Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/yeYKzE19QixLp9fOhOCf0Dn5v3w.roa
File: yeYKzE19QixLp9fOhOCf0Dn5v3w.roa (raw, json)
Hash identifier: 5PmVL8MydhFSPIhreNbyb4ICyWy/Qu3js7ceXXSrhEw=
Subject key identifier: C9:E6:0A:CC:4D:7D:42:2C:4B:A7:D7:CE:84:E0:9F:D0:39:F9:BF:7C
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 018572E81C32270615E2779F7A173AA9C928
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/yeYKzE19QixLp9fOhOCf0Dn5v3w.roa
Signing time: Mon 02 Jan 2023 14:34:52 +0000
ROA not before: Mon 02 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42065
IP address blocks: 83.243.64.0/21 maxlen: 21
83.243.64.0/22 maxlen: 24
83.243.70.0/23 maxlen: 24
83.243.68.0/24 maxlen: 24
193.218.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:1c:32:27:06:15:e2:77:9f:7a:17:3a:a9:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 2 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9e60acc4d7d422c4ba7d7ce84e09fd039f9bf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:e6:32:6e:8d:f5:06:e8:86:1d:9f:ce:91:
41:df:92:22:46:f3:28:3c:ca:fe:67:38:e8:2d:30:
12:70:0d:bb:ca:13:b8:d0:a2:7e:02:60:a8:bb:f4:
4d:e3:b8:45:7c:52:a1:b0:57:bf:6b:2c:5e:4c:0c:
2b:17:e7:bd:ee:4f:68:cf:4b:ac:8c:30:e8:5c:a3:
ab:9f:2b:ec:8d:fb:de:8e:33:34:66:4b:13:63:ee:
92:7e:ea:6a:48:c9:c7:21:cf:50:79:70:78:17:61:
fc:00:5f:f8:2c:9d:21:03:73:81:87:68:76:42:e1:
ce:a8:14:48:34:db:bd:33:07:a0:bd:79:40:88:b3:
e9:67:9b:c9:14:7e:11:42:1f:25:ba:18:3d:df:7f:
4a:84:37:67:7b:c5:a6:03:4c:e7:b5:17:93:81:bc:
2d:6d:75:3b:58:9c:6c:38:6c:f0:84:79:c7:32:97:
47:bb:82:d5:c8:b0:73:d1:d9:b2:8b:37:01:96:c8:
b4:e6:6e:d6:b6:d8:eb:f6:2b:b7:8e:c3:40:3d:2b:
33:e0:ac:5f:e4:34:ed:2d:72:97:57:5a:a7:00:5b:
b7:36:89:5e:23:75:da:03:32:28:82:52:2b:64:48:
cd:3f:aa:a3:c9:83:f7:0b:5f:04:b4:07:8b:1e:fe:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:0A:CC:4D:7D:42:2C:4B:A7:D7:CE:84:E0:9F:D0:39:F9:BF:7C
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/yeYKzE19QixLp9fOhOCf0Dn5v3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.64.0/21
193.218.140.0/22
Signature Algorithm: sha256WithRSAEncryption
61:b9:19:1b:2f:b4:21:a1:2e:13:05:24:fb:1f:89:27:0e:40:
98:aa:44:63:2c:68:9d:ec:64:fe:02:71:39:a3:c5:2e:63:d3:
12:e4:48:bd:43:2e:66:2e:9e:fd:81:d3:fb:63:c7:d0:c9:91:
f7:1e:56:10:df:41:c7:82:da:8f:1d:ea:4c:6f:ef:31:41:0a:
38:37:be:35:b5:bf:0f:26:c0:94:e3:cc:5d:df:bf:59:09:75:
35:9e:0c:26:ac:25:74:6e:c8:fc:91:b7:d9:5f:27:6f:99:c0:
69:7d:1d:69:a1:86:80:37:ad:d3:93:0f:37:81:18:e3:e5:55:
31:f2:82:a7:ba:ed:de:5d:a4:13:f0:da:ab:72:dc:8d:fb:51:
6a:f2:04:44:97:0e:72:cd:2d:f1:52:41:6e:d1:c4:f4:94:96:
df:ef:61:62:bc:e1:32:53:c1:e9:29:5d:b8:be:b9:32:7b:70:
be:9b:1a:e3:1d:23:34:f5:02:08:fa:8d:f5:5d:fe:95:c0:a5:
5f:03:d9:6b:9d:4d:0e:fa:66:92:09:d1:96:bb:d9:29:57:cd:
08:5b:d6:b5:a7:8f:cc:ee:ce:86:1d:8d:cd:c7:2b:5b:5c:62:
cf:d4:90:32:34:7c:e8:85:6a:2d:a0:5c:b2:52:04:68:90:d6:
8d:39:3f:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVy6BwyJwYV4nefehc6qckoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0
NGNhMWEwHhcNMjMwMTAyMTQzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWU2MGFjYzRkN2Q0MjJjNGJhN2Q3Y2U4NGUwOWZkMDM5ZjliZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsonmMm6N9Qbohh2fzpFB35IiRvMo
PMr+ZzjoLTAScA27yhO40KJ+AmCou/RN47hFfFKhsFe/ayxeTAwrF+e97k9oz0us
jDDoXKOrnyvsjfvejjM0ZksTY+6SfupqSMnHIc9QeXB4F2H8AF/4LJ0hA3OBh2h2
QuHOqBRINNu9MwegvXlAiLPpZ5vJFH4RQh8luhg9339KhDdne8WmA0zntReTgbwt
bXU7WJxsOGzwhHnHMpdHu4LVyLBz0dmyizcBlsi05m7Wttjr9iu3jsNAPSsz4Kxf
5DTtLXKXV1qnAFu3NoleI3XaAzIoglIrZEjNP6qjyYP3C18EtAeLHv49UwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMnmCsxNfUIsS6fXzoTgn9A5+b98MB8GA1UdIwQY
MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt
OTYzYjI1ZmEzMDY4LzEveWVZS3pFMTlRaXhMcDlmT2hPQ2YwRG41djN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4
LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDU/NAAwQC
wdqMMA0GCSqGSIb3DQEBCwUAA4IBAQBhuRkbL7QhoS4TBST7H4knDkCYqkRjLGid
7GT+AnE5o8UuY9MS5Ei9Qy5mLp79gdP7Y8fQyZH3HlYQ30HHgtqPHepMb+8xQQo4
N741tb8PJsCU48xd379ZCXU1ngwmrCV0bsj8kbfZXydvmcBpfR1poYaAN63Tkw83
gRjj5VUx8oKnuu3eXaQT8NqrctyN+1Fq8gRElw5yzS3xUkFu0cT0lJbf72FivOEy
U8HpKV24vrkye3C+mxrjHSM09QII+o31Xf6VwKVfA9lrnU0O+maSCdGWu9kpV80I
W9a1p4/M7s6GHY3NxytbXGLP1JAyNHzohWotoFyyUgRokNaNOT/e
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:37 2025 by rpki-client