Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/YlQdjt5F0FWIgyT-1ImB43dCeAQ.roa
File: YlQdjt5F0FWIgyT-1ImB43dCeAQ.roa (raw, json)
Hash identifier: vRgN5UxgHV/91sR/Vq1eLdIZoA+usNllMbcu4073sPA=
Subject key identifier: 62:54:1D:8E:DE:45:D0:55:88:83:24:FE:D4:89:81:E3:77:42:78:04
Certificate issuer: /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial: 019427B36920D159D36C20868FAC3C091A1E
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/YlQdjt5F0FWIgyT-1ImB43dCeAQ.roa
Signing time: Thu 02 Jan 2025 15:47:36 +0000
ROA not before: Thu 02 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12540
IP address blocks: 212.64.160.0/19 maxlen: 19
212.64.186.0/24 maxlen: 24
2a0d:fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:69:20:d1:59:d3:6c:20:86:8f:ac:3c:09:1a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Validity
Not Before: Jan 2 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62541d8ede45d055888324fed48981e377427804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:d8:c8:53:9e:20:5e:f9:b3:f7:45:69:41:
d6:62:5f:81:73:2e:2d:ed:a6:de:19:52:a8:25:64:
14:fc:9f:45:ea:c8:d9:86:e3:13:61:2e:0c:22:04:
60:46:8b:56:2e:ce:b8:67:78:a5:bc:12:f1:06:a2:
0d:75:5d:37:04:08:d3:fc:2d:0a:57:f1:a0:b3:6f:
d3:15:fa:c0:4d:61:b9:0d:ce:b1:cf:47:59:95:a0:
f3:8f:67:af:a9:3f:48:5a:5d:5e:6b:16:a2:c5:34:
f1:57:14:95:d9:5c:4c:18:31:15:ea:37:37:d1:38:
e7:cd:d3:4f:0e:81:b1:f8:2b:7e:27:a7:99:5a:d7:
37:4f:64:e0:10:28:c1:79:f1:f7:8a:5d:8a:81:32:
8a:57:fc:03:c4:79:ca:30:be:60:28:d9:36:c1:f1:
88:15:8d:89:44:b5:d6:a8:29:f1:76:bb:d2:a6:b7:
48:e4:3b:04:ec:0c:59:c2:f8:44:a8:5d:31:2f:68:
63:d1:c9:9e:2d:64:bb:3e:13:88:53:60:de:6b:7c:
88:ce:75:de:2e:27:13:86:08:51:a1:7c:3f:76:30:
43:70:6f:29:24:6b:cd:0f:0c:8b:f5:1c:a0:8c:0b:
73:ae:bd:b4:a5:1a:3c:a5:84:50:bc:ea:60:d9:55:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:1D:8E:DE:45:D0:55:88:83:24:FE:D4:89:81:E3:77:42:78:04
X509v3 Authority Key Identifier:
keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/YlQdjt5F0FWIgyT-1ImB43dCeAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.160.0/19
IPv6:
2a0d:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:cf:9d:97:45:eb:a2:d8:4a:1d:10:e7:05:24:fd:7b:9a:69:
7d:72:5e:ef:dd:66:4a:9d:da:27:0a:bc:60:69:8d:b2:c4:3c:
c4:b9:01:aa:04:86:4e:cb:30:da:f1:ec:f7:83:9e:e8:8d:74:
bf:24:8b:f9:ab:ec:bb:11:6b:6b:0a:f6:e5:da:39:23:9f:22:
9b:1c:da:9c:c4:aa:84:84:7f:2d:b5:1b:f6:c2:70:d3:07:2a:
fb:b8:a7:8e:6c:3e:e2:d0:f2:a7:d8:6e:aa:cd:80:86:ab:51:
1f:40:2b:3c:4f:91:ed:26:0c:65:87:82:29:1d:d8:35:db:82:
9f:cf:6f:11:51:1a:ab:cb:8a:86:64:ef:4e:4c:0f:b9:99:ab:
25:96:9b:da:e7:a8:8d:78:5b:4c:77:06:75:d5:48:a4:4c:8e:
86:45:f6:89:4a:7e:3b:64:6d:5e:65:95:4f:88:bd:77:31:06:
af:2f:8d:15:2b:39:58:d2:8e:60:b0:0e:a1:df:6c:23:34:74:
fa:77:97:75:89:9b:ec:17:95:cf:6e:f9:7d:e6:5f:a6:a9:9e:
f6:a0:b3:f2:9e:df:ef:5d:b3:85:9b:79:5b:99:72:0b:a8:7d:
c4:69:f0:1b:65:20:b9:3f:7f:b1:8b:a8:be:b8:65:85:73:96:
6f:08:e5:3b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQns2kg0VnTbCCGj6w8CRoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNGE4NjFkN2MxNGI0Y2E1ZTZkMWM3ZDYwYWFlZWIzMmVh
OGVmNjEwHhcNMjUwMTAyMTU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjU0MWQ4ZWRlNDVkMDU1ODg4MzI0ZmVkNDg5ODFlMzc3NDI3ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2DYyFOeIF75s/dFaUHWYl+Bcy4t
7abeGVKoJWQU/J9F6sjZhuMTYS4MIgRgRotWLs64Z3ilvBLxBqINdV03BAjT/C0K
V/Ggs2/TFfrATWG5Dc6xz0dZlaDzj2evqT9IWl1eaxaixTTxVxSV2VxMGDEV6jc3
0TjnzdNPDoGx+Ct+J6eZWtc3T2TgECjBefH3il2KgTKKV/wDxHnKML5gKNk2wfGI
FY2JRLXWqCnxdrvSprdI5DsE7AxZwvhEqF0xL2hj0cmeLWS7PhOIU2Dea3yIznXe
LicThghRoXw/djBDcG8pJGvNDwyL9RygjAtzrr20pRo8pYRQvOpg2VWfHwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGJUHY7eRdBViIMk/tSJgeN3QngEMB8GA1UdIwQY
MBaAFApKhh18FLTKXm0cfWCq7rMuqO9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2It
OTRkYmYzZmQwZTJkLzEvWWxRZGp0NUYwRldJZ3lULTFJbUI0M2RDZUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lNzkyYjAtMGY3OS00ZmEyLWE1Y2ItOTRkYmYzZmQwZTJk
LzEvQ2txR0hYd1V0TXBlYlJ4OVlLcnVzeTZvNzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1ECgMA0E
AgACMAcDBQMqDQ/AMA0GCSqGSIb3DQEBCwUAA4IBAQB7z52XReui2EodEOcFJP17
mml9cl7v3WZKndonCrxgaY2yxDzEuQGqBIZOyzDa8ez3g57ojXS/JIv5q+y7EWtr
Cvbl2jkjnyKbHNqcxKqEhH8ttRv2wnDTByr7uKeObD7i0PKn2G6qzYCGq1EfQCs8
T5HtJgxlh4IpHdg124Kfz28RURqry4qGZO9OTA+5masllpva56iNeFtMdwZ11Uik
TI6GRfaJSn47ZG1eZZVPiL13MQavL40VKzlY0o5gsA6h32wjNHT6d5d1iZvsF5XP
bvl95l+mqZ72oLPynt/vXbOFm3lbmXILqH3EafAbZSC5P3+xi6i+uGWFc5ZvCOU7
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net