Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yZYV4NpMDwVaIE6j-8mJVCDvqQM.roa
File: yZYV4NpMDwVaIE6j-8mJVCDvqQM.roa (raw, json)
Hash identifier: 08OwRDKveztv0Q4d47GyJtkb72she6cqILOHCcvS4PE=
Subject key identifier: C9:96:15:E0:DA:4C:0F:05:5A:20:4E:A3:FB:C9:89:54:20:EF:A9:03
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C045404
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yZYV4NpMDwVaIE6j-8mJVCDvqQM.roa
Signing time: Tue 01 Feb 2022 07:31:34 +0000
ROA not before: Tue 01 Feb 2022 07:31:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 195.180.136.0/24 maxlen: 24
195.180.138.0/24 maxlen: 24
194.233.147.0/24 maxlen: 24
194.163.91.0/24 maxlen: 24
195.180.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201610244 (0xc045404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Feb 1 07:31:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c99615e0da4c0f055a204ea3fbc9895420efa903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:c0:19:dc:fd:b8:32:2b:26:2a:9e:84:b4:
d2:ad:2e:e2:ea:8b:aa:cd:0d:c2:60:32:b3:50:ac:
58:51:af:84:ab:93:cb:62:8a:02:5c:3a:2f:a1:98:
c2:df:38:ac:0a:bd:ba:35:11:97:61:12:03:3a:fe:
51:ad:60:04:9a:b3:70:aa:51:77:15:88:87:1c:28:
18:e3:cd:08:b1:ad:07:da:8d:1e:4b:44:64:36:e1:
bf:59:0e:9e:0d:67:7e:da:5f:03:f5:4b:cd:60:82:
d3:b2:e9:b9:26:8e:3b:2e:1d:09:24:4f:2e:57:3a:
be:d1:a6:05:e1:ac:f8:68:c8:60:d4:ab:71:83:85:
2a:c4:3b:f3:c5:38:2b:b2:62:58:b7:16:76:b8:92:
93:46:03:6a:0c:2c:6f:e9:2f:ce:ac:fc:6d:e7:65:
5d:8e:e7:8d:ee:df:4d:d6:e5:0b:cd:2c:8e:1c:78:
19:2f:0e:f4:a1:08:35:67:f9:26:47:23:24:40:3f:
eb:cb:17:25:57:68:3a:3a:10:d5:55:3b:6e:44:14:
9f:4f:e1:1c:73:ac:2a:e2:e1:bc:81:6d:ec:ca:f1:
4e:10:45:7c:6f:4d:48:26:49:b0:cd:56:fe:70:b8:
82:57:6f:9f:b0:39:31:a5:73:8a:52:cf:f9:9e:1a:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:15:E0:DA:4C:0F:05:5A:20:4E:A3:FB:C9:89:54:20:EF:A9:03
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/yZYV4NpMDwVaIE6j-8mJVCDvqQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.91.0/24
194.233.147.0/24
195.180.136.0/24
195.180.138.0/24
195.180.156.0/24
Signature Algorithm: sha256WithRSAEncryption
07:40:1a:94:6f:8c:ab:a3:35:a3:ba:68:5b:83:ee:46:a9:40:
27:63:12:10:8e:0d:4b:d8:82:bf:b0:5b:ef:ad:ff:c8:c9:49:
7c:a4:98:b9:ee:fd:54:21:b9:6b:cf:4c:40:51:24:e6:4d:c4:
ae:25:d8:18:31:52:44:8e:e4:3e:09:31:5c:02:2b:6b:82:27:
75:e4:e4:38:62:34:5a:91:7e:48:3d:67:30:d8:8d:87:a3:96:
69:8e:10:e9:e6:9f:8f:2a:ac:73:d4:ae:67:71:78:12:4b:ad:
eb:be:cb:c9:97:90:42:92:55:a3:e4:f3:b0:b7:97:a9:a0:99:
da:04:1c:4d:8e:49:9f:01:02:bb:45:f5:ea:5f:c6:00:f7:7c:
ce:22:a0:bf:52:ef:13:14:cb:56:30:02:c5:3f:48:59:7f:a0:
1d:cb:54:a8:f5:dd:6d:81:80:a1:60:f3:3f:53:a0:77:fe:c2:
46:49:d9:41:c2:54:f2:c3:f0:27:fc:60:70:e2:bc:b7:46:fe:
1c:9a:5e:c5:ee:b7:32:49:94:66:22:19:dc:a2:30:27:4d:a0:
f4:71:8b:e0:88:44:26:b2:ae:ba:63:64:8a:d0:5a:cd:f7:ed:
54:51:18:58:57:28:46:ef:f3:7e:8f:75:4e:6b:f0:39:9e:47:
97:11:85:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEDARUBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDIw
MTA3MzEzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzk5NjE1ZTBkYTRj
MGYwNTVhMjA0ZWEzZmJjOTg5NTQyMGVmYTkwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOI2wBnc/bgyKyYqnoS00q0u4uqLqs0NwmAys1CsWFGvhKuT
y2KKAlw6L6GYwt84rAq9ujURl2ESAzr+Ua1gBJqzcKpRdxWIhxwoGOPNCLGtB9qN
HktEZDbhv1kOng1nftpfA/VLzWCC07LpuSaOOy4dCSRPLlc6vtGmBeGs+GjIYNSr
cYOFKsQ788U4K7JiWLcWdriSk0YDagwsb+kvzqz8bedlXY7nje7fTdblC80sjhx4
GS8O9KEINWf5JkcjJEA/68sXJVdoOjoQ1VU7bkQUn0/hHHOsKuLhvIFt7MrxThBF
fG9NSCZJsM1W/nC4gldvn7A5MaVzilLP+Z4ara8CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTJlhXg2kwPBVogTqP7yYlUIO+pAzAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L3laWVY0TnBNRHdWYUlFNmotOG1KVkNEdnFRTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAMKjWwMEAMLpkwMEAMO0iAMEAMO0
igMEAMO0nDANBgkqhkiG9w0BAQsFAAOCAQEAB0AalG+Mq6M1o7poW4PuRqlAJ2MS
EI4NS9iCv7Bb763/yMlJfKSYue79VCG5a89MQFEk5k3EriXYGDFSRI7kPgkxXAIr
a4IndeTkOGI0WpF+SD1nMNiNh6OWaY4Q6eafjyqsc9SuZ3F4Ekut677LyZeQQpJV
o+TzsLeXqaCZ2gQcTY5JnwECu0X16l/GAPd8ziKgv1LvExTLVjACxT9IWX+gHctU
qPXdbYGAoWDzP1Ogd/7CRknZQcJU8sPwJ/xgcOK8t0b+HJpexe63MkmUZiIZ3KIw
J02g9HGL4IhEJrKuumNkitBazfftVFEYWFcoRu/zfo91TmvwOZ5HlxGFGg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:24 2025 by rpki-client