Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa
File: ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa (raw, json)
Hash identifier: wnzsKo97TxUOdXYRLd6GXvYrsFQQtPcVycGoHAT6hoo=
Subject key identifier: CA:CB:88:2E:6F:06:4C:CF:6B:AF:4B:71:E1:55:B2:D6:E6:FF:33:76
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 01941F8C548B70F4D10AB17A21BE4F2EB55E
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 188.227.198.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:8b:70:f4:d1:0a:b1:7a:21:be:4f:2e:b5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cacb882e6f064ccf6baf4b71e155b2d6e6ff3376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:5f:7a:67:ea:d2:6e:db:4c:f9:a7:1b:00:
91:b3:8d:97:5e:69:6c:d5:0a:7a:44:79:36:25:37:
18:9c:8f:38:96:08:1a:48:a0:11:b4:d4:fc:10:c6:
db:3a:2d:95:d7:12:85:0d:38:6c:9d:ce:75:ab:50:
ca:69:29:32:89:66:90:14:fa:2b:9e:ad:5c:d4:c8:
e5:cd:fa:7c:68:1a:33:ed:61:67:4d:f5:f8:21:b6:
75:4a:0f:e5:0e:19:f1:62:0c:65:28:cc:c4:4b:13:
a4:8a:73:e2:61:41:0d:18:74:e4:91:0c:c1:36:ec:
7a:7f:42:1a:e3:3f:3c:af:11:0b:de:65:7f:34:b2:
21:56:52:17:c4:a9:a9:f2:66:b0:f2:c3:ba:d6:8d:
5c:5b:a4:93:84:70:24:3d:b9:7b:17:5f:5b:7b:fb:
81:67:ca:b4:fd:77:a0:58:2f:78:50:71:f2:aa:5f:
4d:9a:7f:c3:ed:35:e5:23:b9:bf:e9:95:43:0e:c8:
ef:72:70:dd:30:14:d1:76:5e:b9:d5:84:cb:1c:27:
56:c7:45:b9:24:6d:2e:c6:8b:a2:f0:8e:f2:14:63:
ba:5c:af:41:5e:c9:c2:2a:f7:57:53:b9:13:d2:5b:
ea:37:25:d6:17:25:35:b0:10:af:17:d9:25:26:8b:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:88:2E:6F:06:4C:CF:6B:AF:4B:71:E1:55:B2:D6:E6:FF:33:76
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/ysuILm8GTM9rr0tx4VWy1ub_M3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.198.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ed:7c:31:7b:a4:ab:92:ab:ee:7e:e4:94:64:95:1e:57:c9:
28:ec:45:9b:b6:c8:99:54:33:a1:ef:7b:53:89:a0:de:8a:f8:
53:d7:be:77:95:a3:90:31:fb:22:26:8c:f5:a0:0f:4c:f1:ab:
56:3e:b6:c2:58:b9:3c:ef:97:85:7b:19:ec:d1:71:8d:17:92:
e5:13:88:c2:54:2d:da:40:e1:53:b5:31:30:3d:29:a8:72:1e:
0c:5f:81:f8:d8:81:61:fe:dc:31:b3:45:9f:8b:cd:80:44:eb:
0c:e9:22:2a:56:4e:bd:e9:c1:03:80:3b:a3:7b:e8:0f:93:9e:
5d:52:81:d8:a2:59:0d:e3:a1:df:74:47:e5:63:17:fa:43:70:
8e:1c:9f:31:2b:94:7b:34:9c:e6:9e:f7:a7:3e:69:ca:97:33:
49:b3:f3:80:f2:a5:c1:b7:b2:d6:26:59:a5:5a:3d:b6:f0:21:
e1:57:ad:2d:13:f7:9f:20:30:89:5d:59:f8:c9:0c:00:f9:0b:
5f:db:05:d7:ef:53:60:99:6d:73:3d:35:56:9f:3f:1c:d1:9c:
f7:e7:2b:a2:0f:97:3c:70:08:ec:d0:a3:84:cd:31:8b:35:58:
1e:cb:8f:b4:02:05:90:5a:c7:d9:a5:e8:46:e9:53:9b:8b:06:
5a:8b:58:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjFSLcPTRCrF6Ib5PLrVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjUwMTAxMDE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWNiODgyZTZmMDY0Y2NmNmJhZjRiNzFlMTU1YjJkNmU2ZmYzMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGZfemfq0m7bTPmnGwCRs42XXmls
1Qp6RHk2JTcYnI84lggaSKARtNT8EMbbOi2V1xKFDThsnc51q1DKaSkyiWaQFPor
nq1c1Mjlzfp8aBoz7WFnTfX4IbZ1Sg/lDhnxYgxlKMzESxOkinPiYUENGHTkkQzB
Nux6f0Ia4z88rxEL3mV/NLIhVlIXxKmp8maw8sO61o1cW6SThHAkPbl7F19be/uB
Z8q0/XegWC94UHHyql9Nmn/D7TXlI7m/6ZVDDsjvcnDdMBTRdl651YTLHCdWx0W5
JG0uxoui8I7yFGO6XK9BXsnCKvdXU7kT0lvqNyXWFyU1sBCvF9klJot15wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrLiC5vBkzPa69LceFVstbm/zN2MB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEveXN1SUxtOEdUTTlycjB0eDRWV3kxdWJfTTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvOPGMA0G
CSqGSIb3DQEBCwUAA4IBAQB17Xwxe6SrkqvufuSUZJUeV8ko7EWbtsiZVDOh73tT
iaDeivhT1753laOQMfsiJoz1oA9M8atWPrbCWLk875eFexns0XGNF5LlE4jCVC3a
QOFTtTEwPSmoch4MX4H42IFh/twxs0Wfi82AROsM6SIqVk696cEDgDuje+gPk55d
UoHYolkN46HfdEflYxf6Q3COHJ8xK5R7NJzmnvenPmnKlzNJs/OA8qXBt7LWJlml
Wj228CHhV60tE/efIDCJXVn4yQwA+Qtf2wXX71NgmW1zPTVWnz8c0Zz35yuiD5c8
cAjs0KOEzTGLNVgey4+0AgWQWsfZpehG6VObiwZai1iM
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:39 2025 by rpki-client