Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/YYaPGtiORiNzPW21Pri8UkdR1Y8.roa
File: YYaPGtiORiNzPW21Pri8UkdR1Y8.roa (raw, json)
Hash identifier: xGRRDXQNcsXRvPEMqBWORXwhlX4vM0gbMNqMpskFoYA=
Subject key identifier: 61:86:8F:1A:D8:8E:46:23:73:3D:6D:B5:3E:B8:BC:52:47:51:D5:8F
Certificate issuer: /CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Certificate serial: E59401
Authority key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/YYaPGtiORiNzPW21Pri8UkdR1Y8.roa
Signing time: Sat 01 Jan 2022 08:04:41 +0000
ROA not before: Sat 01 Jan 2022 08:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.162.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15045633 (0xe59401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Validity
Not Before: Jan 1 08:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61868f1ad88e4623733d6db53eb8bc524751d58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:f3:b7:fd:62:21:a6:27:bb:1d:6c:68:3c:
58:ff:02:49:13:55:a7:b0:cf:96:7b:22:fb:c8:ec:
77:b3:76:f6:c3:3d:a1:42:c2:ee:9c:cb:00:c0:c8:
b3:1d:52:c8:dc:30:37:01:1e:69:95:0f:6a:9b:33:
ef:f1:0f:e1:06:48:e9:da:35:9d:74:bc:fa:32:98:
82:d1:01:b5:0c:cd:e0:1b:c2:d0:a0:9f:65:23:f4:
98:61:43:6e:c3:c3:ac:b1:66:13:37:cd:3b:5e:1d:
e6:3a:9a:0d:ee:14:fb:10:c6:fa:ba:85:52:c2:67:
e9:ab:1c:1a:39:6a:cb:38:82:a3:35:4d:47:1e:e2:
b7:3c:5f:2c:23:9f:76:fd:79:ea:0d:51:e1:43:eb:
c7:ae:e7:90:fe:97:82:3e:08:3e:aa:4d:79:df:49:
33:ea:f3:3c:19:8e:bb:16:b8:6b:21:b7:54:bb:a6:
76:bb:42:86:61:44:bd:cd:0a:48:4f:d2:6b:be:08:
a6:a9:1e:0f:2b:e9:5b:95:c6:20:c9:8a:01:7b:c7:
34:41:44:da:fa:40:64:e2:35:89:c9:8c:0f:f0:1d:
30:2d:fc:a3:12:90:1e:93:cf:e8:7f:dd:5c:fa:78:
25:ec:3f:59:58:ed:16:aa:ef:ac:a8:72:bd:0f:17:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:8F:1A:D8:8E:46:23:73:3D:6D:B5:3E:B8:BC:52:47:51:D5:8F
X509v3 Authority Key Identifier:
keyid:99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/YYaPGtiORiNzPW21Pri8UkdR1Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:eb:1f:85:68:18:ba:6c:6a:20:0d:d8:85:43:88:1c:85:bd:
95:a5:17:1a:48:be:21:68:7a:af:7f:24:e0:1f:85:4f:06:92:
56:64:16:9c:af:b9:17:d9:f7:99:15:30:a1:16:97:b5:12:39:
9e:ff:8b:f7:71:84:87:0a:6d:0f:39:4b:ce:26:99:75:8b:f7:
bd:29:7c:49:d5:bc:9a:e1:cd:2b:23:d0:a8:4c:65:d5:5e:7f:
f9:9f:65:ce:90:9b:b0:fa:c8:ee:9a:ea:94:3b:37:46:5b:aa:
0e:16:c9:45:be:a2:ef:b9:38:8c:0f:54:e3:cd:44:c1:f1:d0:
2e:f1:b9:d0:86:5e:f6:2a:fd:bf:14:cf:a6:f2:7c:b2:69:c1:
3d:14:0a:0f:dc:fd:3c:97:f9:82:b2:42:99:85:a1:ab:24:33:
1e:08:90:8b:76:71:30:78:84:98:04:ee:b8:b8:02:3a:3c:25:
35:21:bd:42:60:22:96:db:14:42:31:38:20:96:8b:86:c0:dd:
31:e1:9c:bd:a5:a7:c8:6e:b6:1f:2a:d1:a0:06:a8:01:bd:f0:
3b:f9:8e:ff:7b:8b:55:7d:05:b6:3a:70:88:9b:4c:af:91:75:
57:c1:45:af:6f:7d:a1:ff:2a:30:15:78:7b:12:22:27:bd:a0:
e9:b7:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:23:02 2025 by rpki-client