Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VkkvGMtenz96Ubj3KDzXyym1LzY.roa
File: VkkvGMtenz96Ubj3KDzXyym1LzY.roa (raw, json)
Hash identifier: E/GDo41oktFV73vvuiDk3fNXk8LkaX2ghEwTcizgkaw=
Subject key identifier: 56:49:2F:18:CB:5E:9F:3F:7A:51:B8:F7:28:3C:D7:CB:29:B5:2F:36
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01941F8C168E4E9C949AFB70ACE6D595A676
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VkkvGMtenz96Ubj3KDzXyym1LzY.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210366
IP address blocks: 185.12.213.0/24 maxlen: 24
185.12.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:8e:4e:9c:94:9a:fb:70:ac:e6:d5:95:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56492f18cb5e9f3f7a51b8f7283cd7cb29b52f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:fe:cc:94:3a:be:c0:69:38:69:19:88:c5:
5d:56:f4:68:49:e7:cc:98:1b:2f:2f:fb:4f:5d:39:
3a:16:b4:33:58:c2:fa:4e:cc:99:3d:4e:1c:24:d4:
f0:64:47:a9:fd:8e:03:07:6a:5f:53:0b:db:5e:9d:
fa:46:02:10:b4:0b:ea:ad:47:a3:35:8b:1a:f3:e5:
72:14:28:82:e9:99:3f:dc:92:ed:55:7e:80:fa:b5:
a1:de:2e:cb:56:90:aa:57:d1:cc:50:81:34:20:1d:
46:31:2f:96:04:b5:3d:ce:70:c3:7d:d8:0c:03:45:
7a:44:fb:20:0d:a1:df:ad:a5:38:ca:11:a3:0a:6b:
62:f0:fd:89:a1:13:b6:08:75:68:0f:17:52:52:10:
89:97:b1:ca:35:e1:4d:16:f8:89:65:3a:b6:60:c7:
50:57:d9:e1:62:1a:75:ee:67:28:fb:23:2d:09:96:
65:3b:86:10:4f:da:a2:f1:2d:de:fd:13:36:05:2e:
7f:ab:c3:22:46:7b:44:ef:ea:3e:72:f3:b7:37:69:
62:c1:f8:d8:cf:15:fb:cb:98:10:79:a6:f5:a0:7a:
e9:b7:6d:a9:cf:47:8c:14:6d:71:86:6c:e1:27:f5:
70:ae:14:e0:67:44:14:85:b4:7a:b6:2d:6c:a2:23:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:2F:18:CB:5E:9F:3F:7A:51:B8:F7:28:3C:D7:CB:29:B5:2F:36
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/VkkvGMtenz96Ubj3KDzXyym1LzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.213.0-185.12.214.255
Signature Algorithm: sha256WithRSAEncryption
0e:af:f6:93:9d:50:9e:c0:3f:64:d0:3f:97:0d:a5:56:fa:e5:
e4:24:87:64:6f:b7:54:30:c7:10:54:de:22:bd:42:5b:25:8a:
9c:5c:eb:f5:55:fc:19:8e:f0:47:00:70:41:db:69:53:18:d2:
8d:e6:cd:a2:25:16:7b:f5:b0:9b:19:6c:2d:8f:ae:80:e7:55:
f8:41:2f:29:4c:4a:94:6d:a8:44:97:5c:37:d6:e4:34:03:4c:
5b:12:00:9e:d5:d0:43:0c:ab:0e:8a:59:20:1d:db:4f:ba:2e:
c0:4c:04:0d:eb:c0:11:c7:f9:2e:7e:f4:8c:5e:ad:85:15:48:
28:e2:89:ff:e9:62:41:04:9e:ad:92:33:53:f3:b5:f6:22:76:
f1:72:da:2b:9f:c0:0d:05:dc:5a:96:30:c4:49:ce:b4:e1:e4:
2e:71:bd:ef:c4:33:0d:1b:a6:c4:c1:08:ec:96:53:78:cb:06:
6c:bc:8f:46:30:d9:10:18:db:10:0e:53:4c:a5:46:6a:df:81:
f2:21:df:ad:d4:62:9d:17:29:84:09:49:70:d4:59:87:54:11:
e4:0a:4d:fd:6a:aa:49:58:80:9f:ef:ab:68:d1:ae:bf:4b:b4:
34:a3:c7:77:b8:d1:2e:14:5e:4f:23:e9:3a:00:0b:ee:bd:b6:
01:6a:23:19
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQfjBaOTpyUmvtwrObVlaZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjUwMTAxMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjQ5MmYxOGNiNWU5ZjNmN2E1MWI4ZjcyODNjZDdjYjI5YjUyZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAD+zJQ6vsBpOGkZiMVdVvRoSefM
mBsvL/tPXTk6FrQzWML6TsyZPU4cJNTwZEep/Y4DB2pfUwvbXp36RgIQtAvqrUej
NYsa8+VyFCiC6Zk/3JLtVX6A+rWh3i7LVpCqV9HMUIE0IB1GMS+WBLU9znDDfdgM
A0V6RPsgDaHfraU4yhGjCmti8P2JoRO2CHVoDxdSUhCJl7HKNeFNFviJZTq2YMdQ
V9nhYhp17mco+yMtCZZlO4YQT9qi8S3e/RM2BS5/q8MiRntE7+o+cvO3N2liwfjY
zxX7y5gQeab1oHrpt22pz0eMFG1xhmzhJ/VwrhTgZ0QUhbR6ti1soiNwewIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFZJLxjLXp8/elG49yg818sptS82MB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvVmtrdkdNdGVuejk2VWJqM0tEelh5eW0xTHpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5DNUD
BAC5DNYwDQYJKoZIhvcNAQELBQADggEBAA6v9pOdUJ7AP2TQP5cNpVb65eQkh2Rv
t1QwxxBU3iK9Qlslipxc6/VV/BmO8EcAcEHbaVMY0o3mzaIlFnv1sJsZbC2ProDn
VfhBLylMSpRtqESXXDfW5DQDTFsSAJ7V0EMMqw6KWSAd20+6LsBMBA3rwBHH+S5+
9IxerYUVSCjiif/pYkEEnq2SM1PztfYidvFy2iufwA0F3FqWMMRJzrTh5C5xve/E
Mw0bpsTBCOyWU3jLBmy8j0Yw2RAY2xAOU0ylRmrfgfIh363UYp0XKYQJSXDUWYdU
EeQKTf1qqklYgJ/vq2jRrr9LtDSjx3e40S4UXk8j6ToAC+69tgFqIxk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net