Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/vAhoECj76DxTiQ3yLLf6mu-_BqI.roa
File: vAhoECj76DxTiQ3yLLf6mu-_BqI.roa (raw, json)
Hash identifier: nCQBvqDRV7DEKusg0hBSa9SwoVzc4dU3/3Bre1jok34=
Subject key identifier: BC:08:68:10:28:FB:E8:3C:53:89:0D:F2:2C:B7:FA:9A:EF:BF:06:A2
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 019423697F22C309CDB4C83EA901E5BEDA5F
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/vAhoECj76DxTiQ3yLLf6mu-_BqI.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206713
IP address blocks: 185.194.166.0/24 maxlen: 24
185.194.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7f:22:c3:09:cd:b4:c8:3e:a9:01:e5:be:da:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc08681028fbe83c53890df22cb7fa9aefbf06a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:dd:f4:5e:f4:d3:4d:50:7c:5b:a8:c1:3b:
a0:b9:f3:24:b7:04:9e:a5:9b:57:a4:61:9c:c1:82:
67:d0:bc:81:14:c0:a0:e7:96:8a:cf:c2:e9:b9:04:
a2:52:85:55:ad:a1:86:e4:25:4e:f4:b7:ba:4c:d9:
67:5b:42:96:46:c0:bd:27:d4:e9:15:e6:f4:69:24:
73:b4:06:e9:ca:d7:8e:83:42:08:96:82:c1:cd:7f:
d9:d7:c9:84:a9:c0:cc:29:36:5b:d9:85:58:13:08:
53:4e:54:d2:1a:91:3c:2f:fd:16:1e:31:8d:1a:9d:
b7:f2:19:62:13:7f:f9:5e:ec:bf:7b:28:95:e9:68:
83:41:d5:d4:15:72:bf:e8:e8:06:85:b6:dc:0f:51:
71:f8:82:d6:6b:33:ae:db:8f:6b:ee:06:66:50:f6:
df:7d:df:b0:46:6c:a9:25:60:97:62:fa:0e:30:bd:
ea:d4:60:9b:97:67:e8:64:22:5c:84:da:43:82:40:
a8:df:57:72:b7:87:f4:21:47:a8:fc:9e:e6:20:7c:
a3:8f:6b:94:9d:de:bf:fd:27:98:19:cb:11:cc:44:
ae:d8:6e:14:75:f4:28:c4:7f:d7:11:0b:e2:9f:17:
65:f3:87:78:46:03:85:84:72:f5:cb:62:ed:1c:80:
7e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:68:10:28:FB:E8:3C:53:89:0D:F2:2C:B7:FA:9A:EF:BF:06:A2
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/vAhoECj76DxTiQ3yLLf6mu-_BqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.166.0/23
Signature Algorithm: sha256WithRSAEncryption
46:56:de:61:7f:63:4e:5a:79:e8:fd:65:46:40:f7:8d:36:1d:
53:61:10:68:13:9f:b1:ce:c8:05:47:52:03:3c:17:28:93:54:
67:cb:e0:36:84:06:0c:fd:7b:62:71:55:16:95:f1:a4:bb:a3:
02:2e:c4:bc:c0:b2:32:97:88:3c:df:be:87:a5:cf:a8:86:3f:
e3:70:66:ef:49:c3:04:07:ad:6f:57:c2:1d:79:6e:a2:f3:e9:
2b:d0:7e:82:cd:b3:04:f8:d7:94:13:3e:66:b4:a1:58:22:4d:
94:50:3b:a1:2d:3b:38:eb:3d:6d:aa:44:b4:8f:4a:09:c7:46:
61:94:ae:7e:9d:7d:1d:4a:ed:65:07:20:b5:09:b7:28:72:37:
33:10:90:29:5c:d9:cf:48:db:dc:0d:56:a7:6a:b1:bf:72:44:
c4:da:6b:51:b6:2c:50:99:88:49:f9:4a:f4:2b:5e:1a:5b:00:
5f:e9:62:e9:68:83:38:61:b2:f8:59:d0:00:66:d8:47:e7:77:
bc:54:b1:c1:ec:b1:87:92:d6:dd:ec:1f:fa:04:b4:af:4e:f3:
cb:f1:93:bc:11:c8:37:f5:e7:e9:86:9a:e9:d0:6e:99:9d:96:
42:d0:44:3c:a3:15:9f:99:25:eb:0c:60:d7:c6:9d:8d:98:95:
7a:df:97:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaX8iwwnNtMg+qQHlvtpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZjM5ZTZlYjMxMzFlY2YzY2RkY2QwYzllMzc4YzM1MmRh
NDFmYzIwHhcNMjUwMTAxMTk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzA4NjgxMDI4ZmJlODNjNTM4OTBkZjIyY2I3ZmE5YWVmYmYwNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/d9F70001QfFuowTugufMktwSe
pZtXpGGcwYJn0LyBFMCg55aKz8LpuQSiUoVVraGG5CVO9Le6TNlnW0KWRsC9J9Tp
Feb0aSRztAbpyteOg0IIloLBzX/Z18mEqcDMKTZb2YVYEwhTTlTSGpE8L/0WHjGN
Gp238hliE3/5Xuy/eyiV6WiDQdXUFXK/6OgGhbbcD1Fx+ILWazOu249r7gZmUPbf
fd+wRmypJWCXYvoOML3q1GCbl2foZCJchNpDgkCo31dyt4f0IUeo/J7mIHyjj2uU
nd6//SeYGcsRzESu2G4UdfQoxH/XEQvinxdl84d4RgOFhHL1y2LtHIB+fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwIaBAo++g8U4kN8iy3+prvvwaiMB8GA1UdIwQY
MBaAFHvznm6zEx7PPN3NDJ43jDUtpB/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYt
Yzk2N2M5ZGI1NzUyLzEvdkFob0VDajc2RHhUaVEzeUxMZjZtdS1fQnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hMjE0YTUtNDQ0OS00NGFmLTg3ZmYtYzk2N2M5ZGI1NzUy
LzEvZV9PZWJyTVRIczg4M2MwTW5qZU1OUzJrSDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBucKmMA0G
CSqGSIb3DQEBCwUAA4IBAQBGVt5hf2NOWnno/WVGQPeNNh1TYRBoE5+xzsgFR1ID
PBcok1Rny+A2hAYM/XticVUWlfGku6MCLsS8wLIyl4g8376Hpc+ohj/jcGbvScME
B61vV8IdeW6i8+kr0H6CzbME+NeUEz5mtKFYIk2UUDuhLTs46z1tqkS0j0oJx0Zh
lK5+nX0dSu1lByC1CbcocjczEJApXNnPSNvcDVanarG/ckTE2mtRtixQmYhJ+Ur0
K14aWwBf6WLpaIM4YbL4WdAAZthH53e8VLHB7LGHktbd7B/6BLSvTvPL8ZO8Ecg3
9efphprp0G6ZnZZC0EQ8oxWfmSXrDGDXxp2NmJV635cQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net