Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa
File: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (raw, json)
Hash identifier: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=
Subject key identifier: 62:BC:11:CA:C8:7B:B0:3D:BD:21:AE:59:BB:C0:39:92:66:6D:1E:A0
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E12FDC99BBE2235EE091C768C18D4
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 176.113.99.0/24 maxlen: 24
178.212.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:12:fd:c9:9b:be:22:35:ee:09:1c:76:8c:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62bc11cac87bb03dbd21ae59bbc03992666d1ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:b3:34:8b:bd:3f:bc:e4:1f:95:87:e1:ce:
e6:5f:13:cb:16:04:78:4d:33:f6:71:ff:df:83:f3:
19:fd:a9:c6:88:48:5f:59:e4:b8:23:ce:bf:d4:a5:
8f:9d:15:ff:87:4c:82:b1:f2:ed:28:b2:a7:84:72:
36:a3:aa:60:e4:c5:69:ea:24:54:64:30:33:bc:2a:
3c:36:18:fc:c4:de:23:81:73:fc:ef:68:3f:e7:48:
8b:f8:12:f8:fa:26:39:78:0d:b7:10:42:63:52:56:
1c:ed:dc:83:4d:1a:f5:de:f0:14:bb:71:30:77:6c:
5d:0c:ac:f2:ff:72:55:b8:04:e3:b3:6b:cc:2b:c6:
de:2a:07:84:f5:47:56:21:f5:6f:1b:13:10:48:1f:
01:4f:9a:38:a2:f2:87:a1:0d:88:62:e1:8f:64:a9:
a0:b6:23:56:b7:db:04:70:6d:7c:c0:27:68:51:a5:
cf:35:38:6b:b6:fa:5b:43:7a:f0:2e:a9:bc:67:f0:
27:0d:bd:cf:da:14:95:86:61:0b:04:dc:0d:14:00:
99:1f:12:0b:da:04:34:cc:1f:d9:8e:23:a1:74:3e:
3b:ac:28:94:6e:19:e2:5d:c3:e8:6a:71:5d:d9:67:
8c:7f:96:26:55:20:f3:38:25:c8:6f:e3:05:48:47:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:11:CA:C8:7B:B0:3D:BD:21:AE:59:BB:C0:39:92:66:6D:1E:A0
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.99.0/24
178.212.202.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8a:85:fa:9d:0f:52:ff:58:8c:89:5a:df:74:80:99:4e:26:
e8:ee:35:45:05:ae:be:2f:ce:ad:c6:65:67:f3:ba:7b:9b:29:
15:61:3e:33:fd:9b:85:3a:97:2a:d9:74:6f:7f:fc:94:31:ef:
98:49:e4:13:f1:f1:e6:4f:57:12:6d:3c:12:2b:3e:53:89:95:
0e:ff:2a:b9:b3:53:ba:d4:28:06:4e:91:d8:bf:38:34:6e:7c:
6b:d0:ca:c2:e5:e5:bd:ef:56:f3:fd:61:1b:dc:f0:18:dd:9d:
f4:a0:63:2e:de:71:d0:fb:ee:66:c8:37:a2:3e:43:aa:37:2a:
4c:51:1a:c6:cb:b6:4c:9d:77:70:67:70:31:02:20:7a:cc:61:
f7:ec:a8:22:58:19:aa:c0:62:ff:3d:a3:1d:50:ac:ab:c8:23:
04:22:ec:d8:9c:e4:03:83:07:e7:eb:81:33:d5:1f:e5:50:4e:
9d:98:39:a0:ca:00:d4:f9:50:69:af:e2:f3:ad:1c:5d:12:7d:
22:6d:53:e7:0c:2b:62:d4:99:8d:27:f2:c7:ff:9b:ee:93:2b:
f2:9b:fd:89:88:01:fd:0c:27:eb:a7:04:05:74:b0:e1:92:ae:
3c:63:25:46:c3:05:ac:28:df:2c:46:91:45:67:1d:40:c3:f9:
71:64:48:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijhL9yZu+IjXuCRx2jBjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjUwMTAxMTU0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmJjMTFjYWM4N2JiMDNkYmQyMWFlNTliYmMwMzk5MjY2NmQxZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZOzNIu9P7zkH5WH4c7mXxPLFgR4
TTP2cf/fg/MZ/anGiEhfWeS4I86/1KWPnRX/h0yCsfLtKLKnhHI2o6pg5MVp6iRU
ZDAzvCo8Nhj8xN4jgXP872g/50iL+BL4+iY5eA23EEJjUlYc7dyDTRr13vAUu3Ew
d2xdDKzy/3JVuATjs2vMK8beKgeE9UdWIfVvGxMQSB8BT5o4ovKHoQ2IYuGPZKmg
tiNWt9sEcG18wCdoUaXPNThrtvpbQ3rwLqm8Z/AnDb3P2hSVhmELBNwNFACZHxIL
2gQ0zB/ZjiOhdD47rCiUbhniXcPoanFd2WeMf5YmVSDzOCXIb+MFSEd8lQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGK8EcrIe7A9vSGuWbvAOZJmbR6gMB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvWXJ3UnlzaDdzRDI5SWE1WnU4QTVrbVp0SHFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHFjAwQA
stTKMA0GCSqGSIb3DQEBCwUAA4IBAQBPioX6nQ9S/1iMiVrfdICZTibo7jVFBa6+
L86txmVn87p7mykVYT4z/ZuFOpcq2XRvf/yUMe+YSeQT8fHmT1cSbTwSKz5TiZUO
/yq5s1O61CgGTpHYvzg0bnxr0MrC5eW971bz/WEb3PAY3Z30oGMu3nHQ++5myDei
PkOqNypMURrGy7ZMnXdwZ3AxAiB6zGH37KgiWBmqwGL/PaMdUKyryCMEIuzYnOQD
gwfn64Ez1R/lUE6dmDmgygDU+VBpr+LzrRxdEn0ibVPnDCti1JmNJ/LH/5vukyvy
m/2JiAH9DCfrpwQFdLDhkq48YyVGwwWsKN8sRpFFZx1Aw/lxZEiM
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:12 2025 by rpki-client