Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/YZT91dF4xr43AKyUTxp2NwD9bJg.roa
File: YZT91dF4xr43AKyUTxp2NwD9bJg.roa (raw, json)
Hash identifier: NmVVG/fLY9hJPP970EwATAuiWCPg1XDhyOCpygIQLck=
Subject key identifier: 61:94:FD:D5:D1:78:C6:BE:37:00:AC:94:4F:1A:76:37:00:FD:6C:98
Certificate issuer: /CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Certificate serial: 01856D017AAF0569FD058172AF6523E67891
Authority key identifier: 7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/YZT91dF4xr43AKyUTxp2NwD9bJg.roa
Signing time: Sun 01 Jan 2023 11:04:51 +0000
ROA not before: Sun 01 Jan 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57795
IP address blocks: 31.25.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:7a:af:05:69:fd:05:81:72:af:65:23:e6:78:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac8d7f4b75170607bfcf8439c2e1d03a21410d
Validity
Not Before: Jan 1 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6194fdd5d178c6be3700ac944f1a763700fd6c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:24:1a:a9:25:a0:3c:ec:1b:7e:ef:7d:f0:
96:7d:32:66:9f:0d:1f:8c:99:21:94:5f:ba:38:ed:
a1:5d:84:d9:d4:cc:9f:d8:23:61:8a:24:5a:9a:47:
4f:ac:98:75:d3:d8:ec:c1:1b:d2:cc:d1:48:e9:1c:
87:61:7e:70:0e:fb:cb:fb:5a:5c:66:a7:fa:f3:4a:
c0:1b:fa:a3:ca:e0:7c:ae:3a:21:ff:aa:b1:7c:f1:
40:b7:fd:3e:5d:03:62:90:0c:3a:d6:ea:c0:a1:93:
94:a5:0c:1d:41:b3:17:fb:1f:e9:58:3f:15:f7:d4:
13:25:13:af:d7:87:4f:3c:7c:df:e5:a2:bf:a8:b0:
f2:da:a0:69:54:fa:20:59:53:ac:ae:37:52:2d:c6:
6c:a8:cd:cf:66:d9:4c:bc:f7:d1:30:71:ff:7d:0f:
d3:bf:b0:98:95:d0:0f:9b:6d:8b:02:f4:b4:71:7e:
6b:25:74:6c:02:f4:bc:1b:b9:ef:fd:ba:40:25:2d:
e1:48:60:63:0a:78:ad:a6:b8:54:44:75:13:09:d7:
da:ca:c6:a9:5b:92:98:ce:f3:35:52:cd:59:53:bd:
2a:ac:e0:f2:e9:e0:e8:1a:55:b8:53:59:e5:e0:d1:
5e:1f:49:fa:af:db:29:aa:e8:71:5b:a4:a8:ed:b2:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:FD:D5:D1:78:C6:BE:37:00:AC:94:4F:1A:76:37:00:FD:6C:98
X509v3 Authority Key Identifier:
keyid:7C:AC:8D:7F:4B:75:17:06:07:BF:CF:84:39:C2:E1:D0:3A:21:41:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKyNf0t1FwYHv8-EOcLh0DohQQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/YZT91dF4xr43AKyUTxp2NwD9bJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97913c-748e-4fd1-9194-208fcfdfb201/1/fKyNf0t1FwYHv8-EOcLh0DohQQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6b:f9:97:b9:3f:04:37:19:1f:12:08:cc:ee:dc:d0:e9:bd:
