Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/jAy4_Ymq4atio4rfM8yRIcRTRwE.roa
File: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (raw, json)
Hash identifier: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=
Subject key identifier: 8C:0C:B8:FD:89:AA:E1:AB:62:A3:8A:DF:33:CC:91:21:C4:53:47:01
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 019423D73628CFE8341B7D09D68BC53FFE36
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/jAy4_Ymq4atio4rfM8yRIcRTRwE.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211441
IP address blocks: 193.38.246.0/24 maxlen: 24
2a10:e2c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:36:28:cf:e8:34:1b:7d:09:d6:8b:c5:3f:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c0cb8fd89aae1ab62a38adf33cc9121c4534701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:01:36:3b:63:83:5c:e5:3a:9a:f7:54:7d:
35:3b:6b:2a:1b:c5:74:b5:30:c4:62:c3:be:71:24:
3a:47:1d:95:e3:a2:0f:9d:cc:20:50:55:6a:aa:39:
69:38:ee:1d:76:96:87:ab:90:c4:9f:b7:d7:18:1c:
55:5c:3f:e9:b9:d6:c8:f6:33:38:ac:e7:f0:ac:ea:
5a:06:12:d6:a2:b9:83:fc:d0:26:c2:81:6b:be:da:
12:0f:e5:76:d6:2b:19:e7:51:60:1d:c5:37:c9:8c:
1a:cb:07:65:e5:fb:68:ae:a2:10:6d:d7:60:90:7a:
9f:a4:8b:dd:18:6f:39:c8:4d:f7:21:26:dd:83:1e:
58:aa:23:e6:5f:57:33:78:49:48:b8:7f:57:42:3d:
a7:5f:4b:72:45:ef:2c:99:40:34:a8:12:e8:6a:8a:
b0:d6:7c:df:91:86:bf:80:30:3e:4b:d1:5e:e8:4e:
0a:77:41:82:60:14:87:6b:34:ce:d9:60:e3:3c:89:
0f:06:49:c0:6d:62:67:7c:da:95:3d:24:f2:80:8e:
d3:70:69:68:ab:72:0e:9d:1a:09:b3:27:26:65:93:
4d:27:02:68:fe:ee:1d:e0:3b:7a:4f:ef:bc:36:2c:
60:25:cd:c9:ec:c0:5b:8f:11:80:34:f8:b8:15:b1:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:B8:FD:89:AA:E1:AB:62:A3:8A:DF:33:CC:91:21:C4:53:47:01
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/jAy4_Ymq4atio4rfM8yRIcRTRwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.246.0/24
IPv6:
2a10:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
92:b4:48:e7:6c:35:95:9a:21:54:b8:c0:b6:06:3c:0c:79:ae:
9a:d7:de:fb:4d:0b:42:dc:a0:83:b1:12:02:5a:5a:56:57:a7:
a9:28:9c:e0:71:4c:1f:1e:33:b1:86:80:fb:3f:43:35:48:93:
41:fb:6d:27:e4:5f:ba:f3:36:33:0f:2a:ed:4f:a6:bd:9d:30:
5c:7d:f3:e2:a0:81:42:2a:f5:5f:96:a0:7b:55:30:da:7f:21:
05:7e:e1:f7:28:64:2f:b0:6a:4e:f9:8e:34:39:c1:90:90:0a:
cb:8d:e3:21:a0:9c:63:14:de:d2:f0:10:af:e1:65:f8:1c:c3:
0b:21:40:41:46:ad:33:46:36:3d:af:ca:04:69:93:6e:3f:3d:
ba:80:73:2d:54:5a:e5:ca:6a:59:1e:d6:4b:61:00:11:ca:83:
4f:50:ad:a6:a7:eb:df:40:31:b5:76:9f:d7:8c:41:e3:42:86:
27:d6:fe:44:5c:61:08:df:13:5a:f1:db:06:f5:37:db:be:91:
ab:28:20:79:52:13:8a:d6:30:98:32:02:c5:b5:2e:d5:94:95:
49:50:90:0a:1c:14:0f:15:c3:2a:d8:9c:fc:42:cf:a7:e2:6c:
6d:db:c7:e3:d4:46:3d:ac:76:09:44:1f:fa:65:9e:03:a2:66:
09:b6:06:92
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQj1zYoz+g0G30J1ovFP/42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2
N2M3MGUwHhcNMjUwMTAxMjE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzBjYjhmZDg5YWFlMWFiNjJhMzhhZGYzM2NjOTEyMWM0NTM0NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBMBNjtjg1zlOpr3VH01O2sqG8V0
tTDEYsO+cSQ6Rx2V46IPncwgUFVqqjlpOO4ddpaHq5DEn7fXGBxVXD/pudbI9jM4
rOfwrOpaBhLWormD/NAmwoFrvtoSD+V21isZ51FgHcU3yYwaywdl5ftorqIQbddg
kHqfpIvdGG85yE33ISbdgx5YqiPmX1czeElIuH9XQj2nX0tyRe8smUA0qBLoaoqw
1nzfkYa/gDA+S9Fe6E4Kd0GCYBSHazTO2WDjPIkPBknAbWJnfNqVPSTygI7TcGlo
q3IOnRoJsycmZZNNJwJo/u4d4Dt6T++8NixgJc3J7MBbjxGANPi4FbFnBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIwMuP2JquGrYqOK3zPMkSHEU0cBMB8GA1UdIwQY
MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct
OTdmZDc2YjgwODI3LzEvakF5NF9ZbXE0YXRpbzRyZk04eVJJY1JUUndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3
LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSb2MA0E
AgACMAcDBQMqEOLAMA0GCSqGSIb3DQEBCwUAA4IBAQCStEjnbDWVmiFUuMC2BjwM
ea6a1977TQtC3KCDsRICWlpWV6epKJzgcUwfHjOxhoD7P0M1SJNB+20n5F+68zYz
DyrtT6a9nTBcffPioIFCKvVflqB7VTDafyEFfuH3KGQvsGpO+Y40OcGQkArLjeMh
oJxjFN7S8BCv4WX4HMMLIUBBRq0zRjY9r8oEaZNuPz26gHMtVFrlympZHtZLYQAR
yoNPUK2mp+vfQDG1dp/XjEHjQoYn1v5EXGEI3xNa8dsG9TfbvpGrKCB5UhOK1jCY
MgLFtS7VlJVJUJAKHBQPFcMq2Jz8Qs+n4mxt28fj1EY9rHYJRB/6ZZ4DomYJtgaS
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:20 2025 by rpki-client