Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YQL7-ojFlGX5Gf2rI2BmXdg-EFY.roa
File: YQL7-ojFlGX5Gf2rI2BmXdg-EFY.roa (raw, json)
Hash identifier: 9polKimm4ANXN2y9yJ3xZafdvxBakTwn8RFe1TFKVLI=
Subject key identifier: 61:02:FB:FA:88:C5:94:65:F9:19:FD:AB:23:60:66:5D:D8:3E:10:56
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FFA66442CEE3630335B2E174FAAFF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YQL7-ojFlGX5Gf2rI2BmXdg-EFY.roa
Signing time: Thu 02 Jan 2025 05:49:40 +0000
ROA not before: Thu 02 Jan 2025 05:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207676
IP address blocks: 92.253.218.0/23 maxlen: 24
92.253.235.0/24 maxlen: 24
146.120.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:fa:66:44:2c:ee:36:30:33:5b:2e:17:4f:aa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6102fbfa88c59465f919fdab2360665dd83e1056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:53:ab:b6:67:b5:13:84:17:79:7c:bb:92:
92:7a:2e:b2:38:67:f5:16:f1:d6:b4:ea:12:84:8a:
51:8f:02:d1:82:83:cc:07:3b:b5:fc:da:9e:b8:5e:
ae:3e:95:b7:5f:3e:7b:9c:db:06:69:80:04:6c:f2:
e4:38:d0:f2:9e:b0:f3:d7:08:70:c2:71:b8:d1:60:
52:26:93:6d:2f:38:3b:a0:1f:94:a0:b6:bb:42:d1:
0d:29:e9:f4:15:f3:f7:3d:57:be:cc:38:ed:37:ba:
cc:b0:dc:1d:81:bf:77:39:92:07:ff:ca:1c:e0:ed:
43:d5:46:d4:a9:bc:12:60:4d:13:aa:63:b7:dd:4a:
26:ad:47:ed:46:6c:f3:6c:e9:f4:84:05:bb:94:fa:
bb:cb:2b:06:3f:82:1b:d3:4f:06:32:78:5f:66:17:
97:2d:03:9b:54:8e:24:f3:4b:0f:c8:53:0a:ce:7c:
bc:48:65:b8:f8:dd:53:ba:e3:f0:2a:e1:86:a8:dc:
2e:0f:77:a4:d8:41:d0:5b:6a:70:59:e4:7a:ea:d3:
84:30:16:d6:c9:8a:5c:05:1e:a1:32:2c:94:5a:85:
b0:3d:8c:4d:fc:7f:68:ef:43:98:82:29:90:79:06:
50:6d:a1:93:29:ff:ab:c0:3e:c1:d5:21:69:d4:f6:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:FB:FA:88:C5:94:65:F9:19:FD:AB:23:60:66:5D:D8:3E:10:56
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YQL7-ojFlGX5Gf2rI2BmXdg-EFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.218.0/23
92.253.235.0/24
146.120.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f5:63:2c:63:4c:e3:96:31:fa:2e:c0:19:95:70:58:0c:73:
c9:85:86:05:67:6c:ab:a7:72:19:da:fb:69:93:c4:8b:ff:02:
8c:a8:f0:8e:22:ea:c9:51:d5:07:f9:33:50:41:5e:64:60:00:
4b:2c:d2:ab:6d:a4:73:ef:85:56:ab:0a:b1:20:4b:d2:a8:96:
8f:76:c4:8c:a9:c9:e7:e9:85:a1:bf:73:7c:8d:8a:62:c0:bf:
bc:8c:16:90:88:5e:b2:69:ef:d2:ff:be:64:b6:7b:a2:25:7f:
01:74:49:73:93:1b:a6:bf:41:ec:33:d2:c4:14:5b:1b:ff:82:
d0:aa:bf:f5:bf:4a:c0:9b:50:20:ee:6a:d9:88:64:87:69:9c:
6d:e7:66:5f:da:bb:0b:b0:3f:eb:2d:25:10:bf:95:e4:bd:da:
ef:e8:d3:8f:4e:b7:19:6d:33:e6:a3:d6:37:f3:f0:85:91:9d:
b3:85:e7:35:20:fd:d9:2c:dd:a7:9f:65:3e:71:26:32:0b:59:
79:7e:67:1d:94:41:87:38:1f:36:26:a2:e5:97:8a:e8:46:e8:
04:e6:d3:31:2a:ad:f8:0a:33:2d:6a:b5:31:78:b1:84:07:8b:
15:86:33:e9:1d:22:62:17:41:5e:5b:70:9c:79:6d:1d:c8:72:
d8:82:1e:94
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlj/pmRCzuNjAzWy4XT6r/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTAyZmJmYTg4YzU5NDY1ZjkxOWZkYWIyMzYwNjY1ZGQ4M2UxMDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp9Tq7ZntROEF3l8u5KSei6yOGf1
FvHWtOoShIpRjwLRgoPMBzu1/NqeuF6uPpW3Xz57nNsGaYAEbPLkONDynrDz1whw
wnG40WBSJpNtLzg7oB+UoLa7QtENKen0FfP3PVe+zDjtN7rMsNwdgb93OZIH/8oc
4O1D1UbUqbwSYE0TqmO33UomrUftRmzzbOn0hAW7lPq7yysGP4Ib008GMnhfZheX
LQObVI4k80sPyFMKzny8SGW4+N1TuuPwKuGGqNwuD3ek2EHQW2pwWeR66tOEMBbW
yYpcBR6hMiyUWoWwPYxN/H9o70OYgimQeQZQbaGTKf+rwD7B1SFp1PYTLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGEC+/qIxZRl+Rn9qyNgZl3YPhBWMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWVFMNy1vakZsR1g1R2YyckkyQm1YZGctRUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBXP3aAwQA
XP3rAwQAknhuMA0GCSqGSIb3DQEBCwUAA4IBAQBu9WMsY0zjljH6LsAZlXBYDHPJ
hYYFZ2yrp3IZ2vtpk8SL/wKMqPCOIurJUdUH+TNQQV5kYABLLNKrbaRz74VWqwqx
IEvSqJaPdsSMqcnn6YWhv3N8jYpiwL+8jBaQiF6yae/S/75ktnuiJX8BdElzkxum
v0HsM9LEFFsb/4LQqr/1v0rAm1Ag7mrZiGSHaZxt52Zf2rsLsD/rLSUQv5Xkvdrv
6NOPTrcZbTPmo9Y38/CFkZ2zhec1IP3ZLN2nn2U+cSYyC1l5fmcdlEGHOB82JqLl
l4roRugE5tMxKq34CjMtarUxeLGEB4sVhjPpHSJiF0FeW3CceW0dyHLYgh6U
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:00 2025 by rpki-client