Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/yaqqfYMVGR1Kn_E96ZZcEottGik.roa
File: yaqqfYMVGR1Kn_E96ZZcEottGik.roa (raw, json)
Hash identifier: C3clHwmVyeAL/nPychCVHsTRa5L++9/kBGr1MOavl9g=
Subject key identifier: C9:AA:AA:7D:83:15:19:1D:4A:9F:F1:3D:E9:96:5C:12:8B:6D:1A:29
Certificate issuer: /CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Certificate serial: 070E1557
Authority key identifier: CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/yaqqfYMVGR1Kn_E96ZZcEottGik.roa
Signing time: Sat 01 Jan 2022 14:02:40 +0000
ROA not before: Sat 01 Jan 2022 14:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 194.110.48.0/22 maxlen: 22
194.33.156.0/22 maxlen: 22
194.34.128.0/22 maxlen: 22
193.228.72.0/22 maxlen: 22
193.142.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118363479 (0x70e1557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Validity
Not Before: Jan 1 14:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9aaaa7d8315191d4a9ff13de9965c128b6d1a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:2f:51:04:38:41:0e:7d:41:dd:ea:0f:41:
38:08:8a:aa:88:93:53:76:24:93:46:28:5b:70:61:
7f:27:f7:cd:6a:a0:42:90:e6:5d:2d:e8:39:41:a8:
60:ac:71:e4:f9:51:fb:b0:99:b9:69:ac:1b:ff:19:
43:52:d7:59:6a:02:47:0f:89:18:8a:cf:20:f7:44:
1e:58:f5:e0:ab:ea:fe:bf:e3:8b:e8:12:47:0e:26:
37:61:7a:98:fe:80:29:c2:d2:5b:c5:45:fd:61:0e:
a7:bf:f6:da:66:02:87:fe:29:c2:ed:c2:f3:c4:d2:
a7:ff:24:3c:fe:7a:17:ff:e7:15:91:70:38:1e:16:
7b:0b:69:c6:c9:8d:d8:1f:ba:46:b0:ea:26:ad:e7:
f5:22:92:75:fc:62:f8:3c:42:e3:d0:8d:44:f4:fc:
90:e0:c9:96:03:61:5c:0c:75:2c:e2:d9:39:2b:c3:
a1:74:29:cf:87:d8:e0:27:63:73:02:95:78:54:d6:
da:4a:1e:df:8d:a2:be:c4:84:f5:fe:52:43:3f:22:
6b:94:72:39:b4:e0:bb:32:b0:f1:48:db:79:3a:52:
3d:40:13:57:78:a7:72:fa:36:85:ee:ed:43:ac:65:
5e:53:5b:5e:d3:8e:4b:50:7e:18:92:34:98:bf:0e:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AA:AA:7D:83:15:19:1D:4A:9F:F1:3D:E9:96:5C:12:8B:6D:1A:29
X509v3 Authority Key Identifier:
keyid:CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/yaqqfYMVGR1Kn_E96ZZcEottGik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z6NJ47asL6JiQTwgy8QdalN0MZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.132.0/22
193.228.72.0/22
194.33.156.0/22
194.34.128.0/22
194.110.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:0a:92:3d:cd:1d:6e:cd:a0:5a:30:e2:ff:65:45:7b:26:42:
d2:89:63:5a:48:9c:8b:59:41:5d:e8:98:d7:2a:f4:26:b1:4f:
