Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ytKHxZpyeDbK6lK2QZ52YtOzEj8.roa
File: ytKHxZpyeDbK6lK2QZ52YtOzEj8.roa (raw, json)
Hash identifier: akH5oW/AXHhMURWCwAjcSeT05zp2SFgjAj3NMRgwFiU=
Subject key identifier: CA:D2:87:C5:9A:72:78:36:CA:EA:52:B6:41:9E:76:62:D3:B3:12:3F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6BF0DA1AA94C1D3770912071EA34F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ytKHxZpyeDbK6lK2QZ52YtOzEj8.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49608
IP address blocks: 93.113.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bf:0d:a1:aa:94:c1:d3:77:09:12:07:1e:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cad287c59a727836caea52b6419e7662d3b3123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:a5:a9:6d:c2:d5:51:20:8f:cb:1a:de:1f:
03:c7:a3:f8:a3:60:2e:8d:fc:a7:0b:57:75:0d:64:
89:9d:85:e7:a3:1e:dc:40:c8:bd:da:f4:6d:a2:0f:
bf:26:7b:ff:e9:81:65:5e:9f:9b:bf:92:f3:9b:4f:
f5:05:f5:a2:3e:05:9a:c4:9f:51:ee:1b:51:6b:b9:
04:cc:9d:1c:7f:17:d1:fe:9f:5f:d1:5a:34:8a:38:
de:b0:64:2b:0f:4b:12:11:2f:c7:ab:ba:33:bf:1e:
8c:4c:f3:02:99:c5:8c:77:e1:70:4a:d0:29:ca:5f:
eb:a4:22:7b:64:f5:c2:5c:60:8a:ec:6d:ed:a1:89:
af:16:e6:1e:38:5e:ff:8e:9f:ef:92:1c:51:b6:ef:
e9:e4:35:9b:69:63:f3:38:fe:86:1e:45:6b:08:b1:
2a:5e:70:4b:18:56:13:2c:1e:69:d4:ac:c7:f5:30:
38:fd:3d:cf:85:88:fb:8e:ff:09:5a:0a:92:df:f9:
aa:6f:30:6a:b2:fb:5d:2b:4b:62:37:2b:72:3e:04:
aa:42:5f:66:e4:eb:0b:fc:a9:c4:d7:b1:25:df:79:
e7:0b:41:5f:46:14:7e:81:58:35:49:da:cd:88:49:
2b:76:94:12:0b:8e:ef:d6:5e:76:20:52:cc:e1:d2:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:87:C5:9A:72:78:36:CA:EA:52:B6:41:9E:76:62:D3:B3:12:3F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ytKHxZpyeDbK6lK2QZ52YtOzEj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b4:da:46:12:c2:24:c5:30:8c:d3:3e:dd:1a:b1:f3:70:ed:
e8:a5:ac:fc:56:d9:fc:c6:5b:e8:f9:3b:74:c6:76:27:6f:86:
77:39:4f:e4:23:88:e5:05:f4:c3:08:9a:26:04:de:dd:bc:46:
f9:29:61:25:62:cc:cd:a7:7d:00:a2:83:ab:6d:68:9b:00:ef:
e2:25:21:00:74:b0:58:ea:d6:da:e1:7f:14:59:5e:0a:99:9b:
f3:9c:20:b0:7a:9d:ee:3c:c6:97:05:5f:f2:4d:09:64:44:f8:
f7:05:be:49:b1:20:f1:ba:ce:a2:14:6d:4e:14:89:46:9b:2f:
dd:d5:3b:ee:e9:81:b7:29:d9:25:f2:f1:9e:d4:21:7f:4b:59:
5c:d4:d5:06:b6:9a:4e:61:84:89:cf:ed:e3:6f:8f:82:10:b0:
a3:1f:57:7e:d9:14:62:ac:5d:eb:2a:f1:b5:99:8c:c1:af:3e:
4d:4a:6d:5d:04:e9:52:18:64:43:3b:05:19:38:88:d6:81:6f:
be:2d:87:89:78:8d:17:86:02:22:37:2e:6e:d5:7f:21:3a:bd:
0b:e5:3d:a9:c9:4a:f5:cb:b8:8e:62:97:e1:3c:c4:52:e4:68:
c0:c2:a9:f0:d1:58:d3:11:a4:25:07:4e:ea:49:9b:23:b8:b7:
6a:bf:48:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1r8NoaqUwdN3CRIHHqNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWQyODdjNTlhNzI3ODM2Y2FlYTUyYjY0MTllNzY2MmQzYjMxMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EalqW3C1VEgj8sa3h8Dx6P4o2Au
jfynC1d1DWSJnYXnox7cQMi92vRtog+/Jnv/6YFlXp+bv5Lzm0/1BfWiPgWaxJ9R
7htRa7kEzJ0cfxfR/p9f0Vo0ijjesGQrD0sSES/Hq7ozvx6MTPMCmcWMd+FwStAp
yl/rpCJ7ZPXCXGCK7G3toYmvFuYeOF7/jp/vkhxRtu/p5DWbaWPzOP6GHkVrCLEq
XnBLGFYTLB5p1KzH9TA4/T3PhYj7jv8JWgqS3/mqbzBqsvtdK0tiNytyPgSqQl9m
5OsL/KnE17El33nnC0FfRhR+gVg1SdrNiEkrdpQSC47v1l52IFLM4dLORwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrSh8Wacng2yupStkGedmLTsxI/MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEveXRLSHhacHllRGJLNmxLMlFaNTJZdE96RWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXGxMA0G
CSqGSIb3DQEBCwUAA4IBAQBAtNpGEsIkxTCM0z7dGrHzcO3opaz8Vtn8xlvo+Tt0
xnYnb4Z3OU/kI4jlBfTDCJomBN7dvEb5KWElYszNp30AooOrbWibAO/iJSEAdLBY
6tba4X8UWV4KmZvznCCwep3uPMaXBV/yTQlkRPj3Bb5JsSDxus6iFG1OFIlGmy/d
1Tvu6YG3Kdkl8vGe1CF/S1lc1NUGtppOYYSJz+3jb4+CELCjH1d+2RRirF3rKvG1
mYzBrz5NSm1dBOlSGGRDOwUZOIjWgW++LYeJeI0XhgIiNy5u1X8hOr0L5T2pyUr1
y7iOYpfhPMRS5GjAwqnw0VjTEaQlB07qSZsjuLdqv0iK
-----END CERTIFICATE-----
Generated at Fri Apr 11 07:36:38 2025 by rpki-client