Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/YLWwZbc1Rksp6CV3XbzezIH1zJw.roa
File: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (raw, json)
Hash identifier: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=
Subject key identifier: 60:B5:B0:65:B7:35:46:4B:29:E8:25:77:5D:BC:DE:CC:81:F5:CC:9C
Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial: 019422FB9CD69BC6A8B8D5985FC914C3A66A
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/YLWwZbc1Rksp6CV3XbzezIH1zJw.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43112
IP address blocks: 193.3.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9c:d6:9b:c6:a8:b8:d5:98:5f:c9:14:c3:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60b5b065b735464b29e825775dbcdecc81f5cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:09:20:82:df:4c:4f:91:01:eb:bd:50:d6:
4d:02:20:92:24:3e:a6:52:69:3f:8c:63:82:47:18:
a9:e4:fa:69:f7:26:a8:2c:67:e1:78:44:58:2b:28:
b4:89:5f:f3:d7:d7:ef:da:f6:cd:65:9b:9d:34:ac:
b2:1a:28:bb:65:e5:34:d0:d3:4b:6e:71:7d:8e:99:
f6:5d:11:27:63:d4:28:58:1f:df:9e:7a:27:62:48:
ec:d4:0e:f3:a9:d5:35:36:c5:ea:f1:26:9f:9f:71:
5b:db:27:e5:d5:5d:c2:75:26:c4:29:0f:d1:99:9d:
06:f5:d9:89:48:5b:f3:85:1f:15:8c:bc:6a:0e:93:
d2:67:f7:d6:ba:5a:16:5b:eb:ea:f8:62:e6:4c:cb:
16:78:1d:0e:00:7d:72:26:bc:3a:10:2d:bc:2d:42:
94:25:5d:7d:c0:47:cc:fa:8b:60:19:f4:f2:24:cb:
b5:7b:de:ad:83:82:c3:98:32:f3:aa:6d:1a:00:62:
09:9e:27:b6:8a:7c:49:4b:de:04:11:b5:05:a6:fa:
cd:22:bf:cc:1c:48:14:c6:25:1b:44:a7:b3:10:70:
d6:ca:30:04:a2:2d:39:21:8a:32:82:b4:1d:bd:c6:
49:e5:5c:70:8e:df:76:39:69:1a:2e:73:24:7a:77:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:B0:65:B7:35:46:4B:29:E8:25:77:5D:BC:DE:CC:81:F5:CC:9C
X509v3 Authority Key Identifier:
keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/YLWwZbc1Rksp6CV3XbzezIH1zJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6d:eb:81:d6:73:81:bd:46:47:1b:dc:cc:5e:a1:d2:a7:0a:
5f:04:c7:f7:c6:2d:a2:79:a0:6a:9c:16:1b:3b:4e:28:2b:c2:
4b:70:1c:fc:fc:f8:cd:96:e2:5b:f7:9c:42:32:f1:97:85:29:
1e:0e:5d:0e:ea:fc:0c:11:55:4e:f1:89:61:a8:76:16:97:ce:
4e:c4:50:15:b6:6f:44:7b:fb:ff:3b:22:7b:83:e9:c3:6f:86:
20:05:ef:56:65:91:53:d3:f0:53:32:e1:14:b6:3f:90:31:74:
9f:f6:e7:51:9c:1f:69:c7:8d:f4:48:38:da:fa:1b:fe:a8:68:
9b:19:16:1c:bc:bf:bc:fb:59:58:14:d3:a4:4d:be:08:e2:ed:
8c:87:5f:51:e2:8f:b6:75:0c:5c:b0:05:b1:db:a3:bc:ef:6d:
64:fd:e6:09:93:f4:ad:86:2a:a2:76:53:f9:10:48:ae:e6:ee:
e9:b5:07:38:8b:99:1a:dc:d0:7d:2c:9f:c6:09:5d:a1:36:70:
ef:da:4f:6c:de:b0:ad:48:31:30:a7:ac:b0:1b:c7:e9:2a:fd:
e8:90:c8:53:5a:43:14:58:45:84:8a:73:17:6d:82:41:1b:f6:
a8:96:29:62:84:ed:d6:b6:ef:0b:88:ae:43:93:42:01:b1:ac:
a0:a3:f1:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+5zWm8aouNWYX8kUw6ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NjllNzNkZTgzNmY0MWZmMjcyNDM0MGI5M2VjMTc3NjNk
NjllNzIwHhcNMjUwMTAxMTc0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGI1YjA2NWI3MzU0NjRiMjllODI1Nzc1ZGJjZGVjYzgxZjVjYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE4JIILfTE+RAeu9UNZNAiCSJD6m
Umk/jGOCRxip5Ppp9yaoLGfheERYKyi0iV/z19fv2vbNZZudNKyyGii7ZeU00NNL
bnF9jpn2XREnY9QoWB/fnnonYkjs1A7zqdU1NsXq8Safn3Fb2yfl1V3CdSbEKQ/R
mZ0G9dmJSFvzhR8VjLxqDpPSZ/fWuloWW+vq+GLmTMsWeB0OAH1yJrw6EC28LUKU
JV19wEfM+otgGfTyJMu1e96tg4LDmDLzqm0aAGIJnie2inxJS94EEbUFpvrNIr/M
HEgUxiUbRKezEHDWyjAEoi05IYoygrQdvcZJ5Vxwjt92OWkaLnMkenfV+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGC1sGW3NUZLKegld1283syB9cycMB8GA1UdIwQY
MBaAFLlp5z3oNvQf8nJDQLk+wXdj1p5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAt
MDc0ZDI3ZGQ5MzBlLzEvWUxXd1piYzFSa3NwNkNWM1hiemV6SUgxekp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iY2YzN2YtZWJlNC00YTNiLTljZDAtMDc0ZDI3ZGQ5MzBl
LzEvdVdublBlZzI5Ql95Y2tOQXVUN0JkMlBXbm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQM/MA0G
CSqGSIb3DQEBCwUAA4IBAQBKbeuB1nOBvUZHG9zMXqHSpwpfBMf3xi2ieaBqnBYb
O04oK8JLcBz8/PjNluJb95xCMvGXhSkeDl0O6vwMEVVO8YlhqHYWl85OxFAVtm9E
e/v/OyJ7g+nDb4YgBe9WZZFT0/BTMuEUtj+QMXSf9udRnB9px430SDja+hv+qGib
GRYcvL+8+1lYFNOkTb4I4u2Mh19R4o+2dQxcsAWx26O8721k/eYJk/SthiqidlP5
EEiu5u7ptQc4i5ka3NB9LJ/GCV2hNnDv2k9s3rCtSDEwp6ywG8fpKv3okMhTWkMU
WEWEinMXbYJBG/aolilihO3Wtu8LiK5Dk0IBsaygo/F4
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:34:51 2025 by rpki-client