Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa
File: Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa (raw, json)
Hash identifier: e70u6weRDBV6JWEkJ4iTDPkd6bFoI2WC8caeKQY0SWQ=
Subject key identifier: 62:BC:78:24:F2:3A:B0:C3:A2:F6:31:0D:AF:E1:99:46:58:1D:A1:96
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 15C02EC3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa
Signing time: Sat 01 Jan 2022 05:59:08 +0000
ROA not before: Sat 01 Jan 2022 05:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 5.253.84.0/24 maxlen: 24
5.253.86.0/24 maxlen: 24
185.99.135.0/24 maxlen: 24
2a06:a000:160::/44 maxlen: 48
2a06:a001:a010::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364916419 (0x15c02ec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jan 1 05:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bc7824f23ab0c3a2f6310dafe19946581da196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:a0:fc:76:56:bb:39:cc:5b:76:0c:c7:9a:
f5:c4:99:d7:34:75:5f:0a:c4:a0:d9:f3:c7:c5:8e:
3b:fa:1d:e6:e0:68:ec:5d:22:73:11:33:74:c2:f4:
be:52:50:31:1c:2b:11:eb:1a:db:c5:83:b3:c1:b3:
e4:a7:5f:d7:96:27:58:6b:53:06:10:e5:0b:a2:86:
81:2f:3a:e7:44:90:3a:dc:cc:fb:90:a1:91:04:ec:
e5:ff:a5:b7:cc:43:9c:42:7c:3b:7c:75:06:04:12:
51:19:3d:5c:61:f1:70:a7:f0:72:52:e6:03:2b:bd:
51:93:d2:05:36:5f:e8:eb:53:2d:9f:d9:18:76:d3:
57:7b:81:26:f0:64:d3:aa:19:5d:9d:be:43:75:68:
28:55:cb:b9:ff:bc:92:b2:35:4e:81:03:60:f8:39:
b2:fc:ca:b8:dd:6c:2b:54:37:0d:ce:ff:2f:d3:c6:
9d:a3:40:8b:f5:e7:02:24:20:4d:43:80:86:86:16:
3d:b6:9b:c1:01:ac:bf:0a:78:08:f2:03:12:00:7c:
75:3a:1f:82:f3:ea:f8:92:5f:df:95:ba:87:53:f6:
14:9c:63:6d:9b:5d:37:10:db:7e:95:35:02:5e:91:
cc:74:b8:1c:26:01:5c:22:a4:c1:5a:0b:2c:22:cd:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:78:24:F2:3A:B0:C3:A2:F6:31:0D:AF:E1:99:46:58:1D:A1:96
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Yrx4JPI6sMOi9jENr-GZRlgdoZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/24
5.253.86.0/24
185.99.135.0/24
IPv6:
2a06:a000:160::/44
2a06:a001:a010::/44
Signature Algorithm: sha256WithRSAEncryption
88:e3:ec:5c:95:84:75:c3:5d:df:d0:fa:cc:7f:ab:23:77:08:
c6:2b:b3:c7:8b:94:2b:4f:3c:4b:09:05:6d:ad:00:b3:08:6e:
40:1e:a7:a7:89:64:d8:f4:43:a4:f0:10:df:88:5b:1f:ac:2b:
7e:db:63:f3:2c:2f:06:47:b3:46:41:ce:c2:69:ff:2b:93:b6:
9c:a8:d4:0c:8b:88:d1:de:f3:80:7a:16:be:f5:b4:10:3e:d3:
ea:46:d4:72:22:75:44:64:4c:9e:f4:74:68:a4:68:71:aa:db:
a3:e8:85:8a:1f:24:13:59:a5:a6:1f:5e:92:23:14:10:b3:dd:
99:e0:ab:e1:3a:4b:42:8f:24:21:3e:5e:73:1d:7a:c1:59:91:
c2:aa:8f:b1:8c:b7:50:7e:6e:c1:de:8c:86:35:53:cc:b5:8a:
6d:32:8c:46:e5:b9:e1:d8:b3:52:8b:18:f2:a7:ab:7d:d3:a1:
6f:45:d0:34:b1:52:d4:9f:da:9d:ac:9f:82:13:73:16:1c:84:
b9:37:32:f0:6e:c1:cb:34:40:25:7e:58:17:c0:d1:99:3e:cc:
7b:58:b8:61:59:49:45:62:e1:82:66:1e:f2:6b:9d:b6:7f:31:
4a:f0:90:58:38:f1:b0:41:e4:01:30:b8:6e:1b:4e:31:06:77:
09:b1:6e:51
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEFcAuwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
MTA1NTkwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJiYzc4MjRmMjNh
YjBjM2EyZjYzMTBkYWZlMTk5NDY1ODFkYTE5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9soPx2Vrs5zFt2DMea9cSZ1zR1XwrEoNnzx8WOO/od5uBo
7F0icxEzdML0vlJQMRwrEesa28WDs8Gz5Kdf15YnWGtTBhDlC6KGgS8650SQOtzM
+5ChkQTs5f+lt8xDnEJ8O3x1BgQSURk9XGHxcKfwclLmAyu9UZPSBTZf6OtTLZ/Z
GHbTV3uBJvBk06oZXZ2+Q3VoKFXLuf+8krI1ToEDYPg5svzKuN1sK1Q3Dc7/L9PG
naNAi/XnAiQgTUOAhoYWPbabwQGsvwp4CPIDEgB8dTofgvPq+JJf35W6h1P2FJxj
bZtdNxDbfpU1Al6RzHS4HCYBXCKkwVoLLCLNFTMCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBRivHgk8jqww6L2MQ2v4ZlGWB2hljAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1lyeDRKUEk2c01PaTlqRU5yLUdaUmxnZG9aWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwGAQCAAEwEgMEAAX9VAMEAAX9VgMEALljhzAYBAIA
AjASAwcEKgagAAFgAwcEKgagAaAQMA0GCSqGSIb3DQEBCwUAA4IBAQCI4+xclYR1
w13f0PrMf6sjdwjGK7PHi5QrTzxLCQVtrQCzCG5AHqeniWTY9EOk8BDfiFsfrCt+
22PzLC8GR7NGQc7Caf8rk7acqNQMi4jR3vOAeha+9bQQPtPqRtRyInVEZEye9HRo
pGhxqtuj6IWKHyQTWaWmH16SIxQQs92Z4KvhOktCjyQhPl5zHXrBWZHCqo+xjLdQ
fm7B3oyGNVPMtYptMoxG5bnh2LNSixjyp6t906FvRdA0sVLUn9qdrJ+CE3MWHIS5
NzLwbsHLNEAlflgXwNGZPsx7WLhhWUlFYuGCZh7ya522fzFK8JBYOPGwQeQBMLhu
G04xBncJsW5R
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:48:52 2025 by rpki-client