Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/VZ-kHDApXcDT9_2kTleGC7kcJA4.roa
File: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (raw, json)
Hash identifier: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=
Subject key identifier: 55:9F:A4:1C:30:29:5D:C0:D3:F7:FD:A4:4E:57:86:0B:B9:1C:24:0E
Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial: 0194236A2CDBBC8DF6237503067B0F0291F3
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/VZ-kHDApXcDT9_2kTleGC7kcJA4.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197883
IP address blocks: 195.24.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2c:db:bc:8d:f6:23:75:03:06:7b:0f:02:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=559fa41c30295dc0d3f7fda44e57860bb91c240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:e7:dd:c5:8b:b6:4f:0d:38:a0:58:12:6c:
ef:fe:70:e4:ba:81:af:5f:6f:1a:53:98:5a:be:74:
87:4a:ef:b5:a0:19:1c:f0:12:91:a0:68:1c:83:16:
d2:96:64:57:ba:91:9f:9d:75:05:28:57:9c:4b:74:
be:94:17:88:41:c2:de:d2:90:a6:58:de:66:c9:45:
b3:3f:ab:ec:04:43:62:02:55:de:14:0b:23:14:69:
e5:54:e4:09:be:0d:e8:cf:fe:e1:2c:ae:d1:b5:7d:
59:e7:cc:98:b5:14:d4:49:47:ae:25:d7:9e:d6:ee:
45:19:a9:da:51:4e:d1:30:14:9c:09:b8:d8:07:b5:
51:af:80:f1:8a:2f:40:37:54:3b:ed:92:38:da:b0:
f3:64:dc:ee:71:2b:51:05:da:80:d4:2f:44:e0:21:
bd:22:70:1e:e2:0e:fc:21:3d:b5:52:13:ad:f1:24:
d1:02:2f:4e:34:90:5c:d9:1f:d9:7c:9d:bf:ad:2b:
9f:00:8e:93:8b:aa:24:40:64:9a:53:8b:c2:4b:f6:
29:42:c8:3b:9a:ee:ca:13:da:0b:16:56:79:56:a5:
94:29:02:12:1d:fa:63:04:4e:3c:11:88:bb:5f:83:
6f:de:5e:25:7c:19:08:2f:fc:60:0e:01:7c:ca:74:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:A4:1C:30:29:5D:C0:D3:F7:FD:A4:4E:57:86:0B:B9:1C:24:0E
X509v3 Authority Key Identifier:
keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/VZ-kHDApXcDT9_2kTleGC7kcJA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.244.0/24
Signature Algorithm: sha256WithRSAEncryption
32:90:20:22:cd:30:97:97:3c:b9:0d:d6:e9:c1:30:bf:8f:de:
43:da:a4:c4:0d:35:ca:24:21:8e:19:20:eb:73:df:02:72:e6:
9f:1e:19:c3:b0:ec:8a:ff:62:9d:1c:22:16:26:f6:2b:65:25:
0b:07:4f:3c:62:26:8d:c1:b0:92:ba:16:f6:45:28:85:c0:2d:
fc:7d:b6:f9:11:94:55:ea:8e:e2:12:48:a4:e1:7f:e2:4e:3c:
30:7a:f7:f3:dd:70:2e:28:78:56:79:1b:cf:13:99:77:9c:47:
52:f7:bb:4e:50:f2:11:9c:14:5d:ca:d7:eb:ec:02:d0:d6:dc:
d3:8d:5d:27:b8:26:f8:5b:80:8e:b8:20:07:fe:a8:d3:db:0b:
57:f5:20:43:6a:66:09:de:58:28:f6:bb:57:e8:c4:d2:11:31:
42:1b:69:fc:fe:69:ee:d7:32:68:54:9f:0f:b1:65:eb:f3:ef:
75:3a:30:f3:8b:57:1a:1e:63:fd:5a:c2:cf:5f:b4:06:34:fc:
3e:61:e9:b9:44:45:54:c9:a6:fe:24:ac:b0:53:dc:b1:50:32:
38:0e:e1:39:79:f2:1d:0b:a8:a2:31:49:81:85:6b:55:47:93:
44:4a:48:81:3b:9d:09:5f:9f:c1:63:d6:28:b0:5f:b7:96:33:
71:db:a8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaizbvI32I3UDBnsPApHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz
OTI3MWIwHhcNMjUwMTAxMTk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTlmYTQxYzMwMjk1ZGMwZDNmN2ZkYTQ0ZTU3ODYwYmI5MWMyNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8/n3cWLtk8NOKBYEmzv/nDkuoGv
X28aU5havnSHSu+1oBkc8BKRoGgcgxbSlmRXupGfnXUFKFecS3S+lBeIQcLe0pCm
WN5myUWzP6vsBENiAlXeFAsjFGnlVOQJvg3oz/7hLK7RtX1Z58yYtRTUSUeuJdee
1u5FGanaUU7RMBScCbjYB7VRr4Dxii9AN1Q77ZI42rDzZNzucStRBdqA1C9E4CG9
InAe4g78IT21UhOt8STRAi9ONJBc2R/ZfJ2/rSufAI6Ti6okQGSaU4vCS/YpQsg7
mu7KE9oLFlZ5VqWUKQISHfpjBE48EYi7X4Nv3l4lfBkIL/xgDgF8ynSxcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFWfpBwwKV3A0/f9pE5Xhgu5HCQOMB8GA1UdIwQY
MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt
YzU5ZWZkMzQ4MTU4LzEvVlota0hEQXBYY0RUOV8ya1RsZUdDN2tjSkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4
LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxj0MA0G
CSqGSIb3DQEBCwUAA4IBAQAykCAizTCXlzy5DdbpwTC/j95D2qTEDTXKJCGOGSDr
c98CcuafHhnDsOyK/2KdHCIWJvYrZSULB088YiaNwbCSuhb2RSiFwC38fbb5EZRV
6o7iEkik4X/iTjwwevfz3XAuKHhWeRvPE5l3nEdS97tOUPIRnBRdytfr7ALQ1tzT
jV0nuCb4W4COuCAH/qjT2wtX9SBDamYJ3lgo9rtX6MTSETFCG2n8/mnu1zJoVJ8P
sWXr8+91OjDzi1caHmP9WsLPX7QGNPw+Yem5REVUyab+JKywU9yxUDI4DuE5efId
C6iiMUmBhWtVR5NESkiBO50JX5/BY9YosF+3ljNx26ih
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net