Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/YZzS5ILZuTz3x6S74aHcYlYavBY.roa
File: YZzS5ILZuTz3x6S74aHcYlYavBY.roa (raw, json)
Hash identifier: oOLtJvX73+498ESNYkjMXtm//vyCW1ypIHrqJ0e04tg=
Subject key identifier: 61:9C:D2:E4:82:D9:B9:3C:F7:C7:A4:BB:E1:A1:DC:62:56:1A:BC:16
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 018CB0E74EDF78ACB06C200A382FFC5835B6
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/YZzS5ILZuTz3x6S74aHcYlYavBY.roa
Signing time: Thu 28 Dec 2023 14:49:58 +0000
ROA not before: Thu 28 Dec 2023 14:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24953
IP address blocks: 185.34.196.0/22 maxlen: 22
83.216.192.0/20 maxlen: 20
185.167.240.0/22 maxlen: 24
185.213.124.0/22 maxlen: 22
185.224.120.0/22 maxlen: 22
195.95.163.0/24 maxlen: 24
89.185.96.0/19 maxlen: 19
80.64.140.0/22 maxlen: 22
2a0b:c200::/29 maxlen: 29
2001:1ad0:c4fc::/46 maxlen: 48
2001:1ad0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:e7:4e:df:78:ac:b0:6c:20:0a:38:2f:fc:58:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Dec 28 14:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=619cd2e482d9b93cf7c7a4bbe1a1dc62561abc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:86:96:c9:fe:55:ab:76:cc:5f:a2:66:58:
d0:69:e2:05:b1:96:25:6e:15:1e:44:a9:6e:80:44:
d2:93:78:86:c9:f7:6d:8c:94:c8:a3:ee:fb:22:55:
99:f7:44:5d:a9:c5:0b:01:bb:e3:d4:a5:3f:ee:5e:
da:8b:00:ea:cd:11:21:8a:52:b5:26:70:8e:ea:27:
a5:ca:b1:67:9d:e7:85:62:7c:2a:05:5c:a7:d4:35:
28:68:59:f9:c8:b5:6c:af:6d:02:23:7f:2f:63:3c:
d8:4c:c4:a7:83:fc:a1:85:43:c8:1a:06:f4:ae:c4:
c3:78:78:ce:fd:1a:39:93:ba:ca:24:8a:06:1b:60:
dd:36:29:54:92:8e:43:63:bd:db:96:0c:df:c6:1f:
77:f4:9b:75:32:3b:d9:05:b8:86:45:3f:f9:ff:ab:
83:46:c7:ab:38:34:94:f0:66:a5:90:15:67:60:8f:
20:50:05:7d:8d:47:c9:e7:72:f6:3c:9b:d3:43:66:
5e:34:bb:30:cc:16:00:77:57:8a:d6:69:95:f8:ab:
fd:7d:49:11:54:54:fb:d7:df:13:bf:e8:33:c0:21:
99:90:24:e0:3d:4b:4d:0a:1a:a9:50:2f:80:b8:02:
0c:af:7a:a5:85:67:5c:83:2f:36:24:4d:c5:95:2d:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:D2:E4:82:D9:B9:3C:F7:C7:A4:BB:E1:A1:DC:62:56:1A:BC:16
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/YZzS5ILZuTz3x6S74aHcYlYavBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.140.0/22
83.216.192.0/20
89.185.96.0/19
185.34.196.0/22
185.167.240.0/22
185.213.124.0/22
185.224.120.0/22
195.95.163.0/24
IPv6:
2001:1ad0::/32
