Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/YvrrlqCpoxmnHxbULvm7g2s0kuY.roa
File: YvrrlqCpoxmnHxbULvm7g2s0kuY.roa (raw, json)
Hash identifier: pJyo607eIQg7Yh4ip4xGDQQoNpMqhWwhR71NVDRU4WQ=
Subject key identifier: 62:FA:EB:96:A0:A9:A3:19:A7:1F:16:D4:2E:F9:BB:83:6B:34:92:E6
Certificate issuer: /CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Certificate serial: 13F1600F
Authority key identifier: D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/YvrrlqCpoxmnHxbULvm7g2s0kuY.roa
Signing time: Sat 01 Jan 2022 13:01:51 +0000
ROA not before: Sat 01 Jan 2022 13:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28773
IP address blocks: 195.78.38.0/23 maxlen: 23
188.190.160.0/19 maxlen: 19
2001:67c:2ee4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334585871 (0x13f1600f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d305f8c033cc4c096c3953585c2689c9a75d3f18
Validity
Not Before: Jan 1 13:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62faeb96a0a9a319a71f16d42ef9bb836b3492e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:1a:0d:8b:45:c8:8c:b9:e5:35:e0:61:03:
5a:38:16:82:24:79:0d:f4:ff:6a:a1:a7:bb:f5:40:
97:3d:1a:00:33:08:de:ec:61:10:9f:e8:2c:ba:fc:
43:80:4e:73:9c:7a:a5:58:62:25:72:2d:d8:71:af:
f1:5a:95:19:ca:e0:c0:2b:fa:ac:73:75:54:32:4f:
66:fe:36:77:f2:d6:3d:b5:7d:9c:30:f3:62:fd:f2:
1c:77:64:ff:a9:25:6f:75:6f:59:2b:36:1e:ba:62:
8b:48:5c:bc:59:ce:51:6b:a6:cd:68:e9:5c:88:2b:
4e:dd:5a:b6:36:fd:79:e2:f4:f2:bb:ef:41:77:ff:
ea:0c:09:dc:13:0e:f2:f8:4c:97:a4:b7:4a:d6:b4:
a7:40:c6:31:86:08:1e:d1:91:64:cb:1e:21:af:6b:
dd:89:b0:5c:8f:1a:1f:ff:f9:73:8d:08:ed:d8:44:
49:53:82:f1:8c:43:6f:05:c7:32:0a:54:3f:b0:ab:
09:68:e0:72:98:5b:9f:ec:44:e7:2b:40:d2:00:8d:
a1:66:50:f4:65:bc:67:03:68:c6:6f:bf:2a:cd:5d:
fe:80:24:bc:a0:47:ad:2f:2c:06:40:c0:00:da:ac:
9a:20:08:57:40:d1:ed:78:00:3c:08:31:0b:3d:3a:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:EB:96:A0:A9:A3:19:A7:1F:16:D4:2E:F9:BB:83:6B:34:92:E6
X509v3 Authority Key Identifier:
keyid:D3:05:F8:C0:33:CC:4C:09:6C:39:53:58:5C:26:89:C9:A7:5D:3F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wX4wDPMTAlsOVNYXCaJyaddPxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/YvrrlqCpoxmnHxbULvm7g2s0kuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/323ec7-582d-4c12-b723-297c4b33d541/1/0wX4wDPMTAlsOVNYXCaJyaddPxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.160.0/19
195.78.38.0/23
IPv6:
2001:67c:2ee4::/48
Signature Algorithm: sha256WithRSAEncryption
