Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0dbc01-3596-48e1-8b08-54f06cb6c175/1/YpWl6__l2GhwAdg_RXtaQ8KUD0k.roa
File: YpWl6__l2GhwAdg_RXtaQ8KUD0k.roa (raw, json)
Hash identifier: OVhckBXP0jlGNhglt/2dcnm7ZJ4oOuf/+HMMV5uC+B4=
Subject key identifier: 62:95:A5:EB:FF:E5:D8:68:70:01:D8:3F:45:7B:5A:43:C2:94:0F:49
Certificate issuer: /CN=0aae5c3d84743dacdf299158b84d003ca4aa2eb2
Certificate serial: 01896478E9E26EC7E8557783C8D74B786125
Authority key identifier: 0A:AE:5C:3D:84:74:3D:AC:DF:29:91:58:B8:4D:00:3C:A4:AA:2E:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq5cPYR0PazfKZFYuE0APKSqLrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0dbc01-3596-48e1-8b08-54f06cb6c175/1/YpWl6__l2GhwAdg_RXtaQ8KUD0k.roa
Signing time: Mon 17 Jul 2023 15:29:52 +0000
ROA not before: Mon 17 Jul 2023 15:29:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 84.246.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:e9:e2:6e:c7:e8:55:77:83:c8:d7:4b:78:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae5c3d84743dacdf299158b84d003ca4aa2eb2
Validity
Not Before: Jul 17 15:29:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6295a5ebffe5d8687001d83f457b5a43c2940f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:9d:32:0e:96:5b:6c:5b:01:7e:e4:6a:43:
34:d0:6e:57:82:57:5a:31:e4:ad:f6:88:4f:11:e5:
14:20:1c:55:36:42:b5:3e:40:31:30:51:82:24:a6:
92:ff:13:3a:29:23:b5:5f:92:ef:15:45:36:c3:de:
03:e8:66:6d:3d:f1:a6:cb:4b:2a:5c:6c:dc:7d:32:
88:11:1e:72:37:1c:c3:93:7a:62:3b:4f:a6:08:7a:
95:b4:59:6e:f0:12:d8:cf:7a:d9:87:ef:ff:62:da:
b1:3b:1d:eb:25:b6:b2:7f:b2:39:1b:e3:f2:6b:73:
13:6d:0f:ec:cb:99:77:42:d7:b0:90:13:d2:fe:d1:
a9:f5:9e:9a:fa:a1:03:e6:9d:92:6e:8f:32:c6:f3:
89:0b:34:83:77:ab:18:f6:14:e4:28:ed:16:ef:48:
c8:77:19:74:fb:24:25:fb:50:4a:2d:90:19:a9:80:
f4:93:c0:b8:a0:01:71:ce:87:a8:cf:53:4f:15:4e:
6c:ed:97:14:61:9e:86:90:3f:19:e9:01:5e:30:22:
27:74:46:19:7c:41:92:fc:5d:a9:f9:6c:55:fa:a3:
f8:fc:78:95:35:7b:fe:a3:c0:6e:0f:51:e8:41:fa:
5e:0d:61:5f:27:2d:90:b0:0d:c7:0c:78:2f:ed:25:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:A5:EB:FF:E5:D8:68:70:01:D8:3F:45:7B:5A:43:C2:94:0F:49
X509v3 Authority Key Identifier:
keyid:0A:AE:5C:3D:84:74:3D:AC:DF:29:91:58:B8:4D:00:3C:A4:AA:2E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq5cPYR0PazfKZFYuE0APKSqLrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0dbc01-3596-48e1-8b08-54f06cb6c175/1/YpWl6__l2GhwAdg_RXtaQ8KUD0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0dbc01-3596-48e1-8b08-54f06cb6c175/1/Cq5cPYR0PazfKZFYuE0APKSqLrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.87.0/24