2a0b:c200::/29
Signature Algorithm: sha256WithRSAEncryption
81:5b:37:f0:8f:f8:98:4e:b4:ad:c0:54:8b:12:cc:e3:0b:48:
48:68:0e:c5:32:99:99:84:80:6e:c5:57:4d:96:94:99:61:cf:
49:5c:66:8b:63:fa:cc:95:ba:0f:aa:c1:31:ab:71:1a:b3:fe:
76:e4:ef:77:89:0b:3c:6b:f6:e4:88:bd:64:c7:b4:81:7d:0a:
09:c1:db:2e:94:49:4b:d0:0a:1a:60:18:ba:e5:53:c0:e9:48:
1e:63:d4:7e:1f:6e:a9:15:cf:2d:03:7a:0f:4e:f5:7a:c8:f0:
33:3b:ad:c3:68:04:89:f8:00:5f:9d:1f:12:9f:4d:b1:2e:bd:
9f:04:37:ed:fa:fc:a2:f6:32:22:8b:fe:6c:8a:fe:ea:ab:5d:
a0:e2:2c:26:1c:14:ee:1f:89:86:e0:74:19:99:8d:c7:b1:07:
83:14:9b:a3:09:0f:08:39:87:b9:8d:07:ac:d6:5c:76:66:f5:
af:df:ee:b0:c4:f7:f8:60:b9:5a:33:5e:e8:ae:84:a2:99:52:
f8:6b:1c:a6:57:bf:9f:aa:21:09:56:65:2a:00:72:cd:e4:d1:
e5:2a:0f:14:07:2b:26:25:67:93:87:d3:16:0e:e6:d2:d7:03:
3a:87:9d:ca:e9:1f:d0:fa:c9:e5:1d:81:91:c1:ab:8d:22:df:
fe:b5:0b:f9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYyw507feKywbCAKOC/8WDW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl
NjNmZWMwHhcNMjMxMjI4MTQ0OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTljZDJlNDgyZDliOTNjZjdjN2E0YmJlMWExZGM2MjU2MWFiYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJyGlsn+Vat2zF+iZljQaeIFsZYl
bhUeRKlugETSk3iGyfdtjJTIo+77IlWZ90RdqcULAbvj1KU/7l7aiwDqzREhilK1
JnCO6ielyrFnneeFYnwqBVyn1DUoaFn5yLVsr20CI38vYzzYTMSng/yhhUPIGgb0
rsTDeHjO/Ro5k7rKJIoGG2DdNilUko5DY73blgzfxh939Jt1MjvZBbiGRT/5/6uD
RserODSU8GalkBVnYI8gUAV9jUfJ53L2PJvTQ2ZeNLswzBYAd1eK1mmV+Kv9fUkR
VFT7198Tv+gzwCGZkCTgPUtNChqpUC+AuAIMr3qlhWdcgy82JE3FlS1LJQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFGGc0uSC2bk898eku+Gh3GJWGrwWMB8GA1UdIwQY
MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt
YmEwMzIzMjM3NDRjLzEvWVp6UzVJTFp1VHozeDZTNzRhSGNZbFlhdkJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj
LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQCUECMAwQE
U9jAAwQFWblgAwQCuSLEAwQCuafwAwQCudV8AwQCueB4AwQAw1+jMBQEAgACMA4D
BQAgARrQAwUDKgvCADANBgkqhkiG9w0BAQsFAAOCAQEAgVs38I/4mE60rcBUixLM
4wtISGgOxTKZmYSAbsVXTZaUmWHPSVxmi2P6zJW6D6rBMatxGrP+duTvd4kLPGv2
5Ii9ZMe0gX0KCcHbLpRJS9AKGmAYuuVTwOlIHmPUfh9uqRXPLQN6D071esjwMzut
w2gEifgAX50fEp9NsS69nwQ37fr8ovYyIov+bIr+6qtdoOIsJhwU7h+JhuB0GZmN
x7EHgxSbowkPCDmHuY0HrNZcdmb1r9/usMT3+GC5WjNe6K6EoplS+Gscple/n6oh
CVZlKgByzeTR5SoPFAcrJiVnk4fTFg7m0tcDOoedyukf0PrJ5R2BkcGrjSLf/rUL
+Q==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:41 2025 by rpki-client