Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/YOyr4rKnnzDrXdmtMOktrTLMhdg.roa
File: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (raw, json)
Hash identifier: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=
Subject key identifier: 60:EC:AB:E2:B2:A7:9F:30:EB:5D:D9:AD:30:E9:2D:AD:32:CC:85:D8
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019421B2186854D528257825446B25C939D4
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/YOyr4rKnnzDrXdmtMOktrTLMhdg.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62412
IP address blocks: 139.28.228.0/22 maxlen: 24
185.36.210.0/23 maxlen: 24
185.184.88.0/22 maxlen: 24
188.214.242.0/23 maxlen: 24
2a0f:5900::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:18:68:54:d5:28:25:78:25:44:6b:25:c9:39:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ecabe2b2a79f30eb5dd9ad30e92dad32cc85d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:a0:9d:9f:f8:fa:6a:59:02:78:b1:a5:1f:
02:e7:a4:d2:7f:de:af:66:fd:75:ac:d7:4d:e5:68:
a8:b0:33:67:84:44:bf:37:44:72:27:01:5f:70:f8:
50:62:dc:9b:12:4c:8e:0f:04:be:40:f9:d1:e6:66:
f1:ad:b2:15:84:2e:42:3a:6f:a5:73:c4:c3:99:4a:
5b:f9:91:6d:d5:52:b1:bc:72:e9:6e:10:a4:9d:a8:
38:45:c2:f3:dc:cd:b2:eb:45:68:65:4d:4f:ea:2c:
90:4d:e3:ff:4e:31:96:ec:fa:cf:ec:20:ec:aa:d3:
23:a8:23:13:ae:d4:33:19:3e:2e:9b:ad:0d:33:3d:
c0:f9:ff:b5:04:dd:29:8e:12:1c:0f:94:e4:ab:0d:
de:41:15:ac:40:7d:72:71:44:db:3c:de:15:a6:9c:
82:eb:55:25:e8:f9:24:28:9d:65:21:47:71:30:69:
83:ed:a0:bf:58:24:d2:0a:09:6f:79:c2:5c:97:fd:
ce:ae:ea:82:a6:ba:5e:eb:5e:8a:04:f0:b6:fd:60:
0b:c9:e8:3f:dc:64:f8:a1:12:55:7f:9c:39:79:27:
8e:43:4a:2c:74:23:5e:ff:9a:bf:45:93:88:79:2c:
1f:a8:ad:b2:f8:5f:07:e5:7e:49:1b:90:a9:da:4d:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:AB:E2:B2:A7:9F:30:EB:5D:D9:AD:30:E9:2D:AD:32:CC:85:D8
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/YOyr4rKnnzDrXdmtMOktrTLMhdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.228.0/22
185.36.210.0/23
185.184.88.0/22
188.214.242.0/23
IPv6:
2a0f:5900::/29
Signature Algorithm: sha256WithRSAEncryption
4d:1b:59:05:35:74:09:7b:43:28:6e:c9:46:5a:98:b0:61:92:
aa:3c:fe:0c:70:c7:31:a0:9e:28:e9:c9:83:75:d2:4a:d4:36:
49:f7:af:1a:e7:c7:cd:1f:d7:c1:8b:65:a1:2f:27:d3:24:80:
e2:76:f6:f9:09:7e:a2:fe:9a:81:2e:43:04:5a:b6:12:05:c3:
5a:79:4e:b6:cd:bc:d0:4c:06:c5:03:36:bf:d8:a4:23:d9:70:
37:35:d1:e7:f6:f0:05:06:c9:14:b3:1d:3e:2c:e3:ed:0a:2e:
6d:38:2e:82:70:7f:a8:ba:85:ff:7a:c4:89:f7:28:22:0e:28:
7f:93:88:85:61:d2:78:41:f4:31:44:ee:8f:5e:d6:91:b9:79:
78:d4:84:72:35:1b:d4:dd:31:a1:a0:e3:b7:bb:69:cb:a6:fc:
8e:b4:94:9b:00:7a:2c:3c:f6:a1:8a:10:e0:1a:be:da:72:87:
f7:0e:b1:0c:94:b8:ff:8f:53:c6:ed:33:67:da:3a:fa:3b:ea:
75:61:86:22:4e:f3:e0:1f:a7:f8:82:c5:cf:b1:66:69:2f:81:
5a:29:61:af:bf:32:a3:0f:b2:be:df:ae:a1:54:16:c9:45:89:
68:7a:fc:39:97:60:27:f5:0d:f9:c3:32:82:d6:0e:20:46:5b:
39:39:01:ca
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQhshhoVNUoJXglRGslyTnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjUwMTAxMTE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGVjYWJlMmIyYTc5ZjMwZWI1ZGQ5YWQzMGU5MmRhZDMyY2M4NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQegnZ/4+mpZAnixpR8C56TSf96v
Zv11rNdN5WiosDNnhES/N0RyJwFfcPhQYtybEkyODwS+QPnR5mbxrbIVhC5COm+l
c8TDmUpb+ZFt1VKxvHLpbhCknag4RcLz3M2y60VoZU1P6iyQTeP/TjGW7PrP7CDs
qtMjqCMTrtQzGT4um60NMz3A+f+1BN0pjhIcD5Tkqw3eQRWsQH1ycUTbPN4VppyC
61Ul6PkkKJ1lIUdxMGmD7aC/WCTSCglvecJcl/3OruqCprpe616KBPC2/WALyeg/
3GT4oRJVf5w5eSeOQ0osdCNe/5q/RZOIeSwfqK2y+F8H5X5JG5Cp2k33EQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFGDsq+Kyp58w613ZrTDpLa0yzIXYMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvWU95cjRyS25uekRyWGRtdE1Pa3RyVExNaGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCixzkAwQB
uSTSAwQCubhYAwQBvNbyMA0EAgACMAcDBQMqD1kAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNG1kFNXQJe0MobslGWpiwYZKqPP4McMcxoJ4o6cmDddJK1DZJ968a58fNH9fB
i2WhLyfTJIDidvb5CX6i/pqBLkMEWrYSBcNaeU62zbzQTAbFAza/2KQj2XA3NdHn
9vAFBskUsx0+LOPtCi5tOC6CcH+ouoX/esSJ9ygiDih/k4iFYdJ4QfQxRO6PXtaR
uXl41IRyNRvU3TGhoOO3u2nLpvyOtJSbAHosPPahihDgGr7acof3DrEMlLj/j1PG
7TNn2jr6O+p1YYYiTvPgH6f4gsXPsWZpL4FaKWGvvzKjD7K+366hVBbJRYloevw5
l2An9Q35wzKC1g4gRls5OQHK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net