d9:d8:d4:e9:78:86:62:ed:c1:89:f4:e0:48:c2:6a:08:43:a3:
22:ba:f9:df:8d:10:ce:09:fd:1b:ad:6f:6f:6a:a9:ee:73:8f:
11:40:2a:dd:aa:6f:b5:94:3b:32:d9:4c:eb:a1:3e:af:a4:2d:
7b:b3:2f:b6:7e:fb:a7:e2:a9:7b:a3:d9:50:6e:69:58:8f:ea:
54:f9:e3:56:1a:3f:49:37:ac:72:6c:c4:76:a0:27:0a:18:cb:
4d:d6:9d:96:c4:ad:fc:6e:cc:5d:a0:98:59:fa:65:11:5f:08:
c4:57:ac:18:45:4b:c1:21:a8:c8:b9:d3:db:4c:96:82:43:c0:
2a:a7:99:16:a8:5b:77:2e:0d:4a:40:94:9f:38:8f:87:7d:53:
8e:8b:e2:b6:53:c6:57:c0:af:76:1f:93:0c:76:54:14:06:0c:
b5:c0:d1:82:97:30:b0:bc:1c:3b:1e:e5:7f:d0:cb:1b:12:ad:
ac:a6:cf:1c:5b:0b:9c:09:3b:b0:c4:dd:d0:66:2c:a6:1e:51:
5a:24:15:ac:e2:f7:6f:8d:8e:ae:6f:4d:1a:fa:d1:29:8c:09:
2a:67:58:82
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBw4VVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZmEzNDllM2I2YWMyZmEyNjI0MTNjMjBjYmM0MWQ2YTUzNzQzMTkzMB4XDTIyMDEw
MTE0MDI0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzlhYWFhN2Q4MzE1
MTkxZDRhOWZmMTNkZTk5NjVjMTI4YjZkMWEyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMR0L1EEOEEOfUHd6g9BOAiKqoiTU3Ykk0YoW3Bhfyf3zWqg
QpDmXS3oOUGoYKxx5PlR+7CZuWmsG/8ZQ1LXWWoCRw+JGIrPIPdEHlj14Kvq/r/j
i+gSRw4mN2F6mP6AKcLSW8VF/WEOp7/22mYCh/4pwu3C88TSp/8kPP56F//nFZFw
OB4WewtpxsmN2B+6RrDqJq3n9SKSdfxi+DxC49CNRPT8kODJlgNhXAx1LOLZOSvD
oXQpz4fY4CdjcwKVeFTW2koe342ivsSE9f5SQz8ia5RyObTguzKw8UjbeTpSPUAT
V3incvo2he7tQ6xlXlNbXtOOS1B+GJI0mL8OIgUCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTJqqp9gxUZHUqf8T3pllwSi20aKTAfBgNVHSMEGDAWgBTPo0njtqwvomJB
PCDLxB1qU3QxkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3o2Tko0N2FzTDZKaVFUd2d5OFFkYWxOME1aTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvM2Q3ODc0LTI1ODgtNDA3Zi1hY2I5LTEzZDllZmJmNWNjZi8x
L3lhcXFmWU1WR1IxS25fRTk2WlpjRW90dEdpay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
M2Q3ODc0LTI1ODgtNDA3Zi1hY2I5LTEzZDllZmJmNWNjZi8xL3o2Tko0N2FzTDZK
aVFUd2d5OFFkYWxOME1aTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAsGOhAMEAsHkSAMEAsIhnAMEAsIi
gAMEAsJuMDANBgkqhkiG9w0BAQsFAAOCAQEACgqSPc0dbs2gWjDi/2VFeyZC0olj
Wkici1lBXeiY1yr0JrFP2djU6XiGYu3BifTgSMJqCEOjIrr5340Qzgn9G61vb2qp
7nOPEUAq3apvtZQ7MtlM66E+r6Qte7Mvtn77p+Kpe6PZUG5pWI/qVPnjVho/STes
cmzEdqAnChjLTdadlsSt/G7MXaCYWfplEV8IxFesGEVLwSGoyLnT20yWgkPAKqeZ
Fqhbdy4NSkCUnziPh31TjovitlPGV8Cvdh+TDHZUFAYMtcDRgpcwsLwcOx7lf9DL
GxKtrKbPHFsLnAk7sMTd0GYsph5RWiQVrOL3b42Orm9NGvrRKYwJKmdYgg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:42:18 2025 by rpki-client