Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/VUW_CECBbTHdD7KnSWpCp7f6Uls.roa
File: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (raw, json)
Hash identifier: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=
Subject key identifier: 55:45:BF:08:40:81:6D:31:DD:0F:B2:A7:49:6A:42:A7:B7:FA:52:5B
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 0194266B0178ECC1F90F527C5DA99BFEE577
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/VUW_CECBbTHdD7KnSWpCp7f6Uls.roa
Signing time: Thu 02 Jan 2025 09:48:54 +0000
ROA not before: Thu 02 Jan 2025 09:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43277
IP address blocks: 78.109.96.0/24 maxlen: 24
78.109.104.0/22 maxlen: 22
78.109.108.0/22 maxlen: 22
185.90.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:01:78:ec:c1:f9:0f:52:7c:5d:a9:9b:fe:e5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jan 2 09:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5545bf0840816d31dd0fb2a7496a42a7b7fa525b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:56:49:82:17:41:23:59:c6:09:7c:37:ed:
6d:bf:b4:b4:0e:c2:4a:81:a8:5a:16:39:02:a1:76:
77:73:74:f2:e9:bf:79:83:97:27:2e:46:b1:1f:db:
d8:ae:1c:69:99:a8:37:e3:4f:98:6b:af:3d:46:ce:
23:19:a6:e8:7b:66:6e:b5:25:7a:eb:59:94:fd:70:
3b:f1:4f:5b:a1:ab:ef:ff:f5:51:83:d8:10:9d:7f:
0a:f3:58:1a:6f:fb:4b:b6:7d:11:ac:c8:08:97:dd:
8d:8a:00:1a:41:40:5c:c5:7c:59:68:5c:01:2c:e8:
cb:7d:f6:74:bc:d3:c4:f3:0f:82:21:cc:c9:d6:e5:
9a:9a:aa:89:1e:fb:46:e8:46:97:83:48:9a:4a:70:
ce:3f:fd:47:ad:3e:e3:66:f2:38:88:80:5e:fd:a5:
19:6a:64:fc:76:8a:70:00:ec:1b:4b:48:e3:87:ab:
f4:48:93:e0:e5:4a:ea:37:f5:2b:a9:67:58:14:18:
a5:be:9c:24:82:f6:87:42:ad:79:9e:47:56:32:be:
f2:0e:9b:0a:9e:0b:68:c0:e9:e7:fc:3b:1b:82:dd:
a6:bc:60:4c:a8:32:76:9b:90:03:5f:42:10:a3:2b:
da:bb:e4:a1:45:2f:93:0f:2d:ad:52:3f:49:2e:db:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:BF:08:40:81:6D:31:DD:0F:B2:A7:49:6A:42:A7:B7:FA:52:5B
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/VUW_CECBbTHdD7KnSWpCp7f6Uls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.96.0/24
78.109.104.0/21
185.90.132.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:02:2c:f6:db:c8:33:9a:83:ce:aa:83:63:b6:5e:47:87:db:
40:59:46:c0:29:67:4f:22:62:cd:19:bf:b4:40:ec:11:18:7e:
01:da:2b:8f:51:ee:09:ca:af:58:71:99:13:99:28:85:fd:e6:
ce:7a:26:29:f4:f4:23:a8:61:4f:7b:86:bb:33:22:76:bc:81:
8f:09:1c:00:a7:d7:22:ce:6d:75:cf:40:7f:ed:bf:46:49:ac:
d4:6a:da:a0:82:a4:3e:fd:95:ad:a9:bc:ea:ab:5c:d0:f4:3d:
3e:d9:08:1f:57:b1:b4:37:41:9c:8f:b3:ba:d0:59:21:6f:e6:
da:8f:ac:b6:33:4a:c5:f3:81:e7:c6:1d:1a:46:ef:7e:44:3b:
1f:08:c3:ce:93:ef:6f:2f:46:37:81:f5:e3:0e:a6:1d:6d:21:
33:55:12:80:b1:93:69:e6:eb:85:bb:22:52:ad:d7:56:7d:1a:
de:ab:80:b7:5d:37:f5:b1:9e:47:c1:a5:e7:bb:99:90:db:3d:
30:76:69:06:e3:47:3b:fc:9a:69:3d:e2:b2:28:ed:84:08:36:
1e:f4:84:d8:d9:d6:8f:12:ed:ce:01:cf:ce:e0:43:9e:13:6f:
a2:f6:85:77:53:98:63:2a:a7:b9:74:0b:96:91:96:7c:b0:a6:
8e:cf:d4:28
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQmawF47MH5D1J8Xamb/uV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj
MTU3NTkwHhcNMjUwMTAyMDk0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTQ1YmYwODQwODE2ZDMxZGQwZmIyYTc0OTZhNDJhN2I3ZmE1MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TFWSYIXQSNZxgl8N+1tv7S0DsJK
gahaFjkCoXZ3c3Ty6b95g5cnLkaxH9vYrhxpmag340+Ya689Rs4jGaboe2ZutSV6
61mU/XA78U9boavv//VRg9gQnX8K81gab/tLtn0RrMgIl92NigAaQUBcxXxZaFwB
LOjLffZ0vNPE8w+CIczJ1uWamqqJHvtG6EaXg0iaSnDOP/1HrT7jZvI4iIBe/aUZ
amT8dopwAOwbS0jjh6v0SJPg5UrqN/UrqWdYFBilvpwkgvaHQq15nkdWMr7yDpsK
ngtowOnn/Dsbgt2mvGBMqDJ2m5ADX0IQoyvau+ShRS+TDy2tUj9JLtujLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFVFvwhAgW0x3Q+yp0lqQqe3+lJbMB8GA1UdIwQY
MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt
YWY1ODY3NDc2MzA5LzEvVlVXX0NFQ0JiVEhkRDdLblNXcENwN2Y2VWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5
LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATm1gAwQD
Tm1oAwQBuVqEMA0GCSqGSIb3DQEBCwUAA4IBAQAqAiz228gzmoPOqoNjtl5Hh9tA
WUbAKWdPImLNGb+0QOwRGH4B2iuPUe4Jyq9YcZkTmSiF/ebOeiYp9PQjqGFPe4a7
MyJ2vIGPCRwAp9cizm11z0B/7b9GSazUatqggqQ+/ZWtqbzqq1zQ9D0+2QgfV7G0
N0Gcj7O60Fkhb+baj6y2M0rF84Hnxh0aRu9+RDsfCMPOk+9vL0Y3gfXjDqYdbSEz
VRKAsZNp5uuFuyJSrddWfRreq4C3XTf1sZ5HwaXnu5mQ2z0wdmkG40c7/JppPeKy
KO2ECDYe9ITY2daPEu3OAc/O4EOeE2+i9oV3U5hjKqe5dAuWkZZ8sKaOz9Qo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net