Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/VeKdZPPfUZ_doJvy-y4HfVYTGP8.roa
File: VeKdZPPfUZ_doJvy-y4HfVYTGP8.roa (raw, json)
Hash identifier: 27rCUzFQW+KlwSO4BrHHOG9EyxuZYp6NR4Tf+UaLIj4=
Subject key identifier: 55:E2:9D:64:F3:DF:51:9F:DD:A0:9B:F2:FB:2E:07:7D:56:13:18:FF
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0193CE38B335985CF9BE6723E18134E265D2
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/VeKdZPPfUZ_doJvy-y4HfVYTGP8.roa
Signing time: Mon 16 Dec 2024 06:47:22 +0000
ROA not before: Mon 16 Dec 2024 06:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24812
IP address blocks: 91.225.4.0/22 maxlen: 22
176.105.192.0/22 maxlen: 22
176.105.193.0/24 maxlen: 24
176.105.194.0/23 maxlen: 23
176.105.194.0/24 maxlen: 24
176.105.196.0/24 maxlen: 24
176.105.197.0/24 maxlen: 24
176.105.198.0/24 maxlen: 24
176.105.199.0/24 maxlen: 24
176.105.200.0/22 maxlen: 22
176.105.200.0/23 maxlen: 23
176.105.204.0/23 maxlen: 23
176.105.204.0/24 maxlen: 24
176.105.206.0/23 maxlen: 23
176.105.208.0/22 maxlen: 22
176.105.208.0/24 maxlen: 24
176.105.209.0/24 maxlen: 24
176.105.210.0/23 maxlen: 23
176.105.212.0/22 maxlen: 22
176.105.212.0/23 maxlen: 23
176.105.216.0/23 maxlen: 23
176.105.218.0/23 maxlen: 23
176.105.218.0/24 maxlen: 24
176.105.220.0/24 maxlen: 24
176.105.221.0/24 maxlen: 24
176.105.222.0/24 maxlen: 24
176.105.223.0/24 maxlen: 24
178.159.208.0/20 maxlen: 20
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:38:b3:35:98:5c:f9:be:67:23:e1:81:34:e2:65:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Dec 16 06:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e29d64f3df519fdda09bf2fb2e077d561318ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:64:e8:a7:51:08:2d:63:91:bb:05:8d:c5:
f3:f5:a2:53:e5:67:21:32:a9:60:4b:74:67:f6:f8:
37:d2:ca:6f:73:b8:ae:48:6d:01:4f:00:57:f2:e0:
37:1c:83:ee:bf:75:68:6b:72:43:42:4b:d7:8c:67:
ca:56:ea:14:8f:05:c9:06:4e:fd:20:f5:74:a3:cf:
57:da:78:2b:e1:11:9f:30:f5:f1:2a:87:4e:ab:c3:
a2:27:e9:8a:f0:e9:fa:e5:37:55:31:95:76:2f:b1:
44:a5:31:a3:8b:a3:91:09:e2:28:97:5b:8f:85:54:
3a:4e:f3:7e:ee:5a:61:2f:aa:84:88:af:1f:ad:8e:
35:f6:04:f4:e7:7c:f0:bd:fe:9d:8d:4d:26:8e:cf:
90:16:0d:9b:16:f2:30:f4:04:12:41:53:f6:c0:f1:
b7:b2:b4:bc:ac:7e:8e:1e:25:d2:6c:8a:64:7c:ce:
f4:87:2e:fa:44:da:05:7d:69:f4:89:e8:f6:e6:77:
2d:c2:50:8d:8f:40:53:10:87:93:25:1c:98:87:5c:
a4:23:86:fe:ee:2a:5d:77:95:e9:11:de:be:4d:f6:
3c:27:f1:88:26:e6:55:96:7f:f5:21:b1:99:03:3a:
