Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/YDDERAGfQG_P54V0MZVSyMjIVyk.roa
File: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (raw, json)
Hash identifier: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=
Subject key identifier: 60:30:C4:44:01:9F:40:6F:CF:E7:85:74:31:95:52:C8:C8:C8:57:29
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01941FFA01B6B6E1A7C58069CEEF0AA3F479
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/YDDERAGfQG_P54V0MZVSyMjIVyk.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200414
IP address blocks: 178.219.128.0/24 maxlen: 24
178.219.131.0/24 maxlen: 24
185.11.108.0/23 maxlen: 23
185.101.190.0/24 maxlen: 24
194.29.180.0/23 maxlen: 23
195.110.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:01:b6:b6:e1:a7:c5:80:69:ce:ef:0a:a3:f4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6030c444019f406fcfe78574319552c8c8c85729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:10:8b:bf:ad:31:26:07:5d:f4:71:4a:8f:
4e:92:6f:4a:cc:3f:23:09:8a:25:c7:c0:b3:19:3d:
bb:ad:cd:37:25:d8:09:c1:29:38:75:bf:90:78:ad:
44:e3:f3:fd:fd:81:8b:17:9d:c7:c9:ff:12:42:65:
24:fa:a8:ff:6c:df:21:ae:37:a7:09:c2:fb:43:ca:
44:f7:1f:00:a2:18:84:b8:a4:9a:6a:4d:8e:b8:6d:
42:91:06:9b:b0:eb:12:4a:e2:b1:35:09:5b:61:fe:
fc:92:89:59:7e:d1:99:f7:05:15:72:19:a6:0b:c7:
b2:40:62:57:4d:05:45:dd:bc:5a:39:bd:cf:7e:31:
a6:1d:6b:e1:2d:48:4e:af:1f:55:56:22:b0:bf:37:
1e:72:11:5b:c8:06:45:1b:48:a5:ec:e3:94:63:3f:
9d:8b:9b:8b:62:25:9e:2f:a7:a6:4a:16:a8:2b:4b:
e9:5b:fb:45:71:5d:ea:f5:33:09:ab:c1:55:41:35:
30:62:88:48:a2:d5:b4:41:9a:78:bf:f9:07:ce:82:
83:83:d0:8c:2e:8d:2e:47:e8:82:bf:00:ea:b8:1b:
1b:bc:40:58:25:d6:b8:08:0f:cd:8d:0d:e2:11:26:
b6:10:ff:4f:14:e0:60:b0:21:26:1a:de:35:70:7a:
6e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:30:C4:44:01:9F:40:6F:CF:E7:85:74:31:95:52:C8:C8:C8:57:29
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/YDDERAGfQG_P54V0MZVSyMjIVyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.128.0/24
178.219.131.0/24
185.11.108.0/23
185.101.190.0/24
194.29.180.0/23
195.110.50.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d0:96:e3:5a:e3:49:db:cd:51:2b:af:0b:0e:f4:ea:86:7b:
59:5d:ed:9e:f8:d0:08:5f:2b:a7:b3:d1:e6:86:05:68:fb:bb:
44:4c:48:d1:07:60:b9:37:9d:12:e7:f1:15:d2:24:3e:60:d0:
de:ca:21:7d:04:65:66:3f:6f:45:bc:ff:4a:8c:89:cd:ea:27:
e4:da:49:19:59:b3:b9:08:65:0b:42:bc:a2:16:0f:02:f7:70:
b6:fd:2f:06:65:64:32:07:c8:3c:83:c8:46:06:7b:d4:a2:53:
4f:eb:df:0e:10:8f:ed:2d:be:1e:57:91:f4:bc:b7:14:f1:3f:
d1:c7:0f:9e:61:5e:c1:ee:fb:47:bc:d9:10:0c:4e:76:aa:78:
8c:39:2f:c7:f5:35:35:35:40:3b:86:55:6d:ad:2a:72:09:8e:
87:91:36:d7:e6:6f:cb:48:9b:89:67:9c:15:44:1c:f7:e7:ac:
18:e3:de:c3:dd:9f:59:43:e0:20:3c:2f:c8:d0:14:ca:5e:76:
02:27:a9:d2:2b:ce:ee:58:11:d5:9f:b2:94:21:c7:5d:cd:0d:
84:77:64:11:d0:9b:13:4a:fc:9c:8b:29:1f:27:88:2e:a1:9a:
dd:5f:b6:68:e3:35:18:8c:6e:7f:2f:8a:a5:aa:84:37:ce:80:
33:d5:af:5d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQf+gG2tuGnxYBpzu8Ko/R5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjUwMTAxMDM0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDMwYzQ0NDAxOWY0MDZmY2ZlNzg1NzQzMTk1NTJjOGM4Yzg1NzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkEQi7+tMSYHXfRxSo9Okm9KzD8j
CYolx8CzGT27rc03JdgJwSk4db+QeK1E4/P9/YGLF53Hyf8SQmUk+qj/bN8hrjen
CcL7Q8pE9x8AohiEuKSaak2OuG1CkQabsOsSSuKxNQlbYf78kolZftGZ9wUVchmm
C8eyQGJXTQVF3bxaOb3PfjGmHWvhLUhOrx9VViKwvzcechFbyAZFG0il7OOUYz+d
i5uLYiWeL6emShaoK0vpW/tFcV3q9TMJq8FVQTUwYohIotW0QZp4v/kHzoKDg9CM
Lo0uR+iCvwDquBsbvEBYJda4CA/NjQ3iESa2EP9PFOBgsCEmGt41cHpu9wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGAwxEQBn0Bvz+eFdDGVUsjIyFcpMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvWURERVJBR2ZRR19QNTRWME1aVlN5TWpJVnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAstuAAwQA
stuDAwQBuQtsAwQAuWW+AwQBwh20AwQAw24yMA0GCSqGSIb3DQEBCwUAA4IBAQAA
0JbjWuNJ281RK68LDvTqhntZXe2e+NAIXyuns9HmhgVo+7tETEjRB2C5N50S5/EV
0iQ+YNDeyiF9BGVmP29FvP9KjInN6ifk2kkZWbO5CGULQryiFg8C93C2/S8GZWQy
B8g8g8hGBnvUolNP698OEI/tLb4eV5H0vLcU8T/Rxw+eYV7B7vtHvNkQDE52qniM
OS/H9TU1NUA7hlVtrSpyCY6HkTbX5m/LSJuJZ5wVRBz356wY497D3Z9ZQ+AgPC/I
0BTKXnYCJ6nSK87uWBHVn7KUIcddzQ2Ed2QR0JsTSvyciykfJ4guoZrdX7Zo4zUY
jG5/L4qlqoQ3zoAz1a9d
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:42 2025 by rpki-client