Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/DyHzgy1quTVqTmEgc-QZaKyb5KA.roa
File: DyHzgy1quTVqTmEgc-QZaKyb5KA.roa (raw, json)
Hash identifier: b5NGsXmHVjczLfeqJjsUPEjx7Hs+Dknti5Mx9ZWtZ6g=
Subject key identifier: 0F:21:F3:83:2D:6A:B9:35:6A:4E:61:20:73:E4:19:68:AC:9B:E4:A0
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBD1EADDF50C1C6A9476BA176AD7FF
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/DyHzgy1quTVqTmEgc-QZaKyb5KA.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215073
IP address blocks: 85.235.73.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d1:ea:dd:f5:0c:1c:6a:94:76:ba:17:6a:d7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f21f3832d6ab9356a4e612073e41968ac9be4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:b0:c1:f2:89:67:43:84:f1:76:79:95:1f:
e7:d8:52:f1:c4:f5:d9:2f:aa:2a:3a:11:c7:9d:30:
b7:b8:92:f5:88:d4:63:2d:ef:4e:8a:b6:ba:38:6a:
ca:a0:22:29:9f:c0:af:52:1d:c4:20:20:86:36:35:
18:db:e3:8c:85:84:f0:11:ce:80:2c:df:12:a4:1f:
9f:0b:01:59:9b:c0:21:82:13:ca:47:47:c6:ab:fc:
1d:74:c7:d9:13:cd:22:66:6e:af:59:56:e5:b3:c3:
87:d2:e7:48:d9:92:57:81:2d:ed:67:71:b2:0b:38:
81:a6:e6:94:1e:fc:8e:2a:33:da:fd:da:07:78:6c:
df:e8:dd:a8:62:6c:d1:25:d4:58:5d:a9:ac:0b:48:
fe:7b:d4:a4:c1:66:b5:19:b5:b5:29:5b:54:da:d4:
f1:79:c2:10:0b:77:f5:30:e5:66:e4:7b:2f:ce:d5:
55:a4:cc:eb:79:9c:7a:fe:ad:b6:20:ee:a8:05:f9:
d6:b5:fd:7c:56:57:0d:db:98:10:b2:72:3d:c9:a0:
52:36:a1:41:65:75:63:0d:a6:f1:aa:f9:ef:b5:43:
51:ed:63:f6:f5:73:9b:56:d2:6c:19:f0:4b:7a:49:
1c:20:88:bb:7b:66:fc:b8:ff:9b:c1:9b:df:a3:76:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:F3:83:2D:6A:B9:35:6A:4E:61:20:73:E4:19:68:AC:9B:E4:A0
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/DyHzgy1quTVqTmEgc-QZaKyb5KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
193.111.78.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9a:8e:ec:b9:80:1e:17:15:69:4c:6c:d0:af:2f:44:8a:f6:
1d:1f:97:57:64:87:da:da:ad:32:8a:bd:49:cd:90:bb:00:2d:
d3:eb:1f:6c:3d:a0:50:cc:d6:2d:36:0d:90:67:b1:23:38:32:
a5:3d:8b:c1:66:47:60:fa:bd:ea:bc:f9:13:ed:09:82:52:7e:
03:59:b5:56:63:24:2f:1f:68:4f:6a:5d:7d:70:98:75:31:25:
d7:a3:2a:d3:a1:a6:8c:2b:09:28:6f:1b:94:2a:46:6a:c6:6d:
37:79:0e:b9:33:20:b9:7c:d0:cb:cf:70:14:fc:3e:80:11:c4:
44:5e:68:0a:a7:9d:d5:8f:3e:e4:16:68:e6:17:d6:26:6d:08:
24:26:7c:61:f5:ba:92:97:41:0f:c7:0f:c6:cf:a3:3c:ce:df:
57:d0:e4:c2:11:b1:68:56:22:d9:7b:26:5d:ae:7c:33:df:35:
d5:25:c7:9a:8b:0e:76:7e:ca:3e:ac:d2:af:93:e5:f8:7f:5c:
20:16:c0:77:95:df:41:37:d2:92:ce:5e:58:92:dd:6a:b4:0f:
e8:34:e2:30:7c:d3:72:b9:59:f1:96:25:aa:28:e6:bc:5d:57:
4f:ea:09:0a:18:46:3a:35:05:94:3a:3c:27:d9:00:86:15:2d:
f6:3f:c5:13
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi+9Hq3fUMHGqUdroXatf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjUwMTAxMTc0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjIxZjM4MzJkNmFiOTM1NmE0ZTYxMjA3M2U0MTk2OGFjOWJlNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0awwfKJZ0OE8XZ5lR/n2FLxxPXZ
L6oqOhHHnTC3uJL1iNRjLe9Oira6OGrKoCIpn8CvUh3EICCGNjUY2+OMhYTwEc6A
LN8SpB+fCwFZm8AhghPKR0fGq/wddMfZE80iZm6vWVbls8OH0udI2ZJXgS3tZ3Gy
CziBpuaUHvyOKjPa/doHeGzf6N2oYmzRJdRYXamsC0j+e9SkwWa1GbW1KVtU2tTx
ecIQC3f1MOVm5HsvztVVpMzreZx6/q22IO6oBfnWtf18VlcN25gQsnI9yaBSNqFB
ZXVjDabxqvnvtUNR7WP29XObVtJsGfBLekkcIIi7e2b8uP+bwZvfo3bFaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA8h84Mtark1ak5hIHPkGWism+SgMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvRHlIemd5MXF1VFZxVG1FZ2MtUVphS3liNUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVetJAwQA
wW9OAwQA2RLTMA0GCSqGSIb3DQEBCwUAA4IBAQCjmo7suYAeFxVpTGzQry9EivYd
H5dXZIfa2q0yir1JzZC7AC3T6x9sPaBQzNYtNg2QZ7EjODKlPYvBZkdg+r3qvPkT
7QmCUn4DWbVWYyQvH2hPal19cJh1MSXXoyrToaaMKwkobxuUKkZqxm03eQ65MyC5
fNDLz3AU/D6AEcREXmgKp53Vjz7kFmjmF9YmbQgkJnxh9bqSl0EPxw/Gz6M8zt9X
0OTCEbFoViLZeyZdrnwz3zXVJceaiw52fso+rNKvk+X4f1wgFsB3ld9BN9KSzl5Y
kt1qtA/oNOIwfNNyuVnxliWqKOa8XVdP6gkKGEY6NQWUOjwn2QCGFS32P8UT
-----END CERTIFICATE-----
Generated at Fri Apr 18 12:29:20 2025 by rpki-client