Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ypLdJ3aEmoE9T33LQFAzN9llRuQ.roa
File: ypLdJ3aEmoE9T33LQFAzN9llRuQ.roa (raw, json)
Hash identifier: PtoEiMXvj6r6Bb/EnsMGpSvuXj4cRe811/TajMtke0w=
Subject key identifier: CA:92:DD:27:76:84:9A:81:3D:4F:7D:CB:40:50:33:37:D9:65:46:E4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC4468F0F913F27654988756C8982
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ypLdJ3aEmoE9T33LQFAzN9llRuQ.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57197
IP address blocks: 93.170.44.0/22 maxlen: 24
93.170.90.0/23 maxlen: 24
93.171.128.0/22 maxlen: 24
95.47.122.0/23 maxlen: 24
146.120.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c4:46:8f:0f:91:3f:27:65:49:88:75:6c:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca92dd2776849a813d4f7dcb40503337d96546e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:98:e7:37:fb:44:4b:08:99:59:81:1b:49:
01:bb:28:86:4f:bb:b5:e0:3c:2c:f8:5e:8d:51:c3:
72:35:a9:26:58:69:a9:fc:81:fe:f3:ba:49:05:cc:
6d:7e:b8:3d:ad:c2:79:68:35:be:88:ac:40:37:69:
54:b3:16:a5:e7:af:86:f7:e9:12:f2:7d:d4:b9:1b:
04:17:bf:64:46:92:1e:f6:a7:64:eb:de:b5:97:5b:
aa:1d:ab:1c:cc:87:ae:22:4d:0c:86:09:ed:63:fe:
9e:db:24:44:5a:da:9b:22:5a:7d:7f:37:b0:a6:5e:
93:1c:97:02:d3:ca:03:58:2c:32:22:8d:cd:b5:c2:
d9:02:2f:79:2d:c7:a3:59:45:e1:72:3e:dc:fd:53:
b0:dc:09:23:a1:bb:2a:53:dc:d9:34:1e:98:73:75:
bb:6d:6e:a0:3a:21:d9:b5:30:e1:7a:e9:9b:5e:a0:
b0:e6:e2:0c:1e:98:1c:31:be:d8:9b:b8:14:8d:70:
51:04:95:04:1c:87:a4:db:c4:51:7b:12:01:35:9e:
50:ac:41:a8:d2:5b:16:a9:61:a1:40:3a:59:89:56:
01:83:43:06:a2:4a:62:2c:16:da:27:ae:11:9c:cb:
38:d2:ae:30:9d:2c:bb:75:6a:94:2e:76:b8:7f:27:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:DD:27:76:84:9A:81:3D:4F:7D:CB:40:50:33:37:D9:65:46:E4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ypLdJ3aEmoE9T33LQFAzN9llRuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.44.0/22
93.170.90.0/23
93.171.128.0/22
95.47.122.0/23
146.120.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:69:22:b3:94:3e:d8:b8:99:3a:b3:f6:4c:14:4e:7f:c5:99:
b4:da:32:7f:c0:00:82:60:5b:46:28:ea:a6:f9:e5:85:e0:3e:
ae:2a:85:fa:01:90:22:b5:5e:81:ed:b9:c9:11:b9:a4:50:1a:
de:49:be:cf:a2:ce:2e:97:7f:27:5a:c9:8a:88:88:23:c1:81:
57:c6:41:ec:20:11:87:64:fb:37:0a:ea:1d:f0:28:d6:30:26:
96:cc:72:64:17:fe:c8:8a:6c:26:46:c8:d3:87:28:32:05:dc:
27:bf:e7:05:98:e8:21:6b:d5:70:b8:89:75:2f:bc:73:7d:40:
52:7c:4d:92:54:bc:77:41:34:3a:08:57:84:27:fe:bc:7f:ff:
8e:4c:94:58:52:ef:f1:76:ef:ff:0b:42:3a:a8:5c:a0:99:bf:
aa:6c:b0:cc:a7:ac:51:19:6d:14:59:a0:e7:70:2d:a6:79:dc:
b2:52:a4:01:37:ac:07:ea:51:f6:6a:f6:79:c0:60:12:09:a0:
c4:34:e3:23:35:fd:e7:b5:f6:7c:2b:b4:f4:27:ac:f4:0c:e6:
51:46:a3:10:57:16:fb:5d:66:16:a0:7b:03:6b:18:4d:3d:48:
e5:95:11:ba:26:18:ee:f9:c3:05:24:e0:a8:bf:35:ef:93:43:
21:d9:c4:28
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQlj8RGjw+RPydlSYh1bImCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTkyZGQyNzc2ODQ5YTgxM2Q0ZjdkY2I0MDUwMzMzN2Q5NjU0NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqWY5zf7REsImVmBG0kBuyiGT7u1
4Dws+F6NUcNyNakmWGmp/IH+87pJBcxtfrg9rcJ5aDW+iKxAN2lUsxal56+G9+kS
8n3UuRsEF79kRpIe9qdk6961l1uqHasczIeuIk0MhgntY/6e2yREWtqbIlp9fzew
pl6THJcC08oDWCwyIo3NtcLZAi95LcejWUXhcj7c/VOw3AkjobsqU9zZNB6Yc3W7
bW6gOiHZtTDheumbXqCw5uIMHpgcMb7Ym7gUjXBRBJUEHIek28RRexIBNZ5QrEGo
0lsWqWGhQDpZiVYBg0MGokpiLBbaJ64RnMs40q4wnSy7dWqULna4fycFNwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMqS3Sd2hJqBPU99y0BQMzfZZUbkMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEveXBMZEozYUVtb0U5VDMzTFFGQXpOOWxsUnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCXaosAwQB
XapaAwQCXauAAwQBXy96AwQAknj0MA0GCSqGSIb3DQEBCwUAA4IBAQAtaSKzlD7Y
uJk6s/ZMFE5/xZm02jJ/wACCYFtGKOqm+eWF4D6uKoX6AZAitV6B7bnJEbmkUBre
Sb7Pos4ul38nWsmKiIgjwYFXxkHsIBGHZPs3Cuod8CjWMCaWzHJkF/7IimwmRsjT
hygyBdwnv+cFmOgha9VwuIl1L7xzfUBSfE2SVLx3QTQ6CFeEJ/68f/+OTJRYUu/x
du//C0I6qFygmb+qbLDMp6xRGW0UWaDncC2medyyUqQBN6wH6lH2avZ5wGASCaDE
NOMjNf3ntfZ8K7T0J6z0DOZRRqMQVxb7XWYWoHsDaxhNPUjllRG6Jhju+cMFJOCo
vzXvk0Mh2cQo
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:47 2025 by rpki-client