Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Vfh8KjQzIuSXks4bz6-PHezUTBc.roa
File: Vfh8KjQzIuSXks4bz6-PHezUTBc.roa (raw, json)
Hash identifier: w3T6OUWnfWVjQF4aTF+2b6u8dtCTXmyQ0ZtsET76l/M=
Subject key identifier: 55:F8:7C:2A:34:33:22:E4:97:92:CE:1B:CF:AF:8F:1D:EC:D4:4C:17
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01918492DDC4458BD30B4837BE035A900690
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Vfh8KjQzIuSXks4bz6-PHezUTBc.roa
Signing time: Sat 24 Aug 2024 13:28:23 +0000
ROA not before: Sat 24 Aug 2024 13:28:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199239
IP address blocks: 46.20.104.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:92:dd:c4:45:8b:d3:0b:48:37:be:03:5a:90:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 24 13:28:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55f87c2a343322e49792ce1bcfaf8f1decd44c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:8c:26:d3:42:40:e4:9f:c5:07:f3:d3:d4:
88:b8:31:e8:d3:b1:da:8e:fe:4c:b7:23:84:88:3d:
09:9b:ee:7a:b2:7e:77:4f:a9:f0:58:b7:ae:5a:41:
ce:73:a5:c3:30:21:3d:58:54:0c:0a:7f:ae:82:1e:
39:ee:2a:70:eb:9a:3c:cd:db:af:96:1e:47:12:15:
14:20:5d:16:07:9d:4d:94:8d:f9:be:65:e9:2f:da:
51:0a:d4:e4:64:8c:16:ec:2f:08:6d:fe:05:1a:94:
c7:65:a2:ee:61:71:c7:95:57:15:8c:fc:4a:97:a1:
20:3d:d6:19:42:28:55:74:30:7b:fe:ca:96:41:2c:
b0:8b:dc:1f:bf:5c:74:c9:89:1b:ad:dc:3f:c4:a1:
ac:24:3f:5e:a2:b7:74:00:fe:63:23:c4:09:b1:cd:
fe:da:22:24:9b:bf:c3:a1:4c:09:e5:c4:49:2e:1b:
fc:c5:fa:e0:d8:7f:c0:5f:e1:57:64:5b:3a:1d:16:
68:ff:26:50:8d:db:71:3b:b6:8e:ad:fe:84:d9:d1:
1a:a1:15:5d:05:9c:eb:cf:26:6f:a5:6f:22:88:b0:
8a:c2:65:70:32:c8:3d:66:68:8a:94:70:5f:2d:9c:
10:18:1e:a8:50:1b:c7:29:5a:af:6c:58:88:19:d3:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F8:7C:2A:34:33:22:E4:97:92:CE:1B:CF:AF:8F:1D:EC:D4:4C:17
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Vfh8KjQzIuSXks4bz6-PHezUTBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
185.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
86:51:b1:3c:25:2c:6b:b5:06:b6:bb:6e:48:68:e1:61:60:3f:
c9:eb:5b:2c:09:f4:b8:67:27:76:df:49:86:c4:f8:f5:19:4b:
6f:17:4b:71:03:53:bd:bd:7a:17:1b:2a:05:7a:61:cc:17:24:
09:f8:fb:9e:ab:13:5e:e2:a4:2b:c9:11:e7:3d:2d:27:11:f5:
b9:fb:4c:68:c6:36:e6:f4:18:7f:ad:90:83:14:60:66:65:4e:
4f:6f:97:4a:5b:2b:c9:c7:10:11:48:6e:e1:55:b3:69:92:b6:
a8:7a:0e:20:71:36:04:8c:d8:b0:ed:43:ea:00:80:8a:38:22:
8e:ec:d7:77:11:06:24:64:0a:7f:31:e5:ae:77:42:0c:bf:35:
5f:47:98:f8:70:a8:a7:ba:f3:b9:09:04:53:6e:d1:0e:b0:b6:
7a:76:5c:e2:0f:b8:76:f5:ce:c0:40:bb:4d:79:d7:0c:15:e0:
32:d6:ca:ff:d5:ea:dd:ab:66:4e:e7:73:91:16:76:a4:8d:d1:
82:c2:da:51:07:80:e5:69:21:a3:06:65:94:df:52:3a:1b:54:
21:0c:78:af:65:ae:eb:59:a5:6c:66:da:43:2c:77:70:6a:19:
75:bd:97:cb:4d:dc:60:51:ad:fd:a6:f0:66:59:10:f2:04:b2:
87:cf:2e:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGEkt3ERYvTC0g3vgNakAaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjQwODI0MTMyODIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWY4N2MyYTM0MzMyMmU0OTc5MmNlMWJjZmFmOGYxZGVjZDQ0YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8SMJtNCQOSfxQfz09SIuDHo07Ha
jv5MtyOEiD0Jm+56sn53T6nwWLeuWkHOc6XDMCE9WFQMCn+ugh457ipw65o8zduv
lh5HEhUUIF0WB51NlI35vmXpL9pRCtTkZIwW7C8Ibf4FGpTHZaLuYXHHlVcVjPxK
l6EgPdYZQihVdDB7/sqWQSywi9wfv1x0yYkbrdw/xKGsJD9eord0AP5jI8QJsc3+
2iIkm7/DoUwJ5cRJLhv8xfrg2H/AX+FXZFs6HRZo/yZQjdtxO7aOrf6E2dEaoRVd
BZzrzyZvpW8iiLCKwmVwMsg9ZmiKlHBfLZwQGB6oUBvHKVqvbFiIGdO/xQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFX4fCo0MyLkl5LOG8+vjx3s1EwXMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvVmZoOEtqUXpJdVNYa3M0Yno2LVBIZXpVVEJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhRoAwQA
uWSrMA0GCSqGSIb3DQEBCwUAA4IBAQCGUbE8JSxrtQa2u25IaOFhYD/J61ssCfS4
Zyd230mGxPj1GUtvF0txA1O9vXoXGyoFemHMFyQJ+PueqxNe4qQryRHnPS0nEfW5
+0xoxjbm9Bh/rZCDFGBmZU5Pb5dKWyvJxxARSG7hVbNpkraoeg4gcTYEjNiw7UPq
AICKOCKO7Nd3EQYkZAp/MeWud0IMvzVfR5j4cKinuvO5CQRTbtEOsLZ6dlziD7h2
9c7AQLtNedcMFeAy1sr/1erdq2ZO53ORFnakjdGCwtpRB4DlaSGjBmWU31I6G1Qh
DHivZa7rWaVsZtpDLHdwahl1vZfLTdxgUa39pvBmWRDyBLKHzy6I
-----END CERTIFICATE-----
Generated at Fri Aug 30 00:28:39 2024 by rpki-client on console.sobornost.net