Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2YayUehGTLbb-B5szC8z3eKUQxs.roa
File: 2YayUehGTLbb-B5szC8z3eKUQxs.roa (raw, json)
Hash identifier: uOnh8xCpdXTrzxuORRdzJyo8axVyufTbh2WaXBAy71M=
Subject key identifier: D9:86:B2:51:E8:46:4C:B6:DB:F8:1E:6C:CC:2F:33:DD:E2:94:43:1B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2311932D31D6AF358B778DF8913D6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2YayUehGTLbb-B5szC8z3eKUQxs.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 85.208.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:31:19:32:d3:1d:6a:f3:58:b7:78:df:89:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d986b251e8464cb6dbf81e6ccc2f33dde294431b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:c8:09:3c:87:86:39:91:0c:20:4b:7d:4b:
a0:bb:ee:9b:38:1d:c4:ff:dd:5b:4e:14:9d:64:b6:
b8:9d:4e:a4:49:8f:94:9b:d8:d3:7d:cb:b9:70:87:
b9:f7:85:b6:21:be:41:4a:3a:1e:ef:ae:ca:4a:a5:
ee:ee:ff:10:86:7e:d8:ed:62:d5:95:79:cf:7a:03:
1c:d8:b9:14:f6:cb:e4:08:46:43:f5:e9:93:48:b1:
16:f8:13:a1:7a:be:c8:48:af:ee:2f:a4:d6:cd:f9:
57:2d:ae:36:ed:3b:d6:cd:41:ca:83:78:66:b6:74:
5e:cb:40:e9:a1:9e:6e:2d:92:de:1d:d4:16:82:44:
f2:b2:b3:85:64:66:3e:b0:ec:c8:1e:5b:8c:41:74:
db:99:93:ac:a1:90:68:97:1e:da:e2:09:21:d5:1b:
fb:2c:9e:a3:d7:bb:84:44:a5:7e:8d:c5:1b:5a:eb:
de:41:0f:1a:e6:cd:2d:ef:96:f4:21:f3:07:97:57:
37:b8:67:ca:a3:bf:b3:83:4e:aa:80:ed:4d:30:0c:
86:67:db:60:35:fd:67:5d:2d:1c:10:16:49:dc:cb:
d2:9a:aa:d0:63:4a:6c:d2:21:bf:85:6b:a6:59:0d:
43:93:97:14:1e:ac:bf:70:76:5b:dc:56:67:bd:cc:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:86:B2:51:E8:46:4C:B6:DB:F8:1E:6C:CC:2F:33:DD:E2:94:43:1B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2YayUehGTLbb-B5szC8z3eKUQxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6b:67:8c:90:cf:ff:55:6b:ac:92:5d:88:6d:83:6b:ff:fe:
50:da:a9:82:6f:40:1c:00:ca:ba:63:88:44:83:36:13:40:86:
c8:06:de:ac:8a:60:db:0a:87:75:83:88:f8:cc:d0:9c:8c:81:
50:13:a5:4d:fe:93:d6:73:ab:13:1c:ae:4d:c8:e0:34:94:e4:
3b:00:d2:52:e0:39:d2:04:3d:c5:1d:27:b2:6d:b4:a2:fe:36:
a2:b6:9b:aa:30:ea:ea:27:2e:45:cc:c5:aa:02:ca:63:c5:84:
96:92:42:4f:75:0e:5d:43:1d:0f:10:af:4f:92:74:76:1f:3a:
b2:11:26:75:b1:05:21:ca:a5:2d:40:71:23:81:31:c1:65:d6:
30:ac:a8:42:d8:63:d2:c0:b3:64:0e:42:25:99:4f:75:35:7c:
7a:0c:39:e0:4d:c2:83:16:72:09:92:a1:fe:b3:9e:01:71:29:
a0:44:10:9e:1e:85:f1:69:a1:7c:7a:84:a9:25:47:f1:08:b0:
78:33:16:ab:c2:af:87:76:4b:62:75:a2:0b:13:a8:73:0f:ca:
5e:a3:2c:2d:b2:ee:70:43:e8:2a:11:db:b7:ad:d6:3d:dd:3f:
98:10:c5:ca:12:7f:ff:ac:68:8b:23:7a:4e:10:86:7b:4e:34:
74:b8:5b:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsjEZMtMdavNYt3jfiRPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTg2YjI1MWU4NDY0Y2I2ZGJmODFlNmNjYzJmMzNkZGUyOTQ0MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ODICTyHhjmRDCBLfUugu+6bOB3E
/91bThSdZLa4nU6kSY+Um9jTfcu5cIe594W2Ib5BSjoe767KSqXu7v8Qhn7Y7WLV
lXnPegMc2LkU9svkCEZD9emTSLEW+BOher7ISK/uL6TWzflXLa427TvWzUHKg3hm
tnRey0DpoZ5uLZLeHdQWgkTysrOFZGY+sOzIHluMQXTbmZOsoZBolx7a4gkh1Rv7
LJ6j17uERKV+jcUbWuveQQ8a5s0t75b0IfMHl1c3uGfKo7+zg06qgO1NMAyGZ9tg
Nf1nXS0cEBZJ3MvSmqrQY0ps0iG/hWumWQ1Dk5cUHqy/cHZb3FZnvcyaAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmGslHoRky22/gebMwvM93ilEMbMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMllheVVlaEdUTGJiLUI1c3pDOHozZUtVUXhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBpMA0G
CSqGSIb3DQEBCwUAA4IBAQBUa2eMkM//VWuskl2IbYNr//5Q2qmCb0AcAMq6Y4hE
gzYTQIbIBt6simDbCod1g4j4zNCcjIFQE6VN/pPWc6sTHK5NyOA0lOQ7ANJS4DnS
BD3FHSeybbSi/jaitpuqMOrqJy5FzMWqAspjxYSWkkJPdQ5dQx0PEK9PknR2Hzqy
ESZ1sQUhyqUtQHEjgTHBZdYwrKhC2GPSwLNkDkIlmU91NXx6DDngTcKDFnIJkqH+
s54BcSmgRBCeHoXxaaF8eoSpJUfxCLB4Mxarwq+HdktidaILE6hzD8peoywtsu5w
Q+gqEdu3rdY93T+YEMXKEn//rGiLI3pOEIZ7TjR0uFt6
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:38 2025 by rpki-client