Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/yKglVFJDslYcc0Oua2iYF6Yp9tM.roa
File: yKglVFJDslYcc0Oua2iYF6Yp9tM.roa (raw, json)
Hash identifier: Ee6r569+wg+FNv5RFPGIVNiPYhZyVPQEB16b3JAPMeM=
Subject key identifier: C8:A8:25:54:52:43:B2:56:1C:73:43:AE:6B:68:98:17:A6:29:F6:D3
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0192B8FB1A381F19772C03F4D2DC7E9A2B93
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/yKglVFJDslYcc0Oua2iYF6Yp9tM.roa
Signing time: Wed 23 Oct 2024 10:45:16 +0000
ROA not before: Wed 23 Oct 2024 10:45:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.135.137.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:fb:1a:38:1f:19:77:2c:03:f4:d2:dc:7e:9a:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 23 10:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a825545243b2561c7343ae6b689817a629f6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:ee:a9:7a:5c:32:3a:d1:bb:35:7b:8e:bf:
35:04:63:81:21:e3:f1:c2:a7:e0:65:a2:3a:c3:06:
d8:0f:e9:f1:88:89:03:9e:c8:4e:c2:5a:60:0e:45:
df:8a:12:81:f5:9c:2d:eb:bf:fc:00:8f:9c:be:19:
bf:a1:34:b3:b2:89:1b:4d:0e:1b:da:c7:12:0d:c1:
a8:a1:f4:d3:7d:6d:37:e1:f7:26:79:f3:f9:2f:5e:
74:8e:f2:68:ef:6f:be:d6:53:be:8f:bf:19:36:96:
75:78:9c:ca:ab:ae:8c:c3:7d:bd:47:e6:ed:f5:1d:
cb:88:91:35:ab:78:61:ce:1a:29:b1:13:82:15:aa:
f2:2f:bb:d7:4f:7c:26:8c:44:e2:14:f3:b6:87:f8:
48:72:2d:2e:b6:e4:c3:ad:e4:ca:7c:53:bf:a0:f0:
32:da:89:bd:60:8e:5f:31:de:4c:2f:05:31:6a:4b:
37:77:56:c2:ac:02:1c:ac:18:cc:e9:e3:b0:41:dc:
3a:42:33:8f:30:37:56:f2:cc:43:30:51:c0:02:c2:
cc:48:53:d3:df:8e:6e:76:8f:5d:77:4a:17:fa:bc:
f5:11:b4:67:a7:b6:8d:b7:ef:0c:c1:27:cf:37:eb:
0e:77:f4:f2:84:ff:95:dd:c0:35:dd:30:4e:67:ab:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A8:25:54:52:43:B2:56:1C:73:43:AE:6B:68:98:17:A6:29:F6:D3
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/yKglVFJDslYcc0Oua2iYF6Yp9tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.137.0/24
193.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:38:17:14:82:09:03:2b:5a:a8:db:d8:49:78:8f:bc:8b:d7:
9c:6e:ce:f4:c3:b9:01:c0:23:fc:0f:3d:e7:70:46:45:47:82:
98:37:b2:d9:af:4c:cf:0f:8d:f1:01:87:a0:1b:94:6c:b8:d9:
fa:e3:4f:47:0e:be:06:da:1e:c5:02:b5:4e:58:26:00:08:09:
ab:66:db:fa:e3:b2:22:6a:13:3e:89:8e:aa:b1:e5:97:bf:dc:
6b:f3:f0:f2:b7:71:e4:6f:71:68:25:23:72:c6:19:a7:e9:48:
e5:b0:70:bb:68:b1:7e:92:ab:a4:9f:f2:7d:90:3b:cb:14:04:
bf:2a:c1:34:53:5a:3c:d7:cb:8a:f5:19:11:dc:67:26:73:37:
c4:c5:30:ea:81:30:2b:1b:92:67:41:3c:8d:f1:fd:77:b1:14:
92:50:0d:6b:7a:7b:88:99:50:40:e8:9b:86:12:ef:2f:1d:5a:
c7:c7:67:13:8c:f2:d8:ea:e8:6b:76:55:6a:1f:f9:45:a8:a6:
fd:1d:06:5d:a9:50:ad:2c:a3:a0:48:66:ba:cb:3c:ae:6c:fa:
60:26:a8:04:e9:bd:c4:23:f7:4b:4d:eb:f5:9d:01:f2:99:44:
19:c1:8b:3c:27:d2:0e:d3:f5:53:ba:02:7a:47:d0:91:db:4d:
dc:36:df:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZK4+xo4Hxl3LAP00tx+miuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjQxMDIzMTA0NTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGE4MjU1NDUyNDNiMjU2MWM3MzQzYWU2YjY4OTgxN2E2MjlmNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KDuqXpcMjrRuzV7jr81BGOBIePx
wqfgZaI6wwbYD+nxiIkDnshOwlpgDkXfihKB9Zwt67/8AI+cvhm/oTSzsokbTQ4b
2scSDcGoofTTfW034fcmefP5L150jvJo72++1lO+j78ZNpZ1eJzKq66Mw329R+bt
9R3LiJE1q3hhzhopsROCFaryL7vXT3wmjETiFPO2h/hIci0utuTDreTKfFO/oPAy
2om9YI5fMd5MLwUxaks3d1bCrAIcrBjM6eOwQdw6QjOPMDdW8sxDMFHAAsLMSFPT
345udo9dd0oX+rz1EbRnp7aNt+8MwSfPN+sOd/TyhP+V3cA13TBOZ6t2PQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMioJVRSQ7JWHHNDrmtomBemKfbTMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEveUtnbFZGSkRzbFljYzBPdWEyaVlGNllwOXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYeJAwQA
wYedMA0GCSqGSIb3DQEBCwUAA4IBAQCjOBcUggkDK1qo29hJeI+8i9ecbs70w7kB
wCP8Dz3ncEZFR4KYN7LZr0zPD43xAYegG5RsuNn6409HDr4G2h7FArVOWCYACAmr
Ztv647IiahM+iY6qseWXv9xr8/Dyt3Hkb3FoJSNyxhmn6UjlsHC7aLF+kqukn/J9
kDvLFAS/KsE0U1o818uK9RkR3GcmczfExTDqgTArG5JnQTyN8f13sRSSUA1renuI
mVBA6JuGEu8vHVrHx2cTjPLY6uhrdlVqH/lFqKb9HQZdqVCtLKOgSGa6yzyubPpg
JqgE6b3EI/dLTev1nQHymUQZwYs8J9IO0/VTugJ6R9CR203cNt/r
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:45 2025 by rpki-client