Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa
File: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (raw, json)
Hash identifier: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=
Subject key identifier: C9:0A:E7:84:20:00:55:17:4D:C2:33:8F:8C:5D:44:AF:35:A3:51:DC
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 01942823AEE4832C5B0F98B8B681946E098F
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa
Signing time: Thu 02 Jan 2025 17:50:14 +0000
ROA not before: Thu 02 Jan 2025 17:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201425
IP address blocks: 188.214.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ae:e4:83:2c:5b:0f:98:b8:b6:81:94:6e:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 2 17:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c90ae784200055174dc2338f8c5d44af35a351dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:4d:69:58:bc:0c:f1:cb:9f:2f:61:fb:2e:
4c:fe:e8:62:d1:a8:3a:bd:79:91:e3:59:c2:f8:39:
e7:83:da:91:37:d1:53:59:97:b0:3a:0f:ac:39:a9:
70:00:83:6b:5a:de:19:b4:44:e6:77:30:f0:93:fc:
00:3c:f8:9c:21:09:87:0e:31:b5:2a:59:a9:3c:72:
8f:9d:21:e1:99:27:a3:12:1e:e0:6f:f9:ea:cd:10:
31:24:e5:10:2d:06:92:3a:fe:dc:25:1e:30:2e:cd:
62:d1:a6:15:e5:a1:c1:51:da:2f:ce:e4:46:da:ac:
11:3f:2a:96:ed:14:90:10:7c:06:d4:86:72:77:42:
b3:e6:cf:bd:7a:82:38:1e:3e:c6:5e:e2:fc:65:0d:
af:5a:f6:4c:4f:67:c5:67:ba:3f:f4:10:ca:25:62:
6b:dc:47:fd:a9:35:80:55:ee:05:52:de:77:0b:65:
f6:eb:2f:8f:f3:48:ad:ef:63:42:fc:92:5a:9a:ee:
2d:ad:8e:83:3c:fd:81:a9:5f:4c:39:56:f8:75:69:
18:e3:1e:50:eb:13:7a:aa:5d:1d:10:97:ef:35:05:
1d:94:1a:92:34:91:85:44:5f:50:78:62:6c:cf:59:
be:a5:34:e4:d8:18:2b:86:8d:4e:fc:a1:3d:f2:51:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0A:E7:84:20:00:55:17:4D:C2:33:8F:8C:5D:44:AF:35:A3:51:DC
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.100.0/24
Signature Algorithm: sha256WithRSAEncryption
37:04:d5:91:e9:d9:36:d4:47:f8:c4:cb:ec:24:df:2c:04:53:
71:6b:f6:86:a3:1f:3e:11:0a:14:51:b3:96:86:39:f2:2e:7c:
bd:3e:77:45:03:76:61:5b:fe:35:0e:90:4f:f0:cf:a8:a6:ba:
7f:91:2e:d8:71:d8:1a:8b:1a:4f:3b:8e:11:35:6a:8c:60:24:
55:14:04:00:4f:8f:4a:1d:e2:3a:80:5a:51:38:3f:7c:18:0d:
e0:1f:31:9e:43:d5:0c:c7:eb:22:99:25:8b:d5:ec:36:73:ae:
a8:6a:80:b1:b0:59:a3:0e:b5:4b:29:cf:97:2b:2d:b9:d7:14:
04:c7:9d:a2:fa:7a:af:3f:9a:d5:ec:54:b2:03:a3:e4:0c:cd:
b2:1e:e4:11:d7:95:b8:6e:1e:cd:01:e7:82:4d:4c:93:6f:b6:
0b:62:08:02:c0:c1:68:d3:3b:53:73:e3:ea:93:0b:8e:6d:03:
c5:cb:66:28:d2:2f:8f:0e:d0:4d:7e:70:16:c3:6f:a2:af:f7:
08:20:21:34:d9:a6:6e:8c:34:cc:50:13:f8:e2:8e:b6:e5:56:
37:ac:9f:8b:db:be:c1:ab:d9:d0:87:3c:f4:35:fe:2d:8b:f5:
cc:4b:d7:52:08:48:d1:7d:9c:e3:c1:4f:cb:ba:d1:ee:0b:00:
19:c0:e6:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI67kgyxbD5i4toGUbgmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5
M2NiZDUwHhcNMjUwMTAyMTc1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTBhZTc4NDIwMDA1NTE3NGRjMjMzOGY4YzVkNDRhZjM1YTM1MWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPhNaVi8DPHLny9h+y5M/uhi0ag6
vXmR41nC+Dnng9qRN9FTWZewOg+sOalwAINrWt4ZtETmdzDwk/wAPPicIQmHDjG1
KlmpPHKPnSHhmSejEh7gb/nqzRAxJOUQLQaSOv7cJR4wLs1i0aYV5aHBUdovzuRG
2qwRPyqW7RSQEHwG1IZyd0Kz5s+9eoI4Hj7GXuL8ZQ2vWvZMT2fFZ7o/9BDKJWJr
3Ef9qTWAVe4FUt53C2X26y+P80it72NC/JJamu4trY6DPP2BqV9MOVb4dWkY4x5Q
6xN6ql0dEJfvNQUdlBqSNJGFRF9QeGJsz1m+pTTk2Bgrho1O/KE98lHfHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkK54QgAFUXTcIzj4xdRK81o1HcMB8GA1UdIwQY
MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt
ZWNhNTNhN2Y3NzYyLzEveVFybmhDQUFWUmROd2pPUGpGMUVyeldqVWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy
LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNZkMA0G
CSqGSIb3DQEBCwUAA4IBAQA3BNWR6dk21Ef4xMvsJN8sBFNxa/aGox8+EQoUUbOW
hjnyLny9PndFA3ZhW/41DpBP8M+oprp/kS7YcdgaixpPO44RNWqMYCRVFAQAT49K
HeI6gFpROD98GA3gHzGeQ9UMx+simSWL1ew2c66oaoCxsFmjDrVLKc+XKy251xQE
x52i+nqvP5rV7FSyA6PkDM2yHuQR15W4bh7NAeeCTUyTb7YLYggCwMFo0ztTc+Pq
kwuObQPFy2Yo0i+PDtBNfnAWw2+ir/cIICE02aZujDTMUBP44o625VY3rJ+L277B
q9nQhzz0Nf4ti/XMS9dSCEjRfZzjwU/LutHuCwAZwOZe
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:23 2025 by rpki-client