Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vbdrdhUOJl4wsi5xARov9vy1YBw.roa
File: vbdrdhUOJl4wsi5xARov9vy1YBw.roa (raw, json)
Hash identifier: h1zYCMYrTjVB1BrJ6EaUn7dH9TjG79OHBmSR/bSGsYQ=
Subject key identifier: BD:B7:6B:76:15:0E:26:5E:30:B2:2E:71:01:1A:2F:F6:FC:B5:60:1C
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01954791307F23E338C2A6EEC0B83BFE8158
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vbdrdhUOJl4wsi5xARov9vy1YBw.roa
Signing time: Thu 27 Feb 2025 13:20:52 +0000
ROA not before: Thu 27 Feb 2025 13:20:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50887
IP address blocks: 46.102.191.0/24 maxlen: 24
86.107.47.0/24 maxlen: 24
94.177.10.0/23 maxlen: 24
94.177.58.0/24 maxlen: 24
94.177.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:91:30:7f:23:e3:38:c2:a6:ee:c0:b8:3b:fe:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 27 13:20:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdb76b76150e265e30b22e71011a2ff6fcb5601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:c3:cf:bc:06:e5:81:ac:10:88:3a:cb:97:
c5:43:2f:0d:d9:9d:53:fa:27:5f:0a:1e:24:5d:bb:
b0:a2:84:9e:8e:e8:1c:42:cf:9a:4c:db:b5:05:b4:
af:d1:be:1b:46:a7:ab:93:eb:42:ae:fc:80:2f:90:
27:11:a6:bc:0a:89:7f:3a:7b:8c:5a:b8:b8:d6:dc:
7c:de:ed:4c:a9:56:b3:89:c5:5c:15:82:e2:a3:46:
c4:ac:2b:1d:2e:f6:3f:e3:ed:e3:71:a4:82:be:ac:
7d:08:43:90:44:6b:ef:9e:98:16:30:3c:ac:9e:c1:
1f:0f:3c:8e:5d:8d:45:f3:9e:3e:2b:4c:8e:28:72:
da:05:2f:fe:49:cc:a3:c1:1d:31:47:87:92:b5:33:
43:80:00:7c:00:84:3a:78:9c:60:17:50:0a:4d:0a:
3e:75:16:04:b6:e4:62:55:4a:ea:97:06:af:d8:0b:
88:9a:39:0d:6b:b2:ee:8c:9a:b4:f0:04:cb:64:8d:
f9:83:d9:d3:83:b9:6f:ca:ac:81:4f:9f:8b:1b:94:
56:b2:76:0f:c0:9b:c6:e9:25:da:fb:a9:83:cf:d7:
42:91:e9:02:a8:2a:90:c4:3b:5e:d0:cb:26:78:b8:
b1:de:e9:08:29:6e:4c:f1:d8:2a:aa:7b:29:d9:e8:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:6B:76:15:0E:26:5E:30:B2:2E:71:01:1A:2F:F6:FC:B5:60:1C
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/vbdrdhUOJl4wsi5xARov9vy1YBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.191.0/24
86.107.47.0/24
94.177.10.0/23
94.177.58.0/24
94.177.96.0/23
Signature Algorithm: sha256WithRSAEncryption
ed:0d:af:8c:f3:56:8f:8c:f0:fc:06:22:19:29:08:0c:13:88:
00:02:a9:49:2a:af:73:94:9c:7b:cb:11:c8:0a:af:f7:3a:f4:
00:4a:bf:db:df:b5:9a:c4:b3:b3:23:28:11:5e:7a:20:ff:c6:
d0:04:a7:40:4c:ce:91:66:fa:cf:82:48:41:40:07:11:12:4e:
75:9b:28:2f:fc:17:42:0e:36:85:7e:e9:ca:c0:dd:9f:91:fc:
a4:a5:0a:19:db:e5:e4:ba:0e:00:b6:87:d4:be:bc:cc:27:14:
54:0f:da:bb:4b:f5:e7:2c:89:da:68:4e:89:01:73:cb:b5:67:
6c:a1:41:e8:a0:a4:e7:9b:df:35:b6:50:af:52:43:cb:78:6f:
3b:84:e3:b0:a3:9c:74:d4:5a:c4:68:e8:04:79:4c:20:a4:22:
52:66:b6:fc:81:b3:ca:5b:c2:aa:26:d0:29:63:db:f1:32:e7:
9f:2b:28:cc:6b:f3:c0:63:d5:8d:bd:0c:ea:f9:5e:6b:07:fe:
5d:4a:50:a6:56:bc:ef:47:03:ec:83:71:5a:b3:5b:9b:3a:11:
c3:91:04:f6:07:9a:52:a9:f4:aa:59:24:0c:ce:e5:7b:a0:87:
30:34:46:96:d9:50:30:e8:fd:37:a1:0a:b7:4f:ea:79:bb:24:
f9:f7:7c:a7
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZVHkTB/I+M4wqbuwLg7/oFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMjI3MTMyMDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGI3NmI3NjE1MGUyNjVlMzBiMjJlNzEwMTFhMmZmNmZjYjU2MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR/Dz7wG5YGsEIg6y5fFQy8N2Z1T
+idfCh4kXbuwooSejugcQs+aTNu1BbSv0b4bRqerk+tCrvyAL5AnEaa8Col/OnuM
Wri41tx83u1MqVazicVcFYLio0bErCsdLvY/4+3jcaSCvqx9CEOQRGvvnpgWMDys
nsEfDzyOXY1F854+K0yOKHLaBS/+ScyjwR0xR4eStTNDgAB8AIQ6eJxgF1AKTQo+
dRYEtuRiVUrqlwav2AuImjkNa7LujJq08ATLZI35g9nTg7lvyqyBT5+LG5RWsnYP
wJvG6SXa+6mDz9dCkekCqCqQxDte0MsmeLix3ukIKW5M8dgqqnsp2ehuRwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFL23a3YVDiZeMLIucQEaL/b8tWAcMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL3ZiZHJkaFVPSmw0d3NpNXhBUm92OXZ5MVlCdy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAuZr8D
BABWay8DBAFesQoDBABesToDBAFesWAwDQYJKoZIhvcNAQELBQADggEBAO0Nr4zz
Vo+M8PwGIhkpCAwTiAACqUkqr3OUnHvLEcgKr/c69ABKv9vftZrEs7MjKBFeeiD/
xtAEp0BMzpFm+s+CSEFABxESTnWbKC/8F0IONoV+6crA3Z+R/KSlChnb5eS6DgC2
h9S+vMwnFFQP2rtL9ecsidpoTokBc8u1Z2yhQeigpOeb3zW2UK9SQ8t4bzuE47Cj
nHTUWsRo6AR5TCCkIlJmtvyBs8pbwqom0Clj2/Ey558rKMxr88Bj1Y29DOr5XmsH
/l1KUKZWvO9HA+yDcVqzW5s6EcORBPYHmlKp9KpZJAzO5XughzA0RpbZUDDo/Teh
CrdP6nm7JPn3fKc=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:41 2025 by rpki-client on console.sobornost.net