ad:74:ee:28:a9:28:83:d2:8c:49:1d:54:c2:3f:01:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:9D:64:F3:DF:51:9F:DD:A0:9B:F2:FB:2E:07:7D:56:13:18:FF
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/VeKdZPPfUZ_doJvy-y4HfVYTGP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.4.0/22
176.105.192.0/19
178.159.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:ba:24:3f:a8:0c:52:50:b9:71:53:2b:d1:9e:a8:76:10:51:
60:69:92:8b:4f:d2:2c:93:21:f9:db:d3:a4:15:f8:0a:be:3c:
35:e6:60:ca:3d:9d:69:03:09:e0:c0:ee:fd:96:3e:91:ec:ce:
d4:96:45:05:8a:c1:31:9f:d1:a4:df:50:d5:83:af:0a:66:49:
90:c8:8a:79:01:cb:e5:4a:d1:a2:17:eb:90:7c:73:bc:a8:ee:
a4:ce:28:4e:79:77:b1:aa:f4:d6:b1:16:a7:48:0d:25:22:a1:
6b:a7:e1:a5:da:68:e9:02:6c:39:6c:78:0a:b6:41:f2:6a:16:
bf:f3:b9:01:fc:7d:92:11:82:31:2f:08:52:d9:60:e6:8e:47:
be:e4:ba:bc:c2:ec:f8:77:54:38:63:97:8c:96:9b:0c:77:b2:
90:2d:bc:d1:4e:71:f3:c9:1a:2d:46:67:94:2a:29:cf:b2:b7:
1d:59:a4:6a:e0:77:3f:e7:c7:40:49:31:55:98:a6:b6:eb:07:
5c:2c:dc:ce:0c:2e:4b:9e:32:ce:44:5c:9a:c7:81:ee:6e:01:
59:ac:d7:f2:4e:76:23:1d:1e:4e:d3:39:5f:7d:93:4f:8a:9b:
9d:21:51:d0:e4:74:41:7c:56:e4:8d:dd:38:b2:6b:cd:d6:2d:
df:30:02:e4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZPOOLM1mFz5vmcj4YE04mXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1
ZWVhNzMwHhcNMjQxMjE2MDY0NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWUyOWQ2NGYzZGY1MTlmZGRhMDliZjJmYjJlMDc3ZDU2MTMxOGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhdk6KdRCC1jkbsFjcXz9aJT5Wch
MqlgS3Rn9vg30spvc7iuSG0BTwBX8uA3HIPuv3Voa3JDQkvXjGfKVuoUjwXJBk79
IPV0o89X2ngr4RGfMPXxKodOq8OiJ+mK8On65TdVMZV2L7FEpTGji6ORCeIol1uP
hVQ6TvN+7lphL6qEiK8frY419gT053zwvf6djU0mjs+QFg2bFvIw9AQSQVP2wPG3
srS8rH6OHiXSbIpkfM70hy76RNoFfWn0iej25nctwlCNj0BTEIeTJRyYh1ykI4b+
7ipdd5XpEd6+TfY8J/GIJuZVln/1IbGZAzqtdO4oqSiD0oxJHVTCPwHSOQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFXinWTz31Gf3aCb8vsuB31WExj/MB8GA1UdIwQY
MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvVmVLZFpQUGZVWl9kb0p2eS15NEhmVllUR1A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW+EEAwQF
sGnAAwQEsp/QMA0GCSqGSIb3DQEBCwUAA4IBAQChuiQ/qAxSULlxUyvRnqh2EFFg
aZKLT9IskyH529OkFfgKvjw15mDKPZ1pAwngwO79lj6R7M7UlkUFisExn9Gk31DV
g68KZkmQyIp5AcvlStGiF+uQfHO8qO6kzihOeXexqvTWsRanSA0lIqFrp+Gl2mjp
Amw5bHgKtkHyaha/87kB/H2SEYIxLwhS2WDmjke+5Lq8wuz4d1Q4Y5eMlpsMd7KQ
LbzRTnHzyRotRmeUKinPsrcdWaRq4Hc/58dASTFVmKa26wdcLNzODC5LnjLORFya
x4HubgFZrNfyTnYjHR5O0zlffZNPipudIVHQ5HRBfFbkjd04smvN1i3fMALk
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:26 2024 by rpki-client on console.sobornost.net