Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/yMB3sTLlHGgzRzhu5Z0FSdJpMGA.roa
File: yMB3sTLlHGgzRzhu5Z0FSdJpMGA.roa (raw, json)
Hash identifier: CBdf1cYZj25l/4J6kJgnhiGt2UR1zv1wzzfHJdJTVR0=
Subject key identifier: C8:C0:77:B1:32:E5:1C:68:33:47:38:6E:E5:9D:05:49:D2:69:30:60
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 01951B3B8E28B0DDBD7071EE55C0F7979253
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/yMB3sTLlHGgzRzhu5Z0FSdJpMGA.roa
Signing time: Tue 18 Feb 2025 22:44:02 +0000
ROA not before: Tue 18 Feb 2025 22:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34093
IP address blocks: 88.81.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1b:3b:8e:28:b0:dd:bd:70:71:ee:55:c0:f7:97:92:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 18 22:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8c077b132e51c683347386ee59d0549d2693060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:9d:28:b1:51:a7:f1:b0:60:9e:94:bc:4d:
ab:93:8b:00:15:83:82:48:87:04:b7:bd:4d:59:aa:
82:c5:a2:47:fd:fb:f2:e1:57:3a:b3:56:32:49:83:
e2:3a:53:05:84:3f:87:5f:11:a5:1f:16:c7:5c:c4:
f9:ef:50:6a:3b:bb:c5:42:4b:6b:f1:de:66:6c:d1:
da:8c:a7:d1:ca:05:4d:a8:d9:ed:da:65:65:65:f9:
81:e0:39:64:50:d2:f5:52:f4:5a:f7:73:71:48:8b:
19:e5:5f:c0:68:f3:28:99:8a:18:d9:ae:7e:71:04:
ff:a5:55:ac:89:6e:40:c6:91:8e:45:d8:e3:0b:23:
b4:6d:5a:8f:e4:96:1c:7f:f8:76:b6:86:97:df:ea:
8a:8b:c0:cc:55:46:19:39:9d:b1:c7:e9:98:1e:90:
b1:b5:f0:6c:39:4d:6e:11:ab:7d:1f:6b:bf:e1:e6:
f4:2c:66:ce:c2:b6:ab:99:12:73:23:da:9e:2f:7f:
73:b2:bf:d8:1d:67:9f:89:a5:82:a0:4c:b0:e5:79:
a3:42:97:7c:35:71:58:d6:21:7e:8e:2c:1a:2f:52:
ed:86:36:ac:f2:95:d7:eb:70:f5:3b:e6:6d:0d:c9:
9f:26:94:ec:99:c6:89:26:a5:a2:4d:cb:41:19:ee:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:77:B1:32:E5:1C:68:33:47:38:6E:E5:9D:05:49:D2:69:30:60
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/yMB3sTLlHGgzRzhu5Z0FSdJpMGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.81.64.0/19
Signature Algorithm: sha256WithRSAEncryption
12:48:a5:41:ba:a2:89:b1:5c:6c:0d:cb:39:89:fc:dd:2c:db:
3a:96:4a:90:6b:27:7d:3c:f8:22:c2:e9:f3:d9:67:c6:8e:59:
57:1e:56:c3:1a:03:d4:10:7e:7c:43:48:3b:25:c6:d1:4a:f6:
57:a0:29:bf:cc:53:b0:23:30:39:5e:8c:b8:c7:57:a2:9c:c2:
a1:78:c4:43:10:0f:4a:dd:c9:77:2e:8f:07:d3:41:fb:70:a3:
c9:21:41:31:e7:71:e1:19:a4:1e:f4:9b:e9:20:00:c6:3e:cf:
33:cc:bc:99:19:50:55:49:93:ed:3b:59:42:54:7c:9e:7d:83:
e3:43:45:36:f8:90:bd:4f:67:f3:2c:0e:1c:cb:a0:92:6a:0a:
d0:8d:ae:d5:6f:25:44:58:ea:8b:d6:d0:2d:08:88:0f:ad:c1:
27:c5:62:06:dc:d0:fe:ee:f6:04:ac:a9:8f:bd:ff:32:ac:40:
2c:f9:d6:cf:47:06:3f:71:02:36:5d:c3:a1:c7:e7:b4:a9:a2:
39:9c:41:45:06:d8:05:3c:21:d2:47:0f:4a:5e:43:bb:aa:ec:
fe:46:65:29:ed:22:4c:24:87:74:d2:44:93:53:2e:a5:3a:9b:
46:67:3a:7b:dd:7b:fc:1f:fb:c2:85:d6:4e:b0:8d:65:42:5d:
f6:2a:17:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUbO44osN29cHHuVcD3l5JTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzlkMTViZDJmY2M4NDc3MWJhNmFhMjlhYTU0NDI4YjIx
Y2VmNjAwHhcNMjUwMjE4MjI0NDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGMwNzdiMTMyZTUxYzY4MzM0NzM4NmVlNTlkMDU0OWQyNjkzMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOqdKLFRp/GwYJ6UvE2rk4sAFYOC
SIcEt71NWaqCxaJH/fvy4Vc6s1YySYPiOlMFhD+HXxGlHxbHXMT571BqO7vFQktr
8d5mbNHajKfRygVNqNnt2mVlZfmB4DlkUNL1UvRa93NxSIsZ5V/AaPMomYoY2a5+
cQT/pVWsiW5AxpGORdjjCyO0bVqP5JYcf/h2toaX3+qKi8DMVUYZOZ2xx+mYHpCx
tfBsOU1uEat9H2u/4eb0LGbOwrarmRJzI9qeL39zsr/YHWefiaWCoEyw5XmjQpd8
NXFY1iF+jiwaL1Lthjas8pXX63D1O+ZtDcmfJpTsmcaJJqWiTctBGe4UlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMjAd7Ey5RxoM0c4buWdBUnSaTBgMB8GA1UdIwQY
MBaAFF050VvS/MhHcbpqopqlRCiyHO9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAt
YzI5YjQ0ZGU1M2E4LzEveU1CM3NUTGxIR2d6UnpodTVaMEZTZEpwTUdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAtYzI5YjQ0ZGU1M2E4
LzEvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWFFAMA0G
CSqGSIb3DQEBCwUAA4IBAQASSKVBuqKJsVxsDcs5ifzdLNs6lkqQayd9PPgiwunz
2WfGjllXHlbDGgPUEH58Q0g7JcbRSvZXoCm/zFOwIzA5Xoy4x1einMKheMRDEA9K
3cl3Lo8H00H7cKPJIUEx53HhGaQe9JvpIADGPs8zzLyZGVBVSZPtO1lCVHyefYPj
Q0U2+JC9T2fzLA4cy6CSagrQja7VbyVEWOqL1tAtCIgPrcEnxWIG3ND+7vYErKmP
vf8yrEAs+dbPRwY/cQI2XcOhx+e0qaI5nEFFBtgFPCHSRw9KXkO7quz+RmUp7SJM
JId00kSTUy6lOptGZzp73Xv8H/vChdZOsI1lQl32KhcC
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:12:56 2025 by rpki-client on console.sobornost.net