Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/YtEd8YCCc2z1I29jS88Pyzvdbak.roa
File: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (raw, json)
Hash identifier: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=
Subject key identifier: 62:D1:1D:F1:80:82:73:6C:F5:23:6F:63:4B:CF:0F:CB:3B:DD:6D:A9
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 01942444927762129CEEEF30236D330A8ED1
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/YtEd8YCCc2z1I29jS88Pyzvdbak.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57270
IP address blocks: 193.194.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:92:77:62:12:9c:ee:ef:30:23:6d:33:0a:8e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62d11df18082736cf5236f634bcf0fcb3bdd6da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:a1:81:9d:44:c2:f9:0b:28:ab:9f:6f:d6:
fb:69:56:5e:54:bc:27:5b:6c:8d:4e:eb:75:44:a3:
d8:5d:92:62:58:78:cc:58:f6:24:36:e5:12:4e:a8:
92:58:23:27:48:43:cd:71:df:a2:ff:1b:b1:ad:66:
b6:e8:a3:0a:83:b7:49:c5:7b:69:c9:18:2f:33:78:
4a:9d:ca:d9:d9:2c:98:9d:6e:e8:6b:96:0c:03:08:
62:f7:f0:d5:7f:73:bf:fc:0c:d0:f0:66:47:40:6e:
48:69:f1:8f:2c:28:6c:0e:f8:6b:82:9c:d8:7c:4f:
84:ab:4c:d4:8b:34:97:d9:78:b0:ee:e1:b7:89:bb:
74:4f:59:ce:d6:14:2e:3f:48:37:8a:20:f4:14:94:
f4:6c:a1:c4:e7:cf:8a:01:80:3f:70:66:7b:63:17:
f4:43:d9:8c:6a:c8:04:1f:71:35:aa:6c:2c:40:10:
86:77:38:f8:22:04:e6:c5:8c:53:85:d0:51:6a:78:
4c:ae:72:0c:f8:9d:b6:59:a4:1c:81:d8:81:43:94:
e4:ff:1c:0e:3b:af:1f:5f:c8:ff:52:37:ce:46:13:
2c:48:e1:95:a1:05:d4:a5:c7:5d:a1:8f:c4:43:01:
e7:71:46:41:bc:ea:c3:9a:e1:d0:28:2d:f9:c4:39:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:1D:F1:80:82:73:6C:F5:23:6F:63:4B:CF:0F:CB:3B:DD:6D:A9
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/YtEd8YCCc2z1I29jS88Pyzvdbak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.106.0/23
Signature Algorithm: sha256WithRSAEncryption
48:74:a1:61:2d:e0:1b:58:02:6c:62:2c:3c:b7:b5:7c:d4:7f:
65:3f:10:6a:86:7c:87:8a:33:3a:44:0b:ed:bb:60:da:ed:70:
39:29:90:af:69:b4:e8:92:7d:61:86:58:82:4f:0a:a6:67:57:
53:83:95:72:e8:b0:69:51:45:8b:c9:c0:95:cd:94:0c:6b:f2:
e8:3a:79:a3:c0:3e:52:d3:ca:fe:3e:a5:30:38:71:87:ce:84:
18:bb:55:34:3c:50:39:a4:3e:b2:a0:37:54:72:89:82:13:d0:
c9:b5:94:a4:06:51:2b:6a:f8:24:a4:71:f7:c9:0e:71:78:60:
18:e1:67:fb:73:3c:30:9f:fd:b6:f3:f4:4e:42:77:fd:4d:59:
83:33:da:c5:5e:7e:9c:71:13:89:cb:ad:70:52:bf:83:66:b6:
3b:3f:45:9f:d5:25:a4:9b:5d:d5:85:c6:98:a1:1f:6c:b3:5d:
f0:5a:14:33:66:8c:da:48:3a:e4:f5:66:05:88:0c:07:c8:c6:
6f:cb:c1:e0:da:6a:f3:ae:c7:7c:3c:06:df:80:b5:c6:1c:5f:
3a:8f:c9:0f:f3:c6:cb:f4:83:82:47:3e:12:1e:cb:a5:45:a6:
e6:ea:af:8d:ed:ec:06:12:6e:43:92:12:98:23:24:4f:c6:03:
af:27:c5:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJJ3YhKc7u8wI20zCo7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3
NjhmYzMwHhcNMjUwMTAxMjM0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmQxMWRmMTgwODI3MzZjZjUyMzZmNjM0YmNmMGZjYjNiZGQ2ZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SehgZ1EwvkLKKufb9b7aVZeVLwn
W2yNTut1RKPYXZJiWHjMWPYkNuUSTqiSWCMnSEPNcd+i/xuxrWa26KMKg7dJxXtp
yRgvM3hKncrZ2SyYnW7oa5YMAwhi9/DVf3O//AzQ8GZHQG5IafGPLChsDvhrgpzY
fE+Eq0zUizSX2Xiw7uG3ibt0T1nO1hQuP0g3iiD0FJT0bKHE58+KAYA/cGZ7Yxf0
Q9mMasgEH3E1qmwsQBCGdzj4IgTmxYxThdBRanhMrnIM+J22WaQcgdiBQ5Tk/xwO
O68fX8j/UjfORhMsSOGVoQXUpcddoY/EQwHncUZBvOrDmuHQKC35xDnRsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLRHfGAgnNs9SNvY0vPD8s73W2pMB8GA1UdIwQY
MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct
Njk5Y2Y3YjA5NTkwLzEvWXRFZDhZQ0NjMnoxSTI5alM4OFB5enZkYmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw
LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcJqMA0G
CSqGSIb3DQEBCwUAA4IBAQBIdKFhLeAbWAJsYiw8t7V81H9lPxBqhnyHijM6RAvt
u2Da7XA5KZCvabTokn1hhliCTwqmZ1dTg5Vy6LBpUUWLycCVzZQMa/LoOnmjwD5S
08r+PqUwOHGHzoQYu1U0PFA5pD6yoDdUcomCE9DJtZSkBlEravgkpHH3yQ5xeGAY
4Wf7czwwn/228/ROQnf9TVmDM9rFXn6ccROJy61wUr+DZrY7P0Wf1SWkm13VhcaY
oR9ss13wWhQzZozaSDrk9WYFiAwHyMZvy8Hg2mrzrsd8PAbfgLXGHF86j8kP88bL
9IOCRz4SHsulRabm6q+N7ewGEm5DkhKYIyRPxgOvJ8Uu
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net