Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/UpdorckKAviPtXnc3P5_vHsstcQ.roa
File: UpdorckKAviPtXnc3P5_vHsstcQ.roa (raw, json)
Hash identifier: ooJMnGz+B+dPJaGV/iALnmX71ASJ7bqGcQilmTah56E=
Subject key identifier: 52:97:68:AD:C9:0A:02:F8:8F:B5:79:DC:DC:FE:7F:BC:7B:2C:B5:C4
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019623D60C9F29763668E49526C63166BEAA
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/UpdorckKAviPtXnc3P5_vHsstcQ.roa
Signing time: Fri 11 Apr 2025 07:52:32 +0000
ROA not before: Fri 11 Apr 2025 07:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 94.241.172.0/24 maxlen: 24
94.241.173.0/24 maxlen: 24
94.241.174.0/24 maxlen: 24
94.241.175.0/24 maxlen: 24
178.253.22.0/24 maxlen: 24
178.253.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:d6:0c:9f:29:76:36:68:e4:95:26:c6:31:66:be:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 11 07:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=529768adc90a02f88fb579dcdcfe7fbc7b2cb5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:f8:ed:35:5e:8c:a2:dc:ca:1a:71:bc:6f:
77:92:27:50:ab:95:2f:c4:ba:10:c4:6c:a5:db:a5:
f3:52:58:27:c6:7f:27:9b:5f:7a:fd:4a:16:6d:0a:
9e:b4:b7:4a:31:bc:38:4b:35:cc:6e:54:f0:62:0c:
bd:7b:16:db:92:8a:50:3b:a9:9e:33:a2:9c:d5:06:
6f:da:85:79:30:0c:42:79:f1:20:08:35:b0:1e:04:
3c:23:21:3d:78:ee:50:c3:9c:7c:26:08:22:98:44:
c8:9c:e3:74:c7:e3:af:4d:7b:1a:50:3e:4f:b6:81:
54:7c:64:d5:2f:20:93:63:63:2a:1d:a3:d2:ec:64:
b5:b0:3c:d7:4c:e9:32:90:b7:fe:60:c9:06:a2:81:
0d:81:53:6e:f0:61:25:ec:2d:f1:0a:30:57:eb:2d:
33:c2:df:f3:64:18:32:ec:54:52:43:8e:8d:5c:a9:
dc:6a:7b:84:0b:9a:19:2d:b5:d5:d7:ff:65:12:2f:
b7:1f:f8:d8:12:49:ea:35:63:7f:bf:a5:b4:cb:50:
2b:27:01:bd:45:65:48:d7:1a:d8:d0:80:81:c5:89:
ce:89:e9:a1:0f:7c:d3:1d:7a:01:79:2f:68:a6:fd:
a5:aa:1f:34:49:b8:d9:67:0a:e2:73:26:93:3d:bf:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:97:68:AD:C9:0A:02:F8:8F:B5:79:DC:DC:FE:7F:BC:7B:2C:B5:C4
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/UpdorckKAviPtXnc3P5_vHsstcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.172.0/22
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
61:d3:a4:8b:67:47:64:d2:a7:d2:66:a4:33:97:aa:56:ff:0f:
af:8e:cd:95:26:55:14:8c:f8:e5:dd:7f:65:0e:74:b0:f1:41:
3c:74:3e:15:68:cc:29:44:33:84:f0:bf:9b:da:42:a6:b2:99:
96:1e:82:64:62:66:d4:6b:da:b5:8c:7c:88:35:4b:f6:2d:02:
c7:a8:9a:ba:35:52:aa:3c:26:c0:35:7a:ca:dc:6f:42:1d:a2:
fc:ac:57:b1:9b:9c:9e:45:02:ee:e7:cf:f1:d2:fe:98:13:c2:
2b:af:03:91:1c:76:dc:9b:20:43:9e:78:94:d1:0e:34:a6:00:
e8:ba:f5:9a:d0:46:e2:06:1b:de:d2:2f:4d:ee:a8:64:c4:cd:
eb:a0:31:b4:09:4f:b5:8d:ff:8d:ea:a9:ba:b6:b9:d4:8c:e8:
61:77:3c:00:18:22:35:b5:67:e2:04:c3:3e:15:f1:06:5a:74:
5a:61:08:6f:7d:50:2a:5b:23:6f:5d:87:52:05:93:4a:c0:ee:
66:35:b0:9f:4b:a1:b2:48:3b:b5:b6:c1:7f:19:76:4f:7d:57:
e8:a7:0e:b6:84:b2:c2:12:7a:7d:cd:9c:bb:f2:5f:5a:6a:aa:
c3:17:9e:24:c3:db:bc:52:e9:99:45:d7:e0:4f:c8:41:11:16:
18:1a:93:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZYj1gyfKXY2aOSVJsYxZr6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjUwNDExMDc1MjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mjk3NjhhZGM5MGEwMmY4OGZiNTc5ZGNkY2ZlN2ZiYzdiMmNiNWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gb47TVejKLcyhpxvG93kidQq5Uv
xLoQxGyl26XzUlgnxn8nm196/UoWbQqetLdKMbw4SzXMblTwYgy9exbbkopQO6me
M6Kc1QZv2oV5MAxCefEgCDWwHgQ8IyE9eO5Qw5x8JggimETInON0x+OvTXsaUD5P
toFUfGTVLyCTY2MqHaPS7GS1sDzXTOkykLf+YMkGooENgVNu8GEl7C3xCjBX6y0z
wt/zZBgy7FRSQ46NXKncanuEC5oZLbXV1/9lEi+3H/jYEknqNWN/v6W0y1ArJwG9
RWVI1xrY0ICBxYnOiemhD3zTHXoBeS9opv2lqh80SbjZZwricyaTPb+wgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFKXaK3JCgL4j7V53Nz+f7x7LLXEMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvVXBkb3Jja0tBdmlQdFhuYzNQNV92SHNzdGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXvGsAwQB
sv0WMA0GCSqGSIb3DQEBCwUAA4IBAQBh06SLZ0dk0qfSZqQzl6pW/w+vjs2VJlUU
jPjl3X9lDnSw8UE8dD4VaMwpRDOE8L+b2kKmspmWHoJkYmbUa9q1jHyINUv2LQLH
qJq6NVKqPCbANXrK3G9CHaL8rFexm5yeRQLu58/x0v6YE8IrrwORHHbcmyBDnniU
0Q40pgDouvWa0EbiBhve0i9N7qhkxM3roDG0CU+1jf+N6qm6trnUjOhhdzwAGCI1
tWfiBMM+FfEGWnRaYQhvfVAqWyNvXYdSBZNKwO5mNbCfS6GySDu1tsF/GXZPfVfo
pw62hLLCEnp9zZy78l9aaqrDF54kw9u8UumZRdfgT8hBERYYGpOW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net