Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa
File: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (raw, json)
Hash identifier: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=
Subject key identifier: BE:B9:D2:CC:9D:FE:14:AE:57:A4:E9:F5:BC:F1:B9:59:8E:D9:03:1C
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019421445B3709E070AEF510553013C0F18B
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49103
IP address blocks: 45.15.248.0/22 maxlen: 24
45.86.196.0/22 maxlen: 24
45.86.196.0/24 maxlen: 24
45.86.197.0/24 maxlen: 24
45.86.198.0/24 maxlen: 24
45.86.199.0/24 maxlen: 24
45.132.168.0/22 maxlen: 24
45.156.196.0/24 maxlen: 24
45.156.198.0/24 maxlen: 24
45.156.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:37:09:e0:70:ae:f5:10:55:30:13:c0:f1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=beb9d2cc9dfe14ae57a4e9f5bcf1b9598ed9031c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:23:c9:c7:92:8a:f8:9c:2d:65:c5:a7:a8:
4b:83:e9:a0:44:9b:59:15:7e:43:a2:ba:5c:09:1a:
55:31:48:85:1e:8c:ba:80:e5:79:45:16:49:a2:28:
77:52:7a:1a:e6:62:dd:c6:00:7e:be:0a:04:98:df:
aa:fd:d9:21:5f:64:14:8a:55:44:aa:c4:38:07:3b:
da:57:37:99:e0:06:60:aa:58:bb:94:dc:05:c0:c6:
55:1d:0b:f7:fc:19:df:f0:52:75:d8:b6:5a:c3:61:
26:56:e8:f7:08:00:87:80:b7:11:47:65:dd:06:ad:
ab:52:63:e8:12:e8:1e:f8:f8:a6:2f:49:a0:f4:e1:
00:a3:58:5a:7e:5f:1a:be:2a:4d:74:05:0e:3f:70:
a5:8d:ea:7e:d2:3d:c1:9a:24:0b:45:fe:6e:c1:17:
08:59:a2:fc:0a:7e:69:41:c5:78:31:24:73:fc:62:
33:e3:5a:cf:49:0d:d8:a7:f4:da:2e:1a:a9:f7:c2:
86:db:fd:18:98:84:d2:b8:cd:ca:ff:25:63:af:83:
dd:d8:6e:aa:cd:45:fa:c8:cb:c3:4a:fd:22:cb:c9:
55:ad:8c:22:32:5f:6f:96:6b:f7:d4:18:77:94:9a:
3c:b7:25:9b:0d:d9:94:3f:a3:80:e3:25:1d:48:08:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:D2:CC:9D:FE:14:AE:57:A4:E9:F5:BC:F1:B9:59:8E:D9:03:1C
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.248.0/22
45.86.196.0/22
45.132.168.0/22
45.156.196.0/24
45.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c0:5f:4a:76:53:c7:9e:b9:de:7b:23:f0:2d:b9:6e:70:e6:
c4:3f:08:81:ba:8a:11:b5:e2:5f:09:a4:51:ce:42:ba:6b:33:
29:78:9d:fe:8e:15:13:56:ee:81:ba:3f:f1:a5:4f:ea:c3:a1:
f4:b8:7e:a2:3c:e7:62:14:ca:bb:45:cd:d6:25:df:07:47:6d:
50:fa:89:01:5e:73:4d:01:07:51:d3:75:1f:b6:c4:12:54:37:
62:fc:26:71:af:ce:de:91:2f:36:9c:b7:d6:1e:5d:66:8c:2e:
03:26:6b:e7:d5:f8:0a:6d:2d:37:7f:0a:27:c1:5b:29:65:6f:
8e:44:a8:b8:c4:3d:90:b4:2b:4d:fb:b6:76:84:d7:1e:34:df:
f7:51:62:b8:61:6e:f1:83:f4:70:b7:86:9f:97:0a:07:db:52:
a2:ce:d9:cc:c2:54:f9:19:af:ac:82:23:0c:19:52:a3:7b:cc:
d9:2d:ac:c3:c2:62:05:37:10:8e:81:5f:24:96:5f:83:32:94:
a6:28:17:c5:7a:61:93:78:c2:0a:53:c4:99:97:89:00:7c:4a:
b8:31:ed:1d:82:d3:9a:58:08:c1:fe:b4:38:51:4d:55:83:02:
1a:5e:2e:85:25:5a:e7:c1:88:4e:1a:66:5b:06:b3:56:88:40:
5a:f2:9e:4e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhRFs3CeBwrvUQVTATwPGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjUwMTAxMDk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWI5ZDJjYzlkZmUxNGFlNTdhNGU5ZjViY2YxYjk1OThlZDkwMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrQjyceSivicLWXFp6hLg+mgRJtZ
FX5DorpcCRpVMUiFHoy6gOV5RRZJoih3Unoa5mLdxgB+vgoEmN+q/dkhX2QUilVE
qsQ4BzvaVzeZ4AZgqli7lNwFwMZVHQv3/Bnf8FJ12LZaw2EmVuj3CACHgLcRR2Xd
Bq2rUmPoEuge+PimL0mg9OEAo1hafl8avipNdAUOP3Cljep+0j3BmiQLRf5uwRcI
WaL8Cn5pQcV4MSRz/GIz41rPSQ3Yp/TaLhqp98KG2/0YmITSuM3K/yVjr4Pd2G6q
zUX6yMvDSv0iy8lVrYwiMl9vlmv31Bh3lJo8tyWbDdmUP6OA4yUdSAg+OwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFL650syd/hSuV6Tp9bzxuVmO2QMcMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvdnJuU3pKMy1GSzVYcE9uMXZQRzVXWTdaQXh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLQ/4AwQC
LVbEAwQCLYSoAwQALZzEAwQBLZzGMA0GCSqGSIb3DQEBCwUAA4IBAQBEwF9KdlPH
nrneeyPwLblucObEPwiBuooRteJfCaRRzkK6azMpeJ3+jhUTVu6Buj/xpU/qw6H0
uH6iPOdiFMq7Rc3WJd8HR21Q+okBXnNNAQdR03UftsQSVDdi/CZxr87ekS82nLfW
Hl1mjC4DJmvn1fgKbS03fwonwVspZW+ORKi4xD2QtCtN+7Z2hNceNN/3UWK4YW7x
g/Rwt4aflwoH21KiztnMwlT5Ga+sgiMMGVKje8zZLazDwmIFNxCOgV8kll+DMpSm
KBfFemGTeMIKU8SZl4kAfEq4Me0dgtOaWAjB/rQ4UU1VgwIaXi6FJVrnwYhOGmZb
BrNWiEBa8p5O
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:12 2025 by rpki-client