Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/vP1OZkZCbqW8WFMKSvsTsInR7Xc.roa
File: vP1OZkZCbqW8WFMKSvsTsInR7Xc.roa (raw, json)
Hash identifier: veiOTy10HWJWDVSa8rHZggGjPvAQazCNxlgnVD7qszg=
Subject key identifier: BC:FD:4E:66:46:42:6E:A5:BC:58:53:0A:4A:FB:13:B0:89:D1:ED:77
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019484AA15C916BAC355C821D55BC08FBF32
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/vP1OZkZCbqW8WFMKSvsTsInR7Xc.roa
Signing time: Mon 20 Jan 2025 17:02:06 +0000
ROA not before: Mon 20 Jan 2025 17:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8648
IP address blocks: 185.105.252.0/24 maxlen: 24
185.105.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:aa:15:c9:16:ba:c3:55:c8:21:d5:5b:c0:8f:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jan 20 17:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcfd4e6646426ea5bc58530a4afb13b089d1ed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:d6:a4:a2:f7:25:8b:f1:73:88:45:f2:2b:
45:be:3a:83:90:b3:16:7f:b3:db:71:a6:9c:bf:9a:
48:8e:4c:9d:ad:17:43:4b:4c:56:dd:2c:99:9b:b4:
89:0c:3d:50:0b:de:4f:2d:08:87:3c:61:d7:cb:8d:
22:95:56:f0:9e:2b:3b:03:8e:fc:ed:e8:50:01:8e:
f6:ad:3a:ab:70:69:bb:43:0e:d8:ee:b8:f7:99:5f:
3c:a4:08:2d:59:94:bb:75:2e:fb:b5:d9:e4:89:2e:
04:ed:7b:2d:9d:41:70:54:b4:51:77:88:14:5b:ba:
e8:43:d3:6c:34:cc:a9:ae:29:90:78:5c:3a:ca:4e:
2a:32:24:f9:18:03:3d:b1:6b:18:1b:44:75:69:a1:
b0:e0:b1:f0:58:5c:71:24:08:4e:bf:33:04:b2:d9:
74:c5:20:50:7b:c7:b6:cc:2b:51:ab:8b:27:f7:88:
d3:d7:ca:3d:34:9b:9b:19:50:74:27:52:9e:b9:bb:
0a:99:f1:f9:c9:d5:a6:91:cf:57:a4:da:9d:f3:04:
e4:f6:60:6d:bb:be:6e:aa:7c:e7:aa:78:6c:21:61:
4f:94:f3:24:fa:78:78:73:0f:49:61:c5:56:2e:23:
a3:54:42:f4:d5:6b:bc:25:75:f9:a0:c4:9d:51:b3:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FD:4E:66:46:42:6E:A5:BC:58:53:0A:4A:FB:13:B0:89:D1:ED:77
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/vP1OZkZCbqW8WFMKSvsTsInR7Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0/23
Signature Algorithm: sha256WithRSAEncryption
51:6c:c5:ea:43:cc:a9:49:a2:04:b6:22:32:96:75:3a:3c:ee:
36:60:9d:64:d8:13:34:9d:51:99:fc:74:c6:5b:4d:b2:e1:19:
ed:ea:84:85:f3:62:17:c2:7b:60:5f:b9:92:b3:75:8f:d1:f1:
b6:82:10:41:9a:5c:fc:a0:b1:a9:df:e5:8e:24:6a:bd:90:03:
25:ae:d9:bb:f9:67:b8:f8:3c:19:68:89:08:99:14:e3:f8:80:
cc:90:4a:48:a1:af:71:92:47:04:93:a8:b1:79:f5:db:d2:57:
5f:e4:8a:80:1f:68:75:86:18:ac:fd:f6:8a:8d:6d:b0:0a:ee:
25:ae:b7:3b:62:00:56:77:f9:83:7d:dc:98:cc:19:b8:25:c5:
ac:be:90:0d:11:61:4f:46:8f:10:99:4a:b8:3b:0b:a0:7f:b7:
46:c8:ba:03:2c:f3:d4:7e:cb:6b:71:0c:50:b7:3d:4c:2a:35:
6b:a1:32:3a:a9:bc:0a:ca:f8:e3:87:05:fa:98:12:44:bf:d4:
58:69:18:75:7e:07:9f:de:dd:29:c6:0b:1f:65:b1:58:f9:6f:
59:11:4b:0b:17:44:a0:0a:29:2e:42:60:9d:2c:84:31:1a:c1:
f6:a3:04:62:f0:b0:ba:3b:e5:99:f7:ed:b2:8c:13:1e:73:25:
5a:02:8e:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSEqhXJFrrDVcgh1VvAj78yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx
MTkzZDQwHhcNMjUwMTIwMTcwMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZkNGU2NjQ2NDI2ZWE1YmM1ODUzMGE0YWZiMTNiMDg5ZDFlZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorHWpKL3JYvxc4hF8itFvjqDkLMW
f7Pbcaacv5pIjkydrRdDS0xW3SyZm7SJDD1QC95PLQiHPGHXy40ilVbwnis7A478
7ehQAY72rTqrcGm7Qw7Y7rj3mV88pAgtWZS7dS77tdnkiS4E7XstnUFwVLRRd4gU
W7roQ9NsNMyprimQeFw6yk4qMiT5GAM9sWsYG0R1aaGw4LHwWFxxJAhOvzMEstl0
xSBQe8e2zCtRq4sn94jT18o9NJubGVB0J1KeubsKmfH5ydWmkc9XpNqd8wTk9mBt
u75uqnznqnhsIWFPlPMk+nh4cw9JYcVWLiOjVEL01Wu8JXX5oMSdUbPY9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLz9TmZGQm6lvFhTCkr7E7CJ0e13MB8GA1UdIwQY
MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt
MmZlZThiNjMwOWNiLzEvdlAxT1prWkNicVc4V0ZNS1N2c1RzSW5SN1hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi
LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWn8MA0G
CSqGSIb3DQEBCwUAA4IBAQBRbMXqQ8ypSaIEtiIylnU6PO42YJ1k2BM0nVGZ/HTG
W02y4Rnt6oSF82IXwntgX7mSs3WP0fG2ghBBmlz8oLGp3+WOJGq9kAMlrtm7+We4
+DwZaIkImRTj+IDMkEpIoa9xkkcEk6ixefXb0ldf5IqAH2h1hhis/faKjW2wCu4l
rrc7YgBWd/mDfdyYzBm4JcWsvpANEWFPRo8QmUq4Owugf7dGyLoDLPPUfstrcQxQ
tz1MKjVroTI6qbwKyvjjhwX6mBJEv9RYaRh1fgef3t0pxgsfZbFY+W9ZEUsLF0Sg
CikuQmCdLIQxGsH2owRi8LC6O+WZ9+2yjBMecyVaAo7j
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:46:59 2025 by rpki-client on console.sobornost.net