Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IsYzqtd5hHafDqEegsYhPCQAd4M.roa
File: IsYzqtd5hHafDqEegsYhPCQAd4M.roa (raw, json)
Hash identifier: Bkpcl7yMwhE1jJAkRRVc2cwo6WyLqJYTr5qBVoOdZ4E=
Subject key identifier: 22:C6:33:AA:D7:79:84:76:9F:0E:A1:1E:82:C6:21:3C:24:00:77:83
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B946FFE075ABB6866F40DF42270E5
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IsYzqtd5hHafDqEegsYhPCQAd4M.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199143
IP address blocks: 84.232.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:94:6f:fe:07:5a:bb:68:66:f4:0d:f4:22:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22c633aad77984769f0ea11e82c6213c24007783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:57:f2:ea:8e:fa:1e:67:be:d0:f8:87:bf:
a4:08:3e:27:16:b9:1d:2d:8a:d0:2c:15:d5:64:d0:
b8:4c:fc:20:df:4d:4e:59:1f:1d:e1:f4:1e:04:76:
81:e1:dd:a4:f8:dc:93:aa:4a:f5:b7:d5:66:bd:8a:
56:86:36:ad:2d:0b:c9:99:da:78:89:d1:83:7b:e2:
22:fe:41:10:a6:05:0e:2e:20:75:af:c2:75:91:7c:
fa:6a:20:af:24:f9:14:06:ce:2a:22:ec:d2:8d:dc:
62:b4:5c:72:d3:62:11:cf:42:cd:3e:56:49:ae:04:
f4:33:d2:e6:ce:8f:c7:5f:78:64:3d:42:56:a8:26:
c5:c3:b5:99:c0:9a:00:90:65:c2:67:8b:45:be:2d:
d9:6d:0c:59:c9:18:95:08:ab:4e:e9:29:1c:36:8b:
4f:71:cd:47:6f:e4:39:d6:6e:30:3e:0c:70:64:52:
7c:32:fa:a6:4c:ad:89:ea:0f:4d:b4:58:37:c1:8b:
46:27:0a:c0:69:71:cd:7a:58:9e:55:9d:b1:77:8e:
bc:b6:64:24:c9:f3:ba:8b:e2:35:c1:74:40:32:df:
d5:c1:f1:77:40:dd:53:c8:cd:e4:13:71:9e:39:88:
f1:8d:0f:ed:bb:17:91:0d:74:20:5b:b3:9c:af:2b:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:33:AA:D7:79:84:76:9F:0E:A1:1E:82:C6:21:3C:24:00:77:83
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IsYzqtd5hHafDqEegsYhPCQAd4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.16.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5b:59:d9:6e:f7:21:e3:74:fb:d6:c3:ce:ec:cb:6d:4e:fb:
68:61:a3:c8:c1:10:8f:44:6b:eb:fb:fb:7e:46:f7:55:70:e9:
fb:f4:c4:d9:b7:d7:83:b2:06:0a:b7:8f:eb:92:d6:f7:35:ee:
bd:ea:5d:5b:d4:b4:d2:b9:44:b0:be:38:38:01:e8:ab:e2:15:
5c:b9:cb:53:68:db:9c:ea:76:3a:1b:ea:d9:9a:e1:af:b5:dc:
27:49:f3:19:2c:58:5e:36:a4:9e:d0:12:7b:c6:b3:76:89:05:
34:83:8f:05:67:20:a4:35:f1:53:3d:31:3d:e3:b9:6e:82:74:
6e:23:27:97:1e:fd:1f:9e:15:bc:40:7e:b3:9b:70:f8:45:1e:
86:f6:9e:ac:ec:c3:b4:c0:b8:d4:d4:4e:ff:5b:65:87:53:32:
f5:90:8a:17:87:49:3a:0b:19:ba:48:fd:bf:e9:b1:88:7a:41:
a7:85:5c:c7:31:e2:5c:41:aa:3d:2c:61:25:79:df:0a:9a:68:
48:b9:46:cd:50:c8:a0:5f:fa:92:58:62:48:10:29:59:88:00:
b8:63:1a:dd:c0:c8:69:5b:b9:07:69:80:cf:57:0f:00:d1:88:
3f:6b:a8:f7:00:ef:c3:8a:da:c8:84:96:87:1d:b5:a5:1b:3f:
e9:8f:c7:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma5Rv/gdau2hm9A30InDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjUwMTAyMDk0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmM2MzNhYWQ3Nzk4NDc2OWYwZWExMWU4MmM2MjEzYzI0MDA3NzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuZX8uqO+h5nvtD4h7+kCD4nFrkd
LYrQLBXVZNC4TPwg301OWR8d4fQeBHaB4d2k+NyTqkr1t9VmvYpWhjatLQvJmdp4
idGDe+Ii/kEQpgUOLiB1r8J1kXz6aiCvJPkUBs4qIuzSjdxitFxy02IRz0LNPlZJ
rgT0M9Lmzo/HX3hkPUJWqCbFw7WZwJoAkGXCZ4tFvi3ZbQxZyRiVCKtO6SkcNotP
cc1Hb+Q51m4wPgxwZFJ8MvqmTK2J6g9NtFg3wYtGJwrAaXHNelieVZ2xd468tmQk
yfO6i+I1wXRAMt/VwfF3QN1TyM3kE3GeOYjxjQ/tuxeRDXQgW7OcrytuGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLGM6rXeYR2nw6hHoLGITwkAHeDMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvSXNZenF0ZDVoSGFmRHFFZWdzWWhQQ1FBZDRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOgQMA0G
CSqGSIb3DQEBCwUAA4IBAQBzW1nZbvch43T71sPO7MttTvtoYaPIwRCPRGvr+/t+
RvdVcOn79MTZt9eDsgYKt4/rktb3Ne696l1b1LTSuUSwvjg4Aeir4hVcuctTaNuc
6nY6G+rZmuGvtdwnSfMZLFheNqSe0BJ7xrN2iQU0g48FZyCkNfFTPTE947lugnRu
IyeXHv0fnhW8QH6zm3D4RR6G9p6s7MO0wLjU1E7/W2WHUzL1kIoXh0k6Cxm6SP2/
6bGIekGnhVzHMeJcQao9LGEled8KmmhIuUbNUMigX/qSWGJIEClZiAC4YxrdwMhp
W7kHaYDPVw8A0Yg/a6j3AO/DitrIhJaHHbWlGz/pj8eA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net