Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa
File: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (raw, json)
Hash identifier: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=
Subject key identifier: 61:97:56:D4:54:E8:BB:F7:FE:47:4A:5B:A4:5E:57:67:84:F1:DE:18
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019427487090F189AB4579ABC6E84707A5DE
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43386
IP address blocks: 81.6.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:70:90:f1:89:ab:45:79:ab:c6:e8:47:07:a5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=619756d454e8bbf7fe474a5ba45e576784f1de18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:4e:d6:06:77:a6:7d:55:4f:e9:df:46:48:
7d:b9:e1:6a:6f:a1:b8:c8:fc:13:68:a3:7c:5f:cd:
fe:44:72:22:25:3f:b8:ce:6b:c4:ef:3c:ed:12:d4:
b1:e4:09:05:ed:6a:13:b9:27:f7:bf:3a:7f:b8:67:
f3:2a:a5:ac:2e:6a:69:d2:f1:9e:04:94:31:64:dc:
28:4f:77:72:67:af:cb:2b:fe:ab:1c:cf:6a:50:f4:
ce:5b:df:33:20:98:a1:84:1d:a7:a4:a5:92:9c:f4:
57:a2:6b:54:13:54:ca:63:51:77:66:b5:4a:bc:1b:
7d:48:a7:f4:2c:fd:88:75:47:a3:00:7a:1a:22:dc:
a1:79:5e:2b:fc:08:cc:07:5b:36:ef:b5:1e:ff:1e:
ac:55:2e:35:4a:64:ce:aa:9b:b4:c3:ca:6d:ac:48:
75:15:d9:51:93:20:41:36:cb:cf:1d:bb:ff:51:b1:
c5:86:fc:76:de:08:0f:b2:76:c9:e9:17:79:6d:e6:
c0:88:2b:bf:38:75:38:15:21:b8:52:e7:41:3c:30:
df:ac:0a:e2:85:a8:a5:f0:83:3c:48:5d:52:0b:3d:
25:32:0c:ce:18:9d:9a:c2:54:27:1e:18:98:7f:ed:
37:6d:b7:bc:af:6a:55:5a:0b:35:09:e8:a1:fd:6d:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:97:56:D4:54:E8:BB:F7:FE:47:4A:5B:A4:5E:57:67:84:F1:DE:18
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.139.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c5:bf:9c:1b:6c:f9:07:ce:cb:f1:66:a3:c5:3e:58:14:65:
49:97:aa:db:bf:b2:9b:f9:ba:01:a2:e2:cb:6d:3d:f3:85:44:
e2:08:d3:b5:ca:a7:32:30:a7:ca:8b:10:b6:b6:c2:d4:39:2b:
8b:2b:84:43:9d:c9:d9:6c:0e:11:b1:41:14:8c:31:ab:d5:84:
49:70:76:58:97:c2:6e:0a:b1:98:c1:0f:a3:0e:65:79:6e:54:
85:5c:54:c0:03:a2:f5:35:6f:5c:73:00:ea:b4:05:77:74:c8:
ad:68:9f:a7:95:ae:55:a9:d9:1b:fc:be:65:26:e2:e5:35:1c:
8f:e6:92:90:68:ec:a5:f2:a2:83:75:bc:cb:7d:12:65:ff:12:
34:b0:62:b1:6a:65:e4:2c:f0:84:41:d7:22:ce:cb:2d:53:98:
2e:b7:45:20:03:52:94:56:f6:c5:78:80:6e:f5:91:09:7c:74:
2c:bb:8e:f0:0e:68:35:9a:ad:f9:83:03:bf:83:74:84:d5:d2:
da:2f:e6:37:19:ab:4b:b9:74:74:73:67:f3:3f:2e:aa:c1:8a:
8f:48:aa:e5:4f:03:45:26:84:1f:d1:16:e3:8b:d6:bc:74:4f:
2c:29:9a:d3:8e:99:bb:1b:9c:e4:af:51:b8:c4:f0:23:36:c3:
26:d3:39:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSHCQ8YmrRXmrxuhHB6XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy
ZDE2MGMwHhcNMjUwMTAyMTM1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk3NTZkNDU0ZThiYmY3ZmU0NzRhNWJhNDVlNTc2Nzg0ZjFkZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl5O1gZ3pn1VT+nfRkh9ueFqb6G4
yPwTaKN8X83+RHIiJT+4zmvE7zztEtSx5AkF7WoTuSf3vzp/uGfzKqWsLmpp0vGe
BJQxZNwoT3dyZ6/LK/6rHM9qUPTOW98zIJihhB2npKWSnPRXomtUE1TKY1F3ZrVK
vBt9SKf0LP2IdUejAHoaItyheV4r/AjMB1s277Ue/x6sVS41SmTOqpu0w8ptrEh1
FdlRkyBBNsvPHbv/UbHFhvx23ggPsnbJ6Rd5bebAiCu/OHU4FSG4UudBPDDfrAri
hail8IM8SF1SCz0lMgzOGJ2awlQnHhiYf+03bbe8r2pVWgs1Ceih/W3DOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGGXVtRU6Lv3/kdKW6ReV2eE8d4YMB8GA1UdIwQY
MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt
YjU3MDkwN2I1OWViLzEvWVpkVzFGVG91X2YtUjBwYnBGNVhaNFR4M2hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi
LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQaLMA0G
CSqGSIb3DQEBCwUAA4IBAQCSxb+cG2z5B87L8WajxT5YFGVJl6rbv7Kb+boBouLL
bT3zhUTiCNO1yqcyMKfKixC2tsLUOSuLK4RDncnZbA4RsUEUjDGr1YRJcHZYl8Ju
CrGYwQ+jDmV5blSFXFTAA6L1NW9ccwDqtAV3dMitaJ+nla5Vqdkb/L5lJuLlNRyP
5pKQaOyl8qKDdbzLfRJl/xI0sGKxamXkLPCEQdcizsstU5gut0UgA1KUVvbFeIBu
9ZEJfHQsu47wDmg1mq35gwO/g3SE1dLaL+Y3GatLuXR0c2fzPy6qwYqPSKrlTwNF
JoQf0Rbji9a8dE8sKZrTjpm7G5zkr1G4xPAjNsMm0zmA
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:06 2025 by rpki-client