f5:d9:a2:85:c3:7a:ed:26:39:a7:1d:31:55:f3:af:6f:db:45:
47:69:1d:7d:e9:cc:7c:a1:0f:eb:32:a5:96:ad:98:12:fb:f5:
0a:20:89:61:09:87:f4:c8:9c:56:06:ab:8a:55:d8:f7:2b:b6:
5a:23:c8:e4:8b:7f:1c:1b:68:d1:dd:a4:4e:c2:d5:20:7c:0f:
18:4a:8c:30:73:ee:96:2d:63:d6:b8:5e:03:46:83:ba:0b:12:
ff:d9:a1:07:1b:be:79:c6:10:c8:64:e2:ba:e9:0f:9a:4a:ec:
12:dd:04:c5:a5:d5:6f:e9:da:a5:94:f3:92:fc:33:b6:f3:a9:
e3:6b:70:a0:df:bd:b3:3e:11:af:a1:22:b5:0c:4d:da:cc:a5:
16:f1:ba:44:8a:c5:25:52:95:74:6a:90:7b:08:bb:84:70:5b:
3b:b6:c4:3a:bc:b7:8c:f2:df:ba:86:5e:13:d4:3f:e0:60:60:
57:80:c9:5d:01:c5:1c:1a:3d:3f:15:76:14:f6:ef:84:f8:26:
2d:fe:18:b5:1b:1f:98:26:9c:44:ac:80:16:4b:39:d5:23:31:
38:e3:d9:93:f3:24:36:cb:bc:ec:3a:7a:06:17:ed:0e:e8:70:
e3:9f:6e:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAXqvBWn9BYFyr2Uj5niRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYWM4ZDdmNGI3NTE3MDYwN2JmY2Y4NDM5YzJlMWQwM2Ey
MTQxMGQwHhcNMjMwMTAxMTEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk0ZmRkNWQxNzhjNmJlMzcwMGFjOTQ0ZjFhNzYzNzAwZmQ2Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKokGqkloDzsG37vffCWfTJmnw0f
jJkhlF+6OO2hXYTZ1Myf2CNhiiRamkdPrJh109jswRvSzNFI6RyHYX5wDvvL+1pc
Zqf680rAG/qjyuB8rjoh/6qxfPFAt/0+XQNikAw61urAoZOUpQwdQbMX+x/pWD8V
99QTJROv14dPPHzf5aK/qLDy2qBpVPogWVOsrjdSLcZsqM3PZtlMvPfRMHH/fQ/T
v7CYldAPm22LAvS0cX5rJXRsAvS8G7nv/bpAJS3hSGBjCnitprhURHUTCdfaysap
W5KYzvM1Us1ZU70qrODy6eDoGlW4U1nl4NFeH0n6r9spquhxW6So7bIIHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGU/dXReMa+NwCslE8adjcA/WyYMB8GA1UdIwQY
MBaAFHysjX9LdRcGB7/PhDnC4dA6IUENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkt5TmYwdDFGd1lIdjgtRU9jTGgwRG9oUVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85NzkxM2MtNzQ4ZS00ZmQxLTkxOTQt
MjA4ZmNmZGZiMjAxLzEvWVpUOTFkRjR4cjQzQUt5VVR4cDJOd0Q5YkpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85NzkxM2MtNzQ4ZS00ZmQxLTkxOTQtMjA4ZmNmZGZiMjAx
LzEvZkt5TmYwdDFGd1lIdjgtRU9jTGgwRG9oUVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxk4MA0G
CSqGSIb3DQEBCwUAA4IBAQCka/mXuT8ENxkfEgjM7tzQ6b312aKFw3rtJjmnHTFV
869v20VHaR196cx8oQ/rMqWWrZgS+/UKIIlhCYf0yJxWBquKVdj3K7ZaI8jki38c
G2jR3aROwtUgfA8YSowwc+6WLWPWuF4DRoO6CxL/2aEHG755xhDIZOK66Q+aSuwS
3QTFpdVv6dqllPOS/DO286nja3Cg372zPhGvoSK1DE3azKUW8bpEisUlUpV0apB7
CLuEcFs7tsQ6vLeM8t+6hl4T1D/gYGBXgMldAcUcGj0/FXYU9u+E+CYt/hi1Gx+Y
JpxErIAWSznVIzE449mT8yQ2y7zsOnoGF+0O6HDjn25J
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org