Signature Algorithm: sha256WithRSAEncryption
88:94:06:a7:21:29:a6:1e:e3:ac:bd:20:ac:b8:22:d9:ce:44:
66:0d:5c:53:e9:ef:de:4a:56:dc:1c:29:34:99:6f:be:3f:3c:
be:2e:a2:3d:bc:ff:e3:4c:ec:51:02:66:f2:fa:2f:38:a5:22:
f5:01:d1:87:f1:ca:9d:0e:28:35:9e:cb:2d:c5:c4:bd:03:49:
14:23:87:2d:1c:36:40:5e:8e:5f:81:ac:2e:5c:07:eb:a7:57:
c6:4d:44:d7:17:15:a8:47:0d:0f:8e:23:96:a7:c4:0c:fa:62:
a9:be:85:63:53:67:50:fe:40:28:f4:c4:36:e3:0d:bf:c5:6e:
41:c6:74:0e:09:b6:5b:97:21:d6:3f:35:33:76:af:c9:22:d3:
31:b7:8b:cc:c3:25:e4:88:8c:41:f3:72:a1:3e:99:d1:59:20:
97:b1:18:35:3c:f3:d8:9f:36:42:20:bc:7f:28:c0:0f:6b:02:
71:a5:4c:03:36:6f:c1:86:91:7d:55:95:f0:64:ea:ef:16:fe:
63:64:03:2a:53:8e:71:67:1d:a1:7a:f9:e0:1b:89:a1:f5:3d:
bf:df:22:31:24:e0:88:f4:2b:3a:be:d1:42:4a:6f:f3:ae:33:
29:3f:64:a5:cb:f9:03:04:b6:13:d1:91:a3:ae:c5:15:02:a9:
a5:91:b6:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeOnibsfoVXeDyNdLeGElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYWU1YzNkODQ3NDNkYWNkZjI5OTE1OGI4NGQwMDNjYTRh
YTJlYjIwHhcNMjMwNzE3MTUyOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjk1YTVlYmZmZTVkODY4NzAwMWQ4M2Y0NTdiNWE0M2MyOTQwZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1CdMg6WW2xbAX7kakM00G5Xglda
MeSt9ohPEeUUIBxVNkK1PkAxMFGCJKaS/xM6KSO1X5LvFUU2w94D6GZtPfGmy0sq
XGzcfTKIER5yNxzDk3piO0+mCHqVtFlu8BLYz3rZh+//YtqxOx3rJbayf7I5G+Py
a3MTbQ/sy5l3QtewkBPS/tGp9Z6a+qED5p2Sbo8yxvOJCzSDd6sY9hTkKO0W70jI
dxl0+yQl+1BKLZAZqYD0k8C4oAFxzoeoz1NPFU5s7ZcUYZ6GkD8Z6QFeMCIndEYZ
fEGS/F2p+WxV+qP4/HiVNXv+o8BuD1HoQfpeDWFfJy2QsA3HDHgv7SVpoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKVpev/5dhocAHYP0V7WkPClA9JMB8GA1UdIwQY
MBaAFAquXD2EdD2s3ymRWLhNADykqi6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3E1Y1BZUjBQYXpmS1pGWXVFMEFQS1NxTHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wZGJjMDEtMzU5Ni00OGUxLThiMDgt
NTRmMDZjYjZjMTc1LzEvWXBXbDZfX2wyR2h3QWRnX1JYdGFROEtVRDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wZGJjMDEtMzU5Ni00OGUxLThiMDgtNTRmMDZjYjZjMTc1
LzEvQ3E1Y1BZUjBQYXpmS1pGWXVFMEFQS1NxTHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPZXMA0G
CSqGSIb3DQEBCwUAA4IBAQCIlAanISmmHuOsvSCsuCLZzkRmDVxT6e/eSlbcHCk0
mW++Pzy+LqI9vP/jTOxRAmby+i84pSL1AdGH8cqdDig1nsstxcS9A0kUI4ctHDZA
Xo5fgawuXAfrp1fGTUTXFxWoRw0PjiOWp8QM+mKpvoVjU2dQ/kAo9MQ24w2/xW5B
xnQOCbZblyHWPzUzdq/JItMxt4vMwyXkiIxB83KhPpnRWSCXsRg1PPPYnzZCILx/
KMAPawJxpUwDNm/BhpF9VZXwZOrvFv5jZAMqU45xZx2hevngG4mh9T2/3yIxJOCI
9Cs6vtFCSm/zrjMpP2Sly/kDBLYT0ZGjrsUVAqmlkbb5
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:11 2025 by rpki-client