Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/yqQz2IsKQ7pg4y2EENErlYnu65I.roa
File: yqQz2IsKQ7pg4y2EENErlYnu65I.roa (raw, json)
Hash identifier: 3bFflKEwuUHPYtPrbotsuT6N+1ZC/V/hbgoTc6FAPLA=
Subject key identifier: CA:A4:33:D8:8B:0A:43:BA:60:E3:2D:84:10:D1:2B:95:89:EE:EB:92
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0194221F62D73A2BEB00B72D81EC1FE51F47
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/yqQz2IsKQ7pg4y2EENErlYnu65I.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43882
IP address blocks: 79.133.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:62:d7:3a:2b:eb:00:b7:2d:81:ec:1f:e5:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caa433d88b0a43ba60e32d8410d12b9589eeeb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:f2:67:35:64:c3:85:1f:03:b1:11:75:c3:
dd:75:ff:fa:77:b0:9e:ec:6a:92:24:62:5c:73:0c:
cb:69:94:d8:fc:8e:db:89:cc:fe:b9:4a:c7:3b:14:
8b:42:c5:68:68:85:9d:27:79:6f:fb:9b:a4:1c:d6:
d1:11:cf:4b:e3:e9:aa:13:72:97:30:e8:c4:97:61:
33:4c:af:1d:4a:10:b5:a7:01:37:d0:a7:b7:dd:c6:
b1:fe:1e:ee:49:55:55:b8:8c:0e:76:6a:09:97:85:
b7:fc:60:f2:b2:32:b6:d6:4c:b0:0b:c2:37:f9:ea:
40:63:8a:bc:54:50:e5:49:8e:6d:0b:7e:4a:d1:95:
f3:34:3b:54:e6:fa:da:e1:95:03:85:4d:8b:27:e2:
19:32:36:df:f2:d9:e1:38:e0:5d:c7:c9:30:fe:f4:
eb:69:77:ef:e5:b7:c0:b0:32:13:c4:26:90:90:63:
69:1c:e1:12:6c:08:20:bf:cb:f3:51:63:d9:d9:b9:
00:ec:44:04:c5:a3:8f:60:71:31:a4:62:bc:ec:8b:
84:96:03:17:e4:ce:c4:53:f5:28:6b:0f:56:9f:a2:
ce:5a:ca:f9:9a:e3:ae:d3:1d:7f:40:0a:06:eb:98:
66:80:46:5d:74:c9:4d:3a:71:3a:a6:0a:fb:4b:6c:
18:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:33:D8:8B:0A:43:BA:60:E3:2D:84:10:D1:2B:95:89:EE:EB:92
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/yqQz2IsKQ7pg4y2EENErlYnu65I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.160.0/20
Signature Algorithm: sha256WithRSAEncryption
00:ad:da:0a:21:0f:d1:0a:cb:60:75:ec:c3:98:ac:b5:88:f8:
0b:2b:92:b0:5a:49:30:63:96:2a:88:1a:44:d9:30:fa:0b:0a:
5b:d4:a7:86:1f:67:7d:49:db:a6:04:1f:aa:f2:54:da:e8:37:
7f:a2:d7:e1:6b:a1:1b:94:98:e5:92:5a:7d:ba:d5:08:cd:61:
d3:22:1f:c6:3b:76:05:04:c1:43:8e:19:85:75:aa:67:6a:f8:
eb:b4:66:1c:8c:bb:ef:6e:4a:23:6c:e2:42:b8:11:80:40:94:
f6:2f:f1:e4:38:1f:bf:17:34:ed:53:d3:d5:b6:72:76:61:28:
e7:64:e3:6e:21:25:b3:93:dd:9c:fa:b7:ab:72:4e:3b:20:8a:
04:47:b0:26:db:92:3b:20:e6:46:d1:03:cf:06:bb:08:be:b0:
71:4b:d2:9e:eb:0a:bb:ba:e3:10:68:4b:91:7d:db:61:7e:19:
d5:2d:fc:3c:a1:06:50:a8:5e:12:ae:b2:89:4c:ff:36:bc:e8:
c8:f0:ba:fb:91:66:f7:2f:8d:c1:cf:79:15:52:41:45:e4:03:
b3:f1:d8:25:92:7c:e5:58:97:3e:4c:98:21:1e:78:c2:85:0c:
b5:f9:d2:a1:f0:a9:e2:3d:6b:87:da:8e:f2:6d:6b:01:7a:28:
80:16:39:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH2LXOivrALctgewf5R9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy
MTYxNWEwHhcNMjUwMTAxMTM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWE0MzNkODhiMGE0M2JhNjBlMzJkODQxMGQxMmI5NTg5ZWVlYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj7yZzVkw4UfA7ERdcPddf/6d7Ce
7GqSJGJccwzLaZTY/I7bicz+uUrHOxSLQsVoaIWdJ3lv+5ukHNbREc9L4+mqE3KX
MOjEl2EzTK8dShC1pwE30Ke33cax/h7uSVVVuIwOdmoJl4W3/GDysjK21kywC8I3
+epAY4q8VFDlSY5tC35K0ZXzNDtU5vra4ZUDhU2LJ+IZMjbf8tnhOOBdx8kw/vTr
aXfv5bfAsDITxCaQkGNpHOESbAggv8vzUWPZ2bkA7EQExaOPYHExpGK87IuElgMX
5M7EU/Uoaw9Wn6LOWsr5muOu0x1/QAoG65hmgEZddMlNOnE6pgr7S2wYEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMqkM9iLCkO6YOMthBDRK5WJ7uuSMB8GA1UdIwQY
MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt
Y2M1ODA1MjFkMDBmLzEveXFRejJJc0tRN3BnNHkyRUVORXJsWW51NjVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm
LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQET4WgMA0G
CSqGSIb3DQEBCwUAA4IBAQAArdoKIQ/RCstgdezDmKy1iPgLK5KwWkkwY5YqiBpE
2TD6Cwpb1KeGH2d9SdumBB+q8lTa6Dd/otfha6EblJjlklp9utUIzWHTIh/GO3YF
BMFDjhmFdapnavjrtGYcjLvvbkojbOJCuBGAQJT2L/HkOB+/FzTtU9PVtnJ2YSjn
ZONuISWzk92c+rerck47IIoER7Am25I7IOZG0QPPBrsIvrBxS9Ke6wq7uuMQaEuR
fdthfhnVLfw8oQZQqF4SrrKJTP82vOjI8Lr7kWb3L43Bz3kVUkFF5AOz8dglknzl
WJc+TJghHnjChQy1+dKh8KniPWuH2o7ybWsBeiiAFjlc
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:05 2025 by rpki-client