Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/vshP-FGofvSGs3jWKV09vmqZr2E.roa
File: vshP-FGofvSGs3jWKV09vmqZr2E.roa (raw, json)
Hash identifier: k+r5yPGE+Gx9rA1XI1GAPPctgpoD89APAAPb0op79oM=
Subject key identifier: BE:C8:4F:F8:51:A8:7E:F4:86:B3:78:D6:29:5D:3D:BE:6A:99:AF:61
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01956380CB12DE0F8FEEB09336FBC1D2B42D
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/vshP-FGofvSGs3jWKV09vmqZr2E.roa
Signing time: Tue 04 Mar 2025 23:32:19 +0000
ROA not before: Tue 04 Mar 2025 23:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.168.0/23 maxlen: 23
87.247.170.0/23 maxlen: 24
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:63:80:cb:12:de:0f:8f:ee:b0:93:36:fb:c1:d2:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Mar 4 23:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bec84ff851a87ef486b378d6295d3dbe6a99af61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:28:15:86:b3:0a:79:61:72:e7:45:4b:f2:
f6:af:3d:21:ad:ce:3e:fb:3f:53:91:ec:1a:68:c1:
64:f3:b0:a2:1d:bb:b3:b9:dc:4f:55:c1:0b:1d:80:
cc:43:5e:3d:90:27:84:21:41:2e:da:4b:28:db:f4:
42:49:8f:b0:65:64:30:db:ab:04:75:ba:de:e4:26:
9e:dc:c5:37:3b:89:db:59:8b:9d:cb:1c:34:7f:89:
ec:e0:27:a9:e8:47:cf:60:68:9d:53:b7:61:bf:1e:
60:6b:5d:2b:69:83:21:3b:cc:5e:9d:64:7f:59:38:
89:78:90:dd:0a:7d:36:60:eb:16:37:e7:b9:72:92:
a8:c6:d5:1b:c6:5a:20:5b:19:db:90:2b:eb:a4:09:
4a:63:14:63:d9:03:22:08:c2:ca:1d:3e:4b:41:52:
71:5f:25:64:32:53:2e:6b:72:a9:c9:1d:30:f5:6b:
f3:cb:9d:33:bd:f5:28:44:64:9a:74:24:5b:99:9a:
cb:7b:2f:a6:04:68:c1:a6:a6:3f:12:79:9d:98:3b:
db:f2:45:f2:4b:d3:3e:08:d0:5f:dd:2a:2a:96:71:
36:f4:3a:70:bc:25:9b:62:0b:45:be:41:36:ae:dc:
fd:42:e7:83:f9:cc:62:03:f0:18:70:bc:70:3a:ef:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:4F:F8:51:A8:7E:F4:86:B3:78:D6:29:5D:3D:BE:6A:99:AF:61
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/vshP-FGofvSGs3jWKV09vmqZr2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.168.0/22
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
19:f6:52:0b:f1:27:7d:02:f9:01:24:07:fe:5d:da:95:c3:ac:
3a:fd:bd:d7:80:c1:77:25:9c:1e:5c:ce:47:40:62:83:a7:98:
13:4f:06:40:91:82:05:02:25:19:9b:33:29:71:7a:d3:3b:78:
82:a0:46:a8:b1:bd:45:11:ad:14:5f:b6:eb:f4:b8:3f:df:53:
bd:f3:f5:88:8c:db:9b:16:a7:7f:82:7d:bb:a6:d5:b0:29:03:
33:88:dd:16:28:13:b1:35:3a:04:3d:f1:2f:25:64:27:b5:56:
1b:bd:00:22:cb:f1:a2:d9:34:79:d7:19:7e:92:a9:71:e5:1a:
03:e4:72:25:4f:88:66:0a:b2:d2:82:08:3e:81:f8:98:81:88:
a3:98:19:56:7d:bb:e6:99:de:1d:78:5f:7c:94:56:dc:17:10:
ef:8c:af:bf:ec:95:f8:fd:b9:47:d5:32:8f:c4:5a:af:76:d5:
64:49:33:35:47:cf:ad:22:17:13:35:bb:cb:52:fe:c3:3a:80:
90:bb:50:06:dc:d6:ab:c4:f4:5a:68:ac:51:2d:2f:70:6b:d6:
2b:a3:be:e9:29:b5:4e:59:b6:79:ea:df:aa:c1:34:48:3c:80:
1e:81:56:d2:eb:a5:b1:22:82:88:0f:f1:f6:1e:14:ac:af:01:
e0:b9:2e:68
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVjgMsS3g+P7rCTNvvB0rQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4
ZmFiM2UwHhcNMjUwMzA0MjMzMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWM4NGZmODUxYTg3ZWY0ODZiMzc4ZDYyOTVkM2RiZTZhOTlhZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYEoFYazCnlhcudFS/L2rz0hrc4+
+z9TkewaaMFk87CiHbuzudxPVcELHYDMQ149kCeEIUEu2kso2/RCSY+wZWQw26sE
dbre5Cae3MU3O4nbWYudyxw0f4ns4Cep6EfPYGidU7dhvx5ga10raYMhO8xenWR/
WTiJeJDdCn02YOsWN+e5cpKoxtUbxlogWxnbkCvrpAlKYxRj2QMiCMLKHT5LQVJx
XyVkMlMua3KpyR0w9Wvzy50zvfUoRGSadCRbmZrLey+mBGjBpqY/EnmdmDvb8kXy
S9M+CNBf3SoqlnE29DpwvCWbYgtFvkE2rtz9QueD+cxiA/AYcLxwOu8QywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL7IT/hRqH70hrN41ildPb5qma9hMB8GA1UdIwQY
MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt
MDQxMzEyMjQyZmYzLzEvdnNoUC1GR29mdlNHczNqV0tWMDl2bXFacjJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz
LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCV/eoAwQA
V/eyAwQDV/e4MA0GCSqGSIb3DQEBCwUAA4IBAQAZ9lIL8Sd9AvkBJAf+XdqVw6w6
/b3XgMF3JZweXM5HQGKDp5gTTwZAkYIFAiUZmzMpcXrTO3iCoEaosb1FEa0UX7br
9Lg/31O98/WIjNubFqd/gn27ptWwKQMziN0WKBOxNToEPfEvJWQntVYbvQAiy/Gi
2TR51xl+kqlx5RoD5HIlT4hmCrLSggg+gfiYgYijmBlWfbvmmd4deF98lFbcFxDv
jK+/7JX4/blH1TKPxFqvdtVkSTM1R8+tIhcTNbvLUv7DOoCQu1AG3NarxPRaaKxR
LS9wa9Yro77pKbVOWbZ56t+qwTRIPIAegVbS66WxIoKID/H2HhSsrwHguS5o
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net