWFkMDIzZDQ0ZWYxNGIwNmU0YTlmYTUyMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Jp45xXxFM30r628DDyrQyOUMU+
Qla4BhkBtPl+AAxS/MYxRyqAmz7Sypoqdr1+Ws25muYad+f0Ihn1hl5LaksODLBq
rvHbfRP8Co9aJJBp6a0RVYPB3TWZQLelsdntoWLlid3+KvPVqmdsAl78+HdxL7k2
4XThTRTI7cuwGROd146p2wheBf048kVUZ7KpW29208OPIciycgXR0tB0GytewvQC
pdpouRiTN73mTcelz4hMYZHURjXFrGfijYBWiyG1q+SV8vi0zc6ynD/bT33bURQ8
CL8suBHH3mpsA4O5+m6EuNqsykch8XKQxsdlZ2eAMFIavTSr8j7st0TGRwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFL7HFexmUTGtAj1E7xSwbkqfpSCfMB8GA1UdIwQY
MBaAFJpNdt0vRgaLCHGtRQCsbld6/kacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQt
NDQ2OTJkYmNjYjMyLzEvdnNjVjdHWlJNYTBDUFVUdkZMQnVTcC1sSUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lZDdjOGEtMzk1Mi00NDAxLTlkZDQtNDQ2OTJkYmNjYjMy
LzEvbWsxMjNTOUdCb3NJY2ExRkFLeHVWM3ItUnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLrbAAwQB
Xo6EAwQCuaCAAwQCud24MA0EAgACMAcDBQMqC14AMA0GCSqGSIb3DQEBCwUAA4IB
AQCAFd/kc7xt2vfy2g+atGWZBEqgI66OSrAX6eka2dtCxHgj7GS4xljrqZdLr00h
51MPyqcP2J1D+mbJuAfgW0TYBG6TTBpu1LqkASbqFkrXufjXHx0e3YOZ58hX0sUr
/kPghyw6aoYU3R2XDm6xWU5xe89zmkPNG7uij+UOo4mEbp0zM0deqaDNlcqFmmip
9nEv+9PV9SrIwLJpTCapU1be+b+sNXzpkkT+CMw35DE7DUJETpiU3UiRIcPtEPp2
u4YOMDjJ3zQhguj9W4TC2bNVvyjkg/kIxv4subiETSpc4LIyB8UjVd8q1ltYXzc3
Hq/A8lzEx/QOAxP2g5hUGPC0
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:57 2025 by rpki-client