Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/YWZxUEBUa4geO7xSWni5G0dP24I.roa
File: YWZxUEBUa4geO7xSWni5G0dP24I.roa (raw, json)
Hash identifier: lNTigTNd9+GqGcwHPvWs2lVYdqOFCOOM/X7m/2b1rZA=
Subject key identifier: 61:66:71:50:40:54:6B:88:1E:3B:BC:52:5A:78:B9:1B:47:4F:DB:82
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 018699210EE2BD2A48985214D738C74E9E6E
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/YWZxUEBUa4geO7xSWni5G0dP24I.roa
Signing time: Tue 28 Feb 2023 17:45:25 +0000
ROA not before: Tue 28 Feb 2023 17:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 194.113.239.0/24 maxlen: 24
185.221.196.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:21:0e:e2:bd:2a:48:98:52:14:d7:38:c7:4e:9e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Feb 28 17:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6166715040546b881e3bbc525a78b91b474fdb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:22:f9:de:ef:dc:fe:f1:61:a8:dc:14:38:74:
d6:fc:9e:8e:b5:09:cb:b5:e4:cb:cd:0e:50:a9:e7:
ae:c2:c5:17:f7:7f:c9:b7:b1:f9:9c:97:e4:c1:58:
ad:5c:bb:bf:21:02:b7:56:06:a6:99:82:b5:7f:42:
79:a3:af:69:c7:6f:50:35:5a:c2:44:5f:de:25:f3:
1c:51:a1:b3:df:38:db:2e:75:a2:27:86:dc:49:d2:
ba:b4:f7:0a:b3:32:81:d9:d4:e2:a1:7f:73:5f:02:
e3:9f:9e:1b:c0:a4:7a:c1:05:8c:b5:e4:6b:41:a0:
f6:e9:aa:79:b7:7e:22:58:1b:0c:37:c9:0d:3c:d0:
f0:98:bc:57:a0:71:ab:b3:bd:e0:7d:31:4d:4b:ab:
84:76:bb:71:ce:92:59:1f:51:8d:14:53:85:a9:be:
e7:bd:60:67:bd:5a:4b:64:be:9b:54:04:c2:dc:73:
14:d6:1e:bd:4c:58:7b:29:4e:22:ec:ec:46:f5:87:
c6:ce:6a:fd:16:2b:4a:f2:22:e7:bc:4f:e6:d8:cf:
33:2d:9f:01:89:22:e0:c3:45:39:35:f7:e5:76:ca:
e3:13:2d:0c:9a:9a:93:0a:c0:37:24:38:08:cc:7a:
b8:69:56:45:20:4e:88:fc:79:4e:95:be:1e:53:4e:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:71:50:40:54:6B:88:1E:3B:BC:52:5A:78:B9:1B:47:4F:DB:82
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/YWZxUEBUa4geO7xSWni5G0dP24I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.196.0/23
185.238.88.0/22
194.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
31:50:38:ef:3b:31:e7:e0:e0:a2:0b:ce:c0:6f:f4:fd:e8:bc:
8e:dd:2b:c7:cf:ad:37:3b:df:28:b7:c0:fd:2b:5d:dc:d6:10:
fc:a8:03:00:f8:a3:ff:03:2c:38:88:23:62:4d:2a:88:61:9a:
85:a4:fb:fe:c0:02:2e:5a:70:5d:2b:3e:3f:67:a4:3e:c4:10:
89:f4:13:5c:51:ae:19:92:f3:35:f6:11:21:b3:35:fa:b6:8d:
80:98:e2:57:7d:fe:ee:9c:f2:60:94:d1:20:80:d7:0d:a3:26:
9c:0a:ec:00:f7:8c:45:84:e2:dd:40:15:27:89:a7:b1:c5:57:
80:0d:d8:38:71:fe:43:33:cf:75:ce:15:49:e2:6c:ac:a0:a3:
fa:4f:09:4a:e7:d2:b9:08:91:0d:16:bb:ff:08:2b:74:9f:f2:
d2:ea:db:f3:f1:77:ab:6d:9f:bd:79:0e:6c:23:9f:e7:f4:92:
5d:dc:d2:f5:38:c5:9d:ac:fd:f3:41:d7:b3:96:c3:96:37:0c:
a3:f4:42:af:81:c2:64:c7:65:2c:39:80:f7:6a:f7:da:1a:8f:
e7:6f:d8:10:40:8f:ce:52:ca:68:df:36:51:a9:82:eb:ef:68:
80:f0:2c:e4:c3:94:b3:61:8c:32:da:a8:45:9c:12:16:8d:01:
91:f0:fb:3e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYaZIQ7ivSpImFIU1zjHTp5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjMwMjI4MTc0NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTY2NzE1MDQwNTQ2Yjg4MWUzYmJjNTI1YTc4YjkxYjQ3NGZkYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yL53u/c/vFhqNwUOHTW/J6OtQnL
teTLzQ5QqeeuwsUX93/Jt7H5nJfkwVitXLu/IQK3VgammYK1f0J5o69px29QNVrC
RF/eJfMcUaGz3zjbLnWiJ4bcSdK6tPcKszKB2dTioX9zXwLjn54bwKR6wQWMteRr
QaD26ap5t34iWBsMN8kNPNDwmLxXoHGrs73gfTFNS6uEdrtxzpJZH1GNFFOFqb7n
vWBnvVpLZL6bVATC3HMU1h69TFh7KU4i7OxG9YfGzmr9FitK8iLnvE/m2M8zLZ8B
iSLgw0U5NffldsrjEy0MmpqTCsA3JDgIzHq4aVZFIE6I/HlOlb4eU07GNwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGFmcVBAVGuIHju8Ulp4uRtHT9uCMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvWVdaeFVFQlVhNGdlTzd4U1duaTVHMGRQMjRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBud3EAwQC
ue5YAwQAwnHvMA0GCSqGSIb3DQEBCwUAA4IBAQAxUDjvOzHn4OCiC87Ab/T96LyO
3SvHz603O98ot8D9K13c1hD8qAMA+KP/Ayw4iCNiTSqIYZqFpPv+wAIuWnBdKz4/
Z6Q+xBCJ9BNcUa4ZkvM19hEhszX6to2AmOJXff7unPJglNEggNcNoyacCuwA94xF
hOLdQBUniaexxVeADdg4cf5DM891zhVJ4mysoKP6TwlK59K5CJENFrv/CCt0n/LS
6tvz8XerbZ+9eQ5sI5/n9JJd3NL1OMWdrP3zQdezlsOWNwyj9EKvgcJkx2UsOYD3
avfaGo/nb9gQQI/OUspo3zZRqYLr72iA8Czkw5SzYYwy2qhFnBIWjQGR8Ps+
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:25 2025 by rpki-client