Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YT_T6qaZ8X6RnVPLays4Z7M9Udo.roa
File: YT_T6qaZ8X6RnVPLays4Z7M9Udo.roa (raw, json)
Hash identifier: EgMLpujwDBJ2qLfPKve17Y3fZC8xtTZeAE+N+VGwXh8=
Subject key identifier: 61:3F:D3:EA:A6:99:F1:7E:91:9D:53:CB:6B:2B:38:67:B3:3D:51:DA
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0185ED0913AFC0F6F8DFCFA529A38018B2DF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YT_T6qaZ8X6RnVPLays4Z7M9Udo.roa
Signing time: Thu 26 Jan 2023 07:44:33 +0000
ROA not before: Thu 26 Jan 2023 07:44:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 109.111.48.0/22 maxlen: 24
95.82.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:09:13:af:c0:f6:f8:df:cf:a5:29:a3:80:18:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 26 07:44:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=613fd3eaa699f17e919d53cb6b2b3867b33d51da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:50:56:d1:bb:de:2e:b3:8a:00:8f:e7:56:
06:5c:e4:34:67:75:f8:1f:4c:37:ab:2e:37:2a:c9:
51:09:61:5a:93:6d:f5:89:ef:f3:51:76:82:79:97:
61:2b:6d:cd:5c:dd:7a:74:bb:53:23:2e:03:0a:3a:
80:ec:bb:1b:cf:37:f3:0d:3e:ba:49:67:28:78:d2:
92:e3:49:d8:61:65:72:3e:d7:04:96:78:4c:cb:97:
07:7c:10:77:b6:23:d3:ed:30:ce:79:9c:b2:4a:2b:
2f:e3:43:a8:98:3a:f5:01:19:7c:17:28:af:aa:ad:
45:2b:ed:a0:a4:00:29:7f:f1:f5:61:56:ec:d0:14:
cc:c6:20:24:19:56:6a:4a:a1:80:21:c0:10:6a:b7:
ef:00:d1:7c:b3:29:12:d2:fa:36:7f:33:a5:64:3b:
41:28:f9:84:38:8b:d0:c8:fe:1d:81:6c:b0:ff:68:
4e:9c:d1:c1:73:81:af:77:03:e9:26:65:14:4d:51:
15:1a:e4:45:6e:2b:9f:3e:b4:c5:f3:d4:f4:2e:a8:
31:cc:df:81:e6:b8:a4:cd:24:79:f3:f8:17:e2:be:
71:ca:d8:a7:d6:4f:f9:06:5e:58:b5:1b:5d:e5:81:
ca:a8:6b:70:61:f7:31:9e:96:aa:d0:71:aa:c2:a6:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:D3:EA:A6:99:F1:7E:91:9D:53:CB:6B:2B:38:67:B3:3D:51:DA
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/YT_T6qaZ8X6RnVPLays4Z7M9Udo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.40.0/21
109.111.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:25:93:3e:56:a4:3a:a4:c9:83:6f:25:bf:17:94:73:65:76:
05:19:78:50:8e:1b:19:62:9f:4a:e5:fc:17:61:3c:20:3a:a3:
50:09:bc:1c:3c:a3:08:ba:74:21:f5:33:cb:34:f4:d2:4e:f4:
a2:fb:28:8f:ae:e5:44:f5:1c:1b:6d:f1:e9:92:24:f7:aa:e9:
84:d5:9f:14:c1:29:d7:dd:79:02:ef:4e:b6:f4:0d:db:5f:2b:
07:87:af:8e:42:3a:dd:e3:fd:d8:db:86:34:ef:31:23:c6:a6:
1e:23:de:48:01:e7:8c:69:89:a4:2c:ce:22:dc:7d:b0:60:aa:
a7:ba:9b:96:27:f8:b2:d8:5a:7c:cf:53:e3:77:5d:5f:70:69:
c9:af:5a:0d:fb:39:65:4a:e8:94:59:4e:e6:75:31:d5:23:f9:
6a:d8:f4:17:fc:68:fa:ab:53:48:d9:79:4b:90:02:2f:71:f8:
cb:63:c9:1f:b4:d2:8d:f1:10:bd:08:0f:7f:ac:f9:8e:19:48:
ea:31:51:70:c6:7d:6c:3e:c2:13:d2:86:a1:33:04:be:b1:50:
bb:62:6e:04:49:65:b7:f0:7c:bb:fb:fd:18:03:ea:52:50:ed:
f1:32:28:9a:42:85:bb:3b:a6:93:e8:2e:8b:8e:2f:bd:c2:26:
52:8f:2a:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXtCROvwPb438+lKaOAGLLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMwMTI2MDc0NDMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTNmZDNlYWE2OTlmMTdlOTE5ZDUzY2I2YjJiMzg2N2IzM2Q1MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAdQVtG73i6zigCP51YGXOQ0Z3X4
H0w3qy43KslRCWFak231ie/zUXaCeZdhK23NXN16dLtTIy4DCjqA7LsbzzfzDT66
SWcoeNKS40nYYWVyPtcElnhMy5cHfBB3tiPT7TDOeZyySisv40OomDr1ARl8Fyiv
qq1FK+2gpAApf/H1YVbs0BTMxiAkGVZqSqGAIcAQarfvANF8sykS0vo2fzOlZDtB
KPmEOIvQyP4dgWyw/2hOnNHBc4GvdwPpJmUUTVEVGuRFbiufPrTF89T0LqgxzN+B
5rikzSR58/gX4r5xytin1k/5Bl5YtRtd5YHKqGtwYfcxnpaq0HGqwqbPyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGE/0+qmmfF+kZ1Ty2srOGezPVHaMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvWVRfVDZxYVo4WDZSblZQTGF5czRaN005VWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX1IoAwQC
bW8wMA0GCSqGSIb3DQEBCwUAA4IBAQCYJZM+VqQ6pMmDbyW/F5RzZXYFGXhQjhsZ
Yp9K5fwXYTwgOqNQCbwcPKMIunQh9TPLNPTSTvSi+yiPruVE9RwbbfHpkiT3qumE
1Z8UwSnX3XkC70629A3bXysHh6+OQjrd4/3Y24Y07zEjxqYeI95IAeeMaYmkLM4i
3H2wYKqnupuWJ/iy2Fp8z1Pjd11fcGnJr1oN+zllSuiUWU7mdTHVI/lq2PQX/Gj6
q1NI2XlLkAIvcfjLY8kftNKN8RC9CA9/rPmOGUjqMVFwxn1sPsIT0oahMwS+sVC7
Ym4ESWW38Hy7+/0YA+pSUO3xMiiaQoW7O6aT6C6Lji+9wiZSjyqM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:23 2025 by rpki-client