Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/VSiusRPyIc9Tc8bThvks1NkGA7Q.roa
File: VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (raw, json)
Hash identifier: uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=
Subject key identifier: 55:28:AE:B1:13:F2:21:CF:53:73:C6:D3:86:F9:2C:D4:D9:06:03:B4
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 0194266B379397159E33E2C7B38DA0F983EB
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/VSiusRPyIc9Tc8bThvks1NkGA7Q.roa
Signing time: Thu 02 Jan 2025 09:49:08 +0000
ROA not before: Thu 02 Jan 2025 09:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8758
IP address blocks: 185.5.186.0/23 maxlen: 23
2a02:7c40:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:37:93:97:15:9e:33:e2:c7:b3:8d:a0:f9:83:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Jan 2 09:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5528aeb113f221cf5373c6d386f92cd4d90603b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:d3:ab:7d:83:46:3b:20:7c:39:1a:6d:19:
ef:43:17:de:87:f9:d2:ec:ac:02:65:d3:39:12:ac:
6d:c9:74:1e:e7:e8:53:b5:2d:8e:f1:e1:b1:04:09:
6a:e4:bf:cb:ce:fe:48:fb:70:98:ae:48:7a:2e:2e:
27:4f:48:7a:eb:4f:11:fb:67:31:52:4e:35:11:be:
1c:2a:18:89:72:a1:cc:e4:6f:a9:05:68:c7:21:3e:
ef:29:dc:2f:fa:89:aa:0a:b8:54:12:b6:ac:00:43:
e1:79:da:b3:2f:cd:6b:b9:b3:00:9e:c3:b4:18:3c:
77:64:cb:0a:1c:1e:6c:d9:29:48:0e:1b:51:b2:b2:
dc:d1:87:dd:8d:77:9c:89:6c:c5:83:e0:50:3c:e1:
a3:7b:ee:d6:7f:b1:2c:ff:d7:7a:7c:23:ff:11:36:
ff:98:83:8a:21:61:e4:2b:4d:0f:b4:d2:98:9d:cf:
da:90:32:65:ee:16:f8:ee:c2:02:a9:72:71:3f:91:
57:db:c2:c9:e4:99:53:d1:ce:34:2b:ca:f7:e0:8f:
f7:3d:85:67:92:53:2e:45:7b:a9:6c:90:64:83:05:
11:ff:da:a3:43:94:4b:1d:11:6c:3a:44:64:e1:72:
23:dd:1e:05:ae:30:7f:57:c8:c2:3c:49:a8:33:7c:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:AE:B1:13:F2:21:CF:53:73:C6:D3:86:F9:2C:D4:D9:06:03:B4
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/VSiusRPyIc9Tc8bThvks1NkGA7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.186.0/23
IPv6:
2a02:7c40:8000::/33
Signature Algorithm: sha256WithRSAEncryption
4d:ff:41:73:ba:fe:01:08:c5:fe:47:32:fa:be:e3:94:8e:a5:
29:ec:00:cd:5b:9b:e8:1f:15:e1:0e:fa:b3:03:d1:9d:19:c6:
08:f7:c2:ed:6e:1b:48:7e:a9:1a:54:4b:e3:df:95:df:10:cf:
a9:d9:cf:56:72:c4:9e:4b:82:a3:f5:de:23:e6:fa:e0:11:39:
50:92:cc:d0:c6:ba:4b:f6:8e:8d:81:6d:72:26:90:55:44:f2:
a5:56:16:32:94:3f:80:da:a3:58:14:b1:6c:dc:8a:03:26:9e:
65:7c:07:42:7c:c2:d0:6f:83:8d:1d:c2:90:f7:18:09:a2:2b:
b8:3a:7d:2d:b3:2d:99:4b:34:62:4b:fc:cc:b1:1c:5d:0a:9d:
32:96:d4:96:66:1c:9f:a8:66:27:45:fe:84:dd:3f:2b:5b:a7:
1d:4d:c5:52:9c:cb:8c:1d:da:4c:76:2e:2f:74:0d:68:6a:b0:
42:e8:17:ca:82:2b:96:d4:8e:f6:f0:c1:ad:88:7d:d6:af:7f:
15:57:c0:93:23:e2:a6:10:3d:a8:b8:85:b7:7b:a8:94:61:77:
a5:9a:cb:78:69:36:5d:4f:f0:af:9a:e0:86:00:ea:70:4f:96:
8b:77:cd:ac:84:77:1d:fd:fc:8f:94:6a:58:5e:b5:ba:0e:db:
95:1d:b5:10
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQmazeTlxWeM+LHs42g+YPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTJiZTEzOWFlNzc5Y2QzZDRmZWViY2NkMzY4MjgxYTFm
NWU3YTAwHhcNMjUwMTAyMDk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI4YWViMTEzZjIyMWNmNTM3M2M2ZDM4NmY5MmNkNGQ5MDYwM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2bTq32DRjsgfDkabRnvQxfeh/nS
7KwCZdM5EqxtyXQe5+hTtS2O8eGxBAlq5L/Lzv5I+3CYrkh6Li4nT0h6608R+2cx
Uk41Eb4cKhiJcqHM5G+pBWjHIT7vKdwv+omqCrhUErasAEPhedqzL81rubMAnsO0
GDx3ZMsKHB5s2SlIDhtRsrLc0YfdjXeciWzFg+BQPOGje+7Wf7Es/9d6fCP/ETb/
mIOKIWHkK00PtNKYnc/akDJl7hb47sICqXJxP5FX28LJ5JlT0c40K8r34I/3PYVn
klMuRXupbJBkgwUR/9qjQ5RLHRFsOkRk4XIj3R4FrjB/V8jCPEmoM3zI3wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFFUorrET8iHPU3PG04b5LNTZBgO0MB8GA1UdIwQY
MBaAFFHivhOa53nNPU/uvM02goGh9eegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMt
Y2Q3YjZlZGJmY2Y1LzEvVlNpdXNSUHlJYzlUYzhiVGh2a3MxTmtHQTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZjU5MzEtMDVhOC00MzZiLTkyNzMtY2Q3YjZlZGJmY2Y1
LzEvVWVLLUU1cm5lYzA5VC02OHpUYUNnYUgxNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuQW6MA4E
AgACMAgDBgcqAnxAgDANBgkqhkiG9w0BAQsFAAOCAQEATf9Bc7r+AQjF/kcy+r7j
lI6lKewAzVub6B8V4Q76swPRnRnGCPfC7W4bSH6pGlRL49+V3xDPqdnPVnLEnkuC
o/XeI+b64BE5UJLM0Ma6S/aOjYFtciaQVUTypVYWMpQ/gNqjWBSxbNyKAyaeZXwH
QnzC0G+DjR3CkPcYCaIruDp9LbMtmUs0Ykv8zLEcXQqdMpbUlmYcn6hmJ0X+hN0/
K1unHU3FUpzLjB3aTHYuL3QNaGqwQugXyoIrltSO9vDBrYh91q9/FVfAkyPiphA9
qLiFt3uolGF3pZrLeGk2XU/wr5rghgDqcE+Wi3fNrIR3Hf38j5RqWF61ug7blR21
EA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:54 2025 by rpki-client