Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa
File: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (raw, json)
Hash identifier: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=
Subject key identifier: 60:34:31:A8:B2:15:E1:E1:87:13:92:EB:D1:D5:5A:68:0A:2F:54:0C
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01941FFA421C90954AFDB76C6F3EDB707B15
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.78.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:1c:90:95:4a:fd:b7:6c:6f:3e:db:70:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=603431a8b215e1e1871392ebd1d55a680a2f540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:7d:ef:c1:59:9f:ba:01:1f:4f:fe:2b:41:
43:95:03:89:57:f2:79:25:bd:34:85:96:55:5e:62:
cc:df:d9:ba:e5:69:c4:e5:e3:23:b0:5c:ec:58:54:
29:fd:8e:40:f8:e1:72:5f:0a:91:5c:b0:44:d4:53:
13:6a:6f:cd:06:77:63:9f:be:20:72:3c:e0:89:8d:
c7:c0:ca:eb:da:1a:75:06:6c:c2:c9:9b:97:6c:5b:
25:3f:40:13:95:d0:83:f3:6f:9b:c5:c1:71:d2:11:
a1:b4:8d:c3:62:3f:46:f8:2a:57:97:1b:d8:8e:c0:
be:a0:25:75:5c:0e:bc:0b:1d:d0:c4:5d:91:69:87:
71:3a:e8:a0:2c:cc:11:cc:6a:69:d5:06:6d:6f:ff:
37:7e:79:be:3b:a1:a8:48:56:42:60:8f:67:b9:85:
48:67:24:19:b6:3d:6b:61:37:7d:c3:c6:0e:24:32:
6e:24:4f:77:2c:3f:43:d4:1c:9a:c4:b3:e0:55:75:
1f:96:52:1f:28:7e:56:4e:38:9e:0a:06:91:fc:2c:
30:f2:77:d6:44:a9:32:c3:ac:e6:5d:54:c3:34:7e:
e3:d6:46:b0:8b:fd:40:21:5e:87:89:ae:51:5a:69:
b9:ba:51:a8:c1:3b:8a:c6:42:ab:75:d8:5e:e5:28:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:31:A8:B2:15:E1:E1:87:13:92:EB:D1:D5:5A:68:0A:2F:54:0C
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:a1:a8:15:28:89:69:2b:5b:94:6c:43:bf:88:c8:62:71:c8:
b9:ea:62:40:3c:68:1f:e7:aa:50:bf:68:f5:1f:57:ab:4e:80:
4b:51:6d:a5:bb:7d:e2:33:65:d1:66:e0:ab:8a:45:ce:1a:23:
6f:20:c0:8d:48:42:25:b3:9c:32:16:5e:6d:35:c4:b3:97:5e:
06:9c:8a:5a:aa:bd:6e:c4:bb:62:92:0d:c9:62:25:15:5e:21:
92:17:47:a4:db:b0:e2:80:a1:f9:24:eb:5b:34:e3:e7:35:3f:
c6:f5:62:04:cd:df:0c:96:02:3c:c3:35:f3:bf:c2:46:8f:ce:
80:e6:f9:1b:d3:9c:fc:fa:5f:83:a6:88:b6:0c:49:54:86:40:
1d:a5:cc:18:5b:ec:92:49:17:52:d8:4f:34:50:73:2e:70:46:
e4:47:c2:92:77:25:ca:89:82:26:20:8e:fb:4d:e7:fb:39:fc:
8c:32:37:ca:a7:fe:34:33:2d:3c:ce:3f:26:93:ad:14:9b:9f:
f7:e2:fa:b3:82:69:ab:84:04:5a:2a:80:a3:81:f1:2c:74:95:
2a:55:9f:b7:84:b3:d9:be:21:24:e9:93:4e:11:b2:68:3f:60:
bf:f6:3a:76:6e:db:87:a9:96:3f:39:5c:6d:54:f3:72:a9:55:
90:28:91:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kIckJVK/bdsbz7bcHsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTNmOGMxM2JhODI5MGY2MGRhNjNiYTg5ZTkzNWIyNzU4
OTNhZGIwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDM0MzFhOGIyMTVlMWUxODcxMzkyZWJkMWQ1NWE2ODBhMmY1NDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs95978FZn7oBH0/+K0FDlQOJV/J5
Jb00hZZVXmLM39m65WnE5eMjsFzsWFQp/Y5A+OFyXwqRXLBE1FMTam/NBndjn74g
cjzgiY3HwMrr2hp1BmzCyZuXbFslP0ATldCD82+bxcFx0hGhtI3DYj9G+CpXlxvY
jsC+oCV1XA68Cx3QxF2RaYdxOuigLMwRzGpp1QZtb/83fnm+O6GoSFZCYI9nuYVI
ZyQZtj1rYTd9w8YOJDJuJE93LD9D1ByaxLPgVXUfllIfKH5WTjieCgaR/Cww8nfW
RKkyw6zmXVTDNH7j1kawi/1AIV6Hia5RWmm5ulGowTuKxkKrddhe5SgmzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGA0MaiyFeHhhxOS69HVWmgKL1QMMB8GA1UdIwQY
MBaAFHkT+ME7qCkPYNpjuonpNbJ1iTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTIt
ZmUxY2YzMDhhMDA4LzEvWURReHFMSVY0ZUdIRTVMcjBkVmFhQW92VkF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTItZmUxY2YzMDhhMDA4
LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU7IMA0G
CSqGSIb3DQEBCwUAA4IBAQC6oagVKIlpK1uUbEO/iMhicci56mJAPGgf56pQv2j1
H1erToBLUW2lu33iM2XRZuCrikXOGiNvIMCNSEIls5wyFl5tNcSzl14GnIpaqr1u
xLtikg3JYiUVXiGSF0ek27DigKH5JOtbNOPnNT/G9WIEzd8MlgI8wzXzv8JGj86A
5vkb05z8+l+Dpoi2DElUhkAdpcwYW+ySSRdS2E80UHMucEbkR8KSdyXKiYImII77
Tef7OfyMMjfKp/40My08zj8mk60Um5/34vqzgmmrhARaKoCjgfEsdJUqVZ+3hLPZ
viEk6ZNOEbJoP2C/9jp2btuHqZY/OVxtVPNyqVWQKJFo
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:25 2025 by rpki-client