Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ypSu4KgB-NH0JmPO8qOFwjnwOtU.roa
File: ypSu4KgB-NH0JmPO8qOFwjnwOtU.roa (raw, json)
Hash identifier: Du9OjE5u1dOetHZ5vhncY2kSH01Y9NCfNhHBVhsEmnU=
Subject key identifier: CA:94:AE:E0:A8:01:F8:D1:F4:26:63:CE:F2:A3:85:C2:39:F0:3A:D5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824993F3C65F9E4D216CDAD2945ADED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ypSu4KgB-NH0JmPO8qOFwjnwOtU.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.129.85.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:99:3f:3c:65:f9:e4:d2:16:cd:ad:29:45:ad:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca94aee0a801f8d1f42663cef2a385c239f03ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:61:00:da:80:15:16:f9:ca:ec:c7:c6:3b:
2f:b7:97:d0:34:b2:bb:ff:8b:f1:cd:9a:dd:93:df:
ad:92:9b:ff:5d:22:1c:d5:03:e1:d8:ae:7e:0a:99:
6e:8c:37:88:b5:9f:65:85:81:33:b1:85:9e:a0:e2:
88:5d:21:68:31:c2:f5:2f:9c:72:ea:68:28:5c:80:
3e:65:fe:fe:27:8c:69:e1:d6:2f:14:86:66:6d:8f:
f5:78:f2:69:61:d0:bf:20:9c:a4:f4:70:ed:7b:fc:
58:10:10:08:ab:05:d5:8c:50:9e:6e:ce:2b:b4:45:
7f:a0:34:06:07:33:cb:27:fb:dd:78:f5:d5:a4:8f:
51:4e:3e:60:1c:73:05:6c:8b:96:b6:a1:93:ff:43:
1b:1a:68:a5:4b:67:a7:e4:5d:22:a3:32:12:7f:c0:
25:61:0c:6e:31:67:6a:12:6e:c3:fe:c6:aa:63:a6:
01:1b:22:e5:b3:ee:fd:46:43:fc:ee:15:56:9c:0d:
8d:bd:5f:9c:0a:6f:9a:e1:4a:ec:5b:08:f1:5a:d0:
5b:eb:5d:da:04:5f:9a:a7:7d:62:6e:b4:06:58:52:
89:cc:88:c8:6b:c3:90:5d:47:4c:db:2c:d8:50:20:
3f:a2:7d:50:f7:dc:d8:06:35:80:05:34:a8:80:9b:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:94:AE:E0:A8:01:F8:D1:F4:26:63:CE:F2:A3:85:C2:39:F0:3A:D5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ypSu4KgB-NH0JmPO8qOFwjnwOtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.85.0/24
83.219.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:da:6c:8a:0d:50:f2:9c:3f:3c:c1:a4:98:6a:49:4c:31:f2:
1a:08:93:e2:54:cc:3f:54:73:22:a5:d4:f8:c5:0e:99:17:5c:
9d:52:14:36:5e:25:cd:42:55:cf:51:2d:69:22:b7:08:aa:41:
55:c5:62:c3:b7:5b:27:99:e0:5e:8d:b1:19:bd:92:b2:44:2c:
e4:06:47:7f:f6:45:7b:98:86:a6:17:52:c2:56:2e:60:0e:e8:
a4:6a:a1:30:c3:45:28:e0:6e:49:bf:0c:a3:17:09:1a:e8:c1:
3e:0a:e4:3d:96:a0:29:e6:06:f6:b6:35:3e:09:bb:9c:e3:d4:
24:4b:99:83:aa:69:ae:00:10:20:f3:35:be:b0:91:f9:e1:bb:
d6:40:79:4f:03:37:84:d3:94:a6:0d:17:52:89:e5:5d:50:de:
d3:61:b6:35:d7:56:bb:b3:13:5d:fe:d6:86:45:4c:0e:18:0f:
98:d9:7e:fd:8b:fd:94:70:48:e6:04:8d:e2:7a:bf:cf:36:1d:
65:c1:96:48:f0:6c:0a:13:bc:3f:ad:a3:aa:52:ca:74:09:bd:
67:e0:a6:9d:27:96:45:79:2f:ff:bb:10:78:43:2d:78:56:08:
71:02:a5:1b:0f:9f:62:d6:d2:27:e4:79:75:2a:05:ca:92:cb:
7a:70:2f:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJJk/PGX55NIWza0pRa3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTk0YWVlMGE4MDFmOGQxZjQyNjYzY2VmMmEzODVjMjM5ZjAzYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2RhANqAFRb5yuzHxjsvt5fQNLK7
/4vxzZrdk9+tkpv/XSIc1QPh2K5+CplujDeItZ9lhYEzsYWeoOKIXSFoMcL1L5xy
6mgoXIA+Zf7+J4xp4dYvFIZmbY/1ePJpYdC/IJyk9HDte/xYEBAIqwXVjFCebs4r
tEV/oDQGBzPLJ/vdePXVpI9RTj5gHHMFbIuWtqGT/0MbGmilS2en5F0iozISf8Al
YQxuMWdqEm7D/saqY6YBGyLls+79RkP87hVWnA2NvV+cCm+a4UrsWwjxWtBb613a
BF+ap31ibrQGWFKJzIjIa8OQXUdM2yzYUCA/on1Q99zYBjWABTSogJtb2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMqUruCoAfjR9CZjzvKjhcI58DrVMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveXBTdTRLZ0ItTkgwSm1QTzhxT0Z3am53T3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYFVAwQA
U9tgMA0GCSqGSIb3DQEBCwUAA4IBAQCM2myKDVDynD88waSYaklMMfIaCJPiVMw/
VHMipdT4xQ6ZF1ydUhQ2XiXNQlXPUS1pIrcIqkFVxWLDt1snmeBejbEZvZKyRCzk
Bkd/9kV7mIamF1LCVi5gDuikaqEww0Uo4G5JvwyjFwka6ME+CuQ9lqAp5gb2tjU+
Cbuc49QkS5mDqmmuABAg8zW+sJH54bvWQHlPAzeE05SmDRdSieVdUN7TYbY111a7
sxNd/taGRUwOGA+Y2X79i/2UcEjmBI3ier/PNh1lwZZI8GwKE7w/raOqUsp0Cb1n
4KadJ5ZFeS//uxB4Qy14VghxAqUbD59i1tIn5Hl1KgXKkst6cC+N
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:44 2025 by rpki-client