Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/yMcsDqcikj-Oh_XyHzZuU6ywJns.roa
File: yMcsDqcikj-Oh_XyHzZuU6ywJns.roa (raw, json)
Hash identifier: Rs9ukiIBzgtbtWyPVHVA61SngL94EX769rrYMrF5bW8=
Subject key identifier: C8:C7:2C:0E:A7:22:92:3F:8E:87:F5:F2:1F:36:6E:53:AC:B0:26:7B
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01942521EE588314841C36204BF08931E1F2
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/yMcsDqcikj-Oh_XyHzZuU6ywJns.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 185.141.116.0/24 maxlen: 24
2a07:23c0::/48 maxlen: 48
2a07:23c0:8::/48 maxlen: 48
2a07:23c0:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ee:58:83:14:84:1c:36:20:4b:f0:89:31:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c72c0ea722923f8e87f5f21f366e53acb0267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:50:32:1e:3c:73:55:89:d6:1a:9d:a1:c1:
e4:05:90:bf:f1:92:29:2f:43:1e:25:41:46:2d:a0:
a1:42:12:98:81:b2:12:0f:d7:75:0b:1b:e1:ca:5b:
8b:27:c3:de:f1:e0:3d:fc:3f:22:23:47:7d:77:93:
b8:04:d4:23:35:56:bb:f1:e7:e4:49:73:02:d9:88:
1c:b6:53:32:6c:9e:ae:e8:72:e5:ff:df:7e:33:0e:
7c:96:3c:de:8d:9b:c2:d4:1e:06:89:d8:d5:0f:5f:
45:e3:7e:42:3f:80:ce:1f:54:5a:78:a0:b3:8b:66:
5b:29:4e:5d:2c:3e:6a:04:55:4b:8a:08:02:b2:4a:
af:ef:b0:b9:6a:d0:36:a4:24:7b:44:d8:1d:8b:9f:
34:a3:ae:2e:18:be:3c:58:03:7c:84:77:a4:15:6b:
7a:1a:19:14:99:6a:e7:16:07:c6:be:73:d1:42:e6:
7d:ee:64:0a:9f:52:cf:6e:3e:8c:de:09:fe:f1:51:
8b:98:1a:9e:19:ea:88:8c:e7:61:45:7e:6b:06:88:
e8:2c:a9:a5:7d:c6:65:96:b0:d0:6b:98:57:8a:3d:
64:e9:48:d8:d3:7e:46:54:63:10:5e:21:c7:94:86:
5f:0a:71:ea:be:7c:8f:92:20:b1:b0:bf:f8:77:03:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C7:2C:0E:A7:22:92:3F:8E:87:F5:F2:1F:36:6E:53:AC:B0:26:7B
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/yMcsDqcikj-Oh_XyHzZuU6ywJns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.116.0/24
IPv6:
2a07:23c0::/48
2a07:23c0:8::/47
Signature Algorithm: sha256WithRSAEncryption
31:c0:b0:aa:79:db:dd:87:d6:03:c3:70:e5:00:d6:dd:f8:75:
3a:36:81:1f:a9:d3:04:39:2c:2d:8e:8b:3e:be:68:4f:6c:40:
c7:07:b5:da:40:9a:4a:52:59:a2:c8:ed:c7:a1:79:e9:90:ea:
aa:4d:04:09:f6:b8:69:c6:45:f0:dc:05:1a:99:a4:13:b3:59:
f1:b5:bc:a4:e1:0b:f0:da:de:83:38:ba:44:d2:c0:9c:03:90:
b8:23:45:7a:85:34:bc:55:fe:08:0d:1b:6d:0b:d9:2e:67:e2:
23:16:4d:34:ca:8d:e7:59:02:72:90:06:50:8d:66:89:51:e4:
3d:62:ca:a5:56:17:83:2f:b3:64:01:c0:8a:dc:34:73:26:14:
01:d5:cc:24:57:53:19:fe:f2:7d:90:6e:a0:e4:81:b8:ac:55:
5c:a2:3b:19:cf:fd:dd:b7:15:59:14:15:5c:11:90:10:e5:bf:
1d:66:91:ae:1b:8e:43:03:8b:e6:7b:da:3e:fe:ec:9d:8b:7e:
43:10:5c:b4:4a:68:79:1f:c0:39:58:07:7b:db:18:cf:a4:a1:
2d:08:d5:f0:7a:8f:57:8d:90:87:b6:d5:ae:3f:a7:2f:68:f1:
2f:d9:ce:19:2a:4d:e3:dd:f7:f6:58:27:c7:93:e3:e0:d3:c4:
d8:06:ea:7d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQlIe5YgxSEHDYgS/CJMeHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx
ZjZhN2QwHhcNMjUwMTAyMDM0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGM3MmMwZWE3MjI5MjNmOGU4N2Y1ZjIxZjM2NmU1M2FjYjAyNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQJQMh48c1WJ1hqdocHkBZC/8ZIp
L0MeJUFGLaChQhKYgbISD9d1CxvhyluLJ8Pe8eA9/D8iI0d9d5O4BNQjNVa78efk
SXMC2YgctlMybJ6u6HLl/99+Mw58ljzejZvC1B4GidjVD19F435CP4DOH1RaeKCz
i2ZbKU5dLD5qBFVLiggCskqv77C5atA2pCR7RNgdi580o64uGL48WAN8hHekFWt6
GhkUmWrnFgfGvnPRQuZ97mQKn1LPbj6M3gn+8VGLmBqeGeqIjOdhRX5rBojoLKml
fcZllrDQa5hXij1k6UjY035GVGMQXiHHlIZfCnHqvnyPkiCxsL/4dwMXZQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFMjHLA6nIpI/jof18h82blOssCZ7MB8GA1UdIwQY
MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt
MjdmYmM5OWVhM2M2LzEveU1jc0RxY2lrai1PaF9YeUh6WnVVNnl3Sm5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2
LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuY10MBgE
AgACMBIDBwAqByPAAAADBwEqByPAAAgwDQYJKoZIhvcNAQELBQADggEBADHAsKp5
292H1gPDcOUA1t34dTo2gR+p0wQ5LC2Oiz6+aE9sQMcHtdpAmkpSWaLI7ceheemQ
6qpNBAn2uGnGRfDcBRqZpBOzWfG1vKThC/Da3oM4ukTSwJwDkLgjRXqFNLxV/ggN
G20L2S5n4iMWTTTKjedZAnKQBlCNZolR5D1iyqVWF4Mvs2QBwIrcNHMmFAHVzCRX
Uxn+8n2QbqDkgbisVVyiOxnP/d23FVkUFVwRkBDlvx1mka4bjkMDi+Z72j7+7J2L
fkMQXLRKaHkfwDlYB3vbGM+koS0I1fB6j1eNkIe21a4/py9o8S/ZzhkqTePd9/ZY
J8eT4+DTxNgG6n0=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:34:37 2025 by rpki-client