Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/YsLZoqZw6u24llC00PtDDR7Qp3Q.roa
File: YsLZoqZw6u24llC00PtDDR7Qp3Q.roa (raw, json)
Hash identifier: xyGbGlbgzc0VPKZXK9Mhkv3PJ7Wng5W2DCI8eLTmYC0=
Subject key identifier: 62:C2:D9:A2:A6:70:EA:ED:B8:96:50:B4:D0:FB:43:0D:1E:D0:A7:74
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 0194CFB3AD4CDEB4B84B4D4D6CBEFDF94C06
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/YsLZoqZw6u24llC00PtDDR7Qp3Q.roa
Signing time: Tue 04 Feb 2025 06:44:06 +0000
ROA not before: Tue 04 Feb 2025 06:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213524
IP address blocks: 193.143.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:b3:ad:4c:de:b4:b8:4b:4d:4d:6c:be:fd:f9:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Feb 4 06:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62c2d9a2a670eaedb89650b4d0fb430d1ed0a774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:d1:73:2d:f1:a7:c7:1b:ff:be:6e:26:ad:
11:7c:1d:4e:e9:25:4f:4d:ae:34:2d:31:25:b1:b5:
ca:70:53:0e:5c:39:f5:82:3c:b6:a2:90:a4:4e:a2:
2c:67:37:b9:da:20:4d:bf:99:51:a1:1e:88:54:02:
f3:ad:b2:4b:2c:cd:7d:ca:ac:fd:9b:2c:b2:ac:4f:
aa:48:bd:ae:f4:ce:d4:74:b6:ab:b8:7a:9d:07:0b:
8c:5f:8d:26:82:df:c5:a2:5c:15:fd:37:b0:02:34:
a2:81:14:a6:6c:bc:17:bf:d7:f8:2e:0b:6f:43:e5:
3c:9d:62:83:13:ff:a4:bd:c4:cd:90:28:9b:79:57:
8e:67:14:7c:2a:f2:65:cb:00:fc:5f:ca:39:b4:00:
3d:30:7c:d6:db:c0:9f:7e:c5:9b:3a:89:53:38:8a:
cf:ed:eb:b8:03:6b:9c:1b:0f:0e:78:10:3b:15:84:
ce:0e:91:41:c6:48:9d:7a:b5:a2:d9:f3:32:1f:ac:
4c:d2:a7:49:46:25:1b:33:56:ba:e3:9e:58:d6:92:
06:34:2d:ad:d1:53:4f:e7:5b:8a:78:34:c3:24:60:
6f:eb:f1:e7:c0:1c:64:6d:24:1d:7c:07:96:52:0b:
3c:2d:e3:75:cb:8d:25:2d:33:91:d1:81:01:55:a5:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:D9:A2:A6:70:EA:ED:B8:96:50:B4:D0:FB:43:0D:1E:D0:A7:74
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/YsLZoqZw6u24llC00PtDDR7Qp3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.74.0/24
Signature Algorithm: sha256WithRSAEncryption
01:27:16:59:76:c7:46:6d:a0:b8:4d:12:85:5b:ae:a8:5d:4d:
7d:3b:6e:cd:ec:78:e9:6a:1b:4f:cc:ce:63:96:99:01:1d:5d:
f2:a9:78:5d:5d:d0:b6:4e:0a:0e:ce:f6:f3:0f:59:6e:68:a5:
3b:e5:0e:5c:06:ba:08:61:28:f7:d4:58:af:a5:8e:58:2d:0b:
2d:21:95:13:84:77:35:a0:b2:9a:8f:15:15:cd:03:74:87:77:
27:70:7a:ee:ee:00:c5:df:1e:5f:60:57:47:90:37:68:48:e0:
7a:55:97:d1:85:47:e7:e3:b7:97:70:44:75:d1:b9:af:cb:01:
0b:64:b3:db:b4:c9:96:86:51:fa:82:b9:b3:60:5a:23:ed:84:
be:63:64:c4:67:bf:b7:b5:aa:f4:01:8a:8b:1a:c6:db:3e:7d:
d8:6a:5c:9b:2f:f9:fb:34:fa:5e:4e:04:69:10:ed:f7:35:94:
d6:17:39:b8:ef:77:62:db:63:61:83:7e:fc:a4:7f:85:6f:d0:
d1:ce:37:a8:3d:69:c2:94:97:ba:46:44:ea:f6:bb:c6:ae:5e:
fa:65:fd:84:01:46:8e:40:20:e8:6c:7d:94:e0:80:81:2c:b3:
a3:66:d7:32:8c:0a:fb:b1:69:39:06:29:05:ac:43:e8:5c:e1:
3e:0c:0b:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTPs61M3rS4S01NbL79+UwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmE2YzBiY2NhMTZjNjg1ZGM3YjliMjdmMTk5YjQyYjRi
ZWVlZTkwHhcNMjUwMjA0MDY0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmMyZDlhMmE2NzBlYWVkYjg5NjUwYjRkMGZiNDMwZDFlZDBhNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37HRcy3xp8cb/75uJq0RfB1O6SVP
Ta40LTElsbXKcFMOXDn1gjy2opCkTqIsZze52iBNv5lRoR6IVALzrbJLLM19yqz9
myyyrE+qSL2u9M7UdLaruHqdBwuMX40mgt/FolwV/TewAjSigRSmbLwXv9f4Lgtv
Q+U8nWKDE/+kvcTNkCibeVeOZxR8KvJlywD8X8o5tAA9MHzW28CffsWbOolTOIrP
7eu4A2ucGw8OeBA7FYTODpFBxkiderWi2fMyH6xM0qdJRiUbM1a6455Y1pIGNC2t
0VNP51uKeDTDJGBv6/HnwBxkbSQdfAeWUgs8LeN1y40lLTOR0YEBVaVYPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLC2aKmcOrtuJZQtND7Qw0e0Kd0MB8GA1UdIwQY
MBaAFDO6bAvMoWxoXce5sn8Zm0K0vu7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYt
Y2M3NTc5NzUxOGEwLzEvWXNMWm9xWnc2dTI0bGxDMDBQdEREUjdRcDNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MTBlOGYtOTY3Zi00MTM3LWI0ZTYtY2M3NTc5NzUxOGEw
LzEvTTdwc0M4eWhiR2hkeDdteWZ4bWJRclMtN3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY9KMA0G
CSqGSIb3DQEBCwUAA4IBAQABJxZZdsdGbaC4TRKFW66oXU19O27N7HjpahtPzM5j
lpkBHV3yqXhdXdC2TgoOzvbzD1luaKU75Q5cBroIYSj31FivpY5YLQstIZUThHc1
oLKajxUVzQN0h3cncHru7gDF3x5fYFdHkDdoSOB6VZfRhUfn47eXcER10bmvywEL
ZLPbtMmWhlH6grmzYFoj7YS+Y2TEZ7+3tar0AYqLGsbbPn3YalybL/n7NPpeTgRp
EO33NZTWFzm473di22Nhg378pH+Fb9DRzjeoPWnClJe6RkTq9rvGrl76Zf2EAUaO
QCDobH2U4ICBLLOjZtcyjAr7sWk5BikFrEPoXOE+DAtu
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:39:51 2025 by rpki-client