Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa
File: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (raw, json)
Hash identifier: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=
Subject key identifier: 60:82:76:43:84:33:FE:8A:A8:3D:94:F5:A4:FE:99:99:B3:48:9A:EC
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 019423D6A75DC114C73EB8A445D0F734E06A
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212269
IP address blocks: 194.5.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a7:5d:c1:14:c7:3e:b8:a4:45:d0:f7:34:e0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=608276438433fe8aa83d94f5a4fe9999b3489aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:48:5c:1d:49:f0:fa:6c:44:40:15:91:b7:
71:c4:2d:28:a6:41:a4:6e:13:36:41:16:47:0a:16:
9c:b9:e3:0b:24:96:bb:e1:93:ab:b4:f1:ae:d2:41:
c0:3b:74:05:6c:24:8c:54:36:c8:f9:38:f1:36:93:
aa:22:93:56:f1:82:f7:81:1a:d8:f7:33:c3:d3:61:
49:28:dd:ca:19:39:4a:3b:3c:dd:5d:a8:82:1d:69:
61:db:39:b4:90:46:de:d2:cf:00:65:85:59:df:53:
bc:b7:24:b2:6d:7f:f9:a5:b6:34:84:b7:f4:7b:9d:
f0:e2:8f:15:a5:38:be:8c:27:ec:ba:78:49:f5:f2:
de:9e:ca:fe:6a:9c:f2:49:38:92:b5:d5:c0:c3:b5:
f5:32:89:85:28:90:c6:de:af:9d:5a:87:8b:17:63:
1d:51:dd:e8:0f:67:ad:3c:dd:63:ab:ad:08:f3:43:
53:ae:25:c9:d3:31:06:52:c1:38:71:07:48:4d:34:
a1:4c:8b:03:4a:9f:bc:58:62:1b:1b:72:3e:72:2a:
db:e3:a3:cf:c0:00:7d:72:11:1a:f5:fb:d1:46:28:
eb:0f:84:00:a4:4b:33:04:02:0b:18:79:d7:be:da:
d6:71:e3:47:f1:c8:f3:32:46:e7:7d:48:fa:6f:62:
b1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:76:43:84:33:FE:8A:A8:3D:94:F5:A4:FE:99:99:B3:48:9A:EC
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e6:1b:ec:9d:5d:a9:72:8b:5f:e1:62:6e:0e:49:0a:bc:02:
96:c6:4b:bd:6e:a8:8e:03:b2:30:98:09:d6:13:22:5b:01:28:
e5:0e:b4:85:56:76:d7:ff:cf:80:a9:ae:e1:3e:ed:70:0f:2e:
3c:85:f6:e3:b8:05:e8:9a:04:95:9a:aa:2c:60:9f:77:63:f9:
d3:65:2c:2c:14:9b:27:bb:af:59:53:64:b6:d9:5a:cb:9a:84:
76:ec:3c:fb:00:74:bc:79:2e:ea:2d:90:6c:6f:8e:eb:cd:ab:
60:66:ce:01:8b:23:76:06:0d:15:90:a9:b4:fe:96:c2:b4:7e:
df:f9:2c:88:bb:2b:a7:76:24:44:e4:d9:3f:39:55:d7:1b:41:
9c:84:b3:76:9b:67:75:57:e7:f3:7a:b8:d4:67:18:c5:a0:34:
b4:59:d8:dc:ae:d8:a1:cd:98:b7:47:b1:bc:49:12:ec:25:e3:
60:08:c7:e8:2b:22:41:35:95:44:17:50:e4:ef:c9:4b:f7:2f:
db:d9:f7:5d:c7:8b:03:ab:13:a7:6e:cf:22:7e:86:ce:01:85:
4e:6d:71:23:8f:58:1d:20:9d:12:1a:6e:2f:67:b1:5e:a8:7f:
46:18:35:56:02:ba:21:39:98:96:50:14:4d:2e:0e:6b:ad