Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ypecd2LqkaW6e4qzf_tWhzdTc5E.roa
File: ypecd2LqkaW6e4qzf_tWhzdTc5E.roa (raw, json)
Hash identifier: nXcncmToHt1q5p3HUhxZY7Q0AWrPzAjjTbEkQu0P6Fs=
Subject key identifier: CA:97:9C:77:62:EA:91:A5:BA:7B:8A:B3:7F:FB:56:87:37:53:73:91
Certificate issuer: /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial: 019428283C4A0DB7936634E0869232E3FC99
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ypecd2LqkaW6e4qzf_tWhzdTc5E.roa
Signing time: Thu 02 Jan 2025 17:55:13 +0000
ROA not before: Thu 02 Jan 2025 17:55:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61424
IP address blocks: 185.115.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:3c:4a:0d:b7:93:66:34:e0:86:92:32:e3:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Validity
Not Before: Jan 2 17:55:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca979c7762ea91a5ba7b8ab37ffb568737537391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:d5:32:d3:9d:36:72:87:a2:c1:48:0d:38:
d6:c7:05:f8:79:a8:48:73:d1:eb:09:e6:5c:31:18:
55:d8:ee:7a:8f:23:d4:d5:7c:94:e1:f5:69:f9:b9:
08:6d:f1:55:f8:6a:48:ba:7b:dd:6b:ac:74:f2:60:
af:94:b7:43:7a:52:8b:29:65:a5:64:87:f7:1f:69:
d8:41:a4:74:14:b7:dc:ab:45:c4:8c:94:47:28:6f:
01:70:2a:33:07:e5:aa:5d:05:07:5f:b0:f9:e0:47:
bf:12:2d:0e:97:df:ca:d2:73:c8:b7:2e:7c:3e:01:
be:bf:2b:b9:d5:53:ef:ab:a4:f2:b6:96:a7:d6:1c:
6e:de:53:00:70:89:3a:ca:10:91:38:5e:de:70:17:
a5:74:c3:f0:14:a4:15:71:4d:98:8d:a0:dc:c3:25:
a2:09:8e:f8:75:79:d9:00:f9:a7:e8:21:6b:f8:89:
43:1c:b9:20:7a:14:34:7c:c8:9e:d7:9d:43:7f:aa:
b0:3f:4a:dd:e4:2c:cc:84:22:98:d3:40:1c:54:50:
e3:bd:4c:bf:04:6e:09:6c:c2:9c:51:a9:a6:d8:f4:
2c:00:e5:d0:28:84:c5:e5:01:df:b3:52:78:26:bf:
4c:a1:cf:c5:1f:b6:99:12:3b:30:1c:49:77:b3:79:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:97:9C:77:62:EA:91:A5:BA:7B:8A:B3:7F:FB:56:87:37:53:73:91
X509v3 Authority Key Identifier:
keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ypecd2LqkaW6e4qzf_tWhzdTc5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.141.0/24
Signature Algorithm: sha256WithRSAEncryption
58:68:8e:56:25:f1:56:a3:2a:01:91:c6:27:5e:8f:ff:be:37:
d5:e5:f0:53:4a:20:12:9c:ac:31:4a:3e:95:56:88:4a:a5:a7:
14:68:9e:47:5b:a4:af:01:f5:a0:4b:2d:28:b3:66:0f:4a:d8:
74:c7:2e:bb:83:7f:d9:03:75:4e:8e:cc:62:cd:4b:f9:7a:bc:
c1:42:61:64:43:75:e1:e4:8b:60:67:8c:e1:48:f4:d7:61:76:
2a:2e:05:26:2f:98:96:3c:60:30:aa:f6:26:8f:6d:12:aa:5d:
f7:24:fb:7a:64:83:3f:de:61:6d:52:91:e8:ec:cd:6d:ff:01:
86:b0:83:fb:3a:05:80:9f:fa:d9:81:d7:9e:6c:82:ac:42:e1:
5d:b2:f9:ad:b5:a2:b7:42:ed:6c:7d:af:c3:29:1b:44:24:90:
82:87:7c:4a:2c:23:f9:f1:31:ff:21:4a:39:2c:76:80:1f:a8:
97:91:b3:87:b4:4a:a6:8b:bd:0d:e4:b4:63:76:50:ae:13:8e:
e2:2c:f4:3d:32:4f:d9:c0:bf:9e:5b:7d:93:0f:df:9c:2f:9b:
e9:bf:f9:a9:d3:28:22:27:a5:1c:d3:f3:6f:8c:4d:29:20:6d:
da:68:44:bf:ba:26:32:ef:56:7b:51:43:f5:1c:ce:8e:57:cf:
24:a5:0d:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKDxKDbeTZjTghpIy4/yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDcwMzhiODNlYjI0N2ZjNjViZGFkMDE5NWI4NjI0NmY4
ZjMwMDYwHhcNMjUwMTAyMTc1NTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTk3OWM3NzYyZWE5MWE1YmE3YjhhYjM3ZmZiNTY4NzM3NTM3MzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKXVMtOdNnKHosFIDTjWxwX4eahI
c9HrCeZcMRhV2O56jyPU1XyU4fVp+bkIbfFV+GpIunvda6x08mCvlLdDelKLKWWl
ZIf3H2nYQaR0FLfcq0XEjJRHKG8BcCozB+WqXQUHX7D54Ee/Ei0Ol9/K0nPIty58
PgG+vyu51VPvq6Tytpan1hxu3lMAcIk6yhCROF7ecBeldMPwFKQVcU2YjaDcwyWi
CY74dXnZAPmn6CFr+IlDHLkgehQ0fMie151Df6qwP0rd5CzMhCKY00AcVFDjvUy/
BG4JbMKcUamm2PQsAOXQKITF5QHfs1J4Jr9Moc/FH7aZEjswHEl3s3nB4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqXnHdi6pGlunuKs3/7Voc3U3ORMB8GA1UdIwQY
MBaAFBDXA4uD6yR/xlva0BlbhiRvjzAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUt
MWM1YmRlMmMxNGY0LzEveXBlY2QyTHFrYVc2ZTRxemZfdFdoemRUYzVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUtMWM1YmRlMmMxNGY0
LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXONMA0G
CSqGSIb3DQEBCwUAA4IBAQBYaI5WJfFWoyoBkcYnXo//vjfV5fBTSiASnKwxSj6V
VohKpacUaJ5HW6SvAfWgSy0os2YPSth0xy67g3/ZA3VOjsxizUv5erzBQmFkQ3Xh
5ItgZ4zhSPTXYXYqLgUmL5iWPGAwqvYmj20Sql33JPt6ZIM/3mFtUpHo7M1t/wGG
sIP7OgWAn/rZgdeebIKsQuFdsvmttaK3Qu1sfa/DKRtEJJCCh3xKLCP58TH/IUo5
LHaAH6iXkbOHtEqmi70N5LRjdlCuE47iLPQ9Mk/ZwL+eW32TD9+cL5vpv/mp0ygi
J6Uc0/NvjE0pIG3aaES/uiYy71Z7UUP1HM6OV88kpQ1D
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:06:06 2025 by rpki-client