4f:e2:ca:d3:c9:89:6c:47:d6:6d:54:3b:12:ec:84:f4:a8:dd:
3e:a8:d8:15:78:25:f4:d7:0f:62:11:66:5e:8b:b0:91:6b:12:
da:8a:99:36:27:e5:dc:d5:d2:c1:6d:08:d3:8e:68:a5:42:f1:
4d:33:69:bd:d6:51:74:5a:d8:c6:1d:39:fc:bf:b9:bd:9a:44:
e0:18:7f:33:dc:34:f3:25:e8:db:e7:ce:57:c8:0f:61:88:d1:
d2:04:28:50:bb:74:63:f2:0a:2f:39:a0:27:84:60:fa:f2:54:
50:89:49:6a:25:ad:4d:e0:df:05:80:55:4f:89:a5:12:be:e2:
17:85:de:00:f3:3a:38:9f:c2:2b:c0:c9:f0:1d:62:09:54:e0:
8b:59:74:35:25:88:d9:96:3c:38:64:5e:71:18:e7:f1:62:d7:
42:63:b3:3b:82:61:e9:1a:bd:f1:ea:8b:eb:35:72:73:29:35:
4e:fd:80:ac:9d:7e:e1:30:6f:2d:c8:90:b6:8f:b1:8b:95:91:
92:db:99:2b:18:7e:06:4b:3f:e7:64:e8:fa:0e:c2:34:dc:cd:
d6:79:47:8f:af:5b:92:26:db:a0:ad:d9:21:67:52:84:d1:7c:
6b:ed:11:d9:b4:62:6c:14:7f:e7:8a:60:cf:62:0e:f3:a2:49:
79:a0:8d:cc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEE/FgDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MzA1ZjhjMDMzY2M0YzA5NmMzOTUzNTg1YzI2ODljOWE3NWQzZjE4MB4XDTIyMDEw
MTEzMDE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJmYWViOTZhMGE5
YTMxOWE3MWYxNmQ0MmVmOWJiODM2YjM0OTJlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxcGg2LRciMueU14GEDWjgWgiR5DfT/aqGnu/VAlz0aADMI
3uxhEJ/oLLr8Q4BOc5x6pVhiJXIt2HGv8VqVGcrgwCv6rHN1VDJPZv42d/LWPbV9
nDDzYv3yHHdk/6klb3VvWSs2Hrpii0hcvFnOUWumzWjpXIgrTt1atjb9eeL08rvv
QXf/6gwJ3BMO8vhMl6S3Sta0p0DGMYYIHtGRZMseIa9r3YmwXI8aH//5c40I7dhE
SVOC8YxDbwXHMgpUP7CrCWjgcphbn+xE5ytA0gCNoWZQ9GW8ZwNoxm+/Ks1d/oAk
vKBHrS8sBkDAANqsmiAIV0DR7XgAPAgxCz06kPUCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBRi+uuWoKmjGacfFtQu+buDazSS5jAfBgNVHSMEGDAWgBTTBfjAM8xMCWw5
U1hcJonJp10/GDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzB3WDR3RFBNVEFsc09WTllYQ2FKeWFkZFB4Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzcvMzIzZWM3LTU4MmQtNGMxMi1iNzIzLTI5N2M0YjMzZDU0MS8x
L1l2cnJscUNwb3htbkh4YlVMdm03ZzJzMGt1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcv
MzIzZWM3LTU4MmQtNGMxMi1iNzIzLTI5N2M0YjMzZDU0MS8xLzB3WDR3RFBNVEFs
c09WTllYQ2FKeWFkZFB4Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEBby+oAMEAcNOJjAPBAIAAjAJAwcA
IAEGfC7kMA0GCSqGSIb3DQEBCwUAA4IBAQBP4srTyYlsR9ZtVDsS7IT0qN0+qNgV
eCX01w9iEWZei7CRaxLaipk2J+Xc1dLBbQjTjmilQvFNM2m91lF0WtjGHTn8v7m9
mkTgGH8z3DTzJejb585XyA9hiNHSBChQu3Rj8govOaAnhGD68lRQiUlqJa1N4N8F
gFVPiaUSvuIXhd4A8zo4n8IrwMnwHWIJVOCLWXQ1JYjZljw4ZF5xGOfxYtdCY7M7
gmHpGr3x6ovrNXJzKTVO/YCsnX7hMG8tyJC2j7GLlZGS25krGH4GSz/nZOj6DsI0
3M3WeUePr1uSJtugrdkhZ1KE0Xxr7RHZtGJsFH/nimDPYg7zokl5oI3M
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:23:28 2025 by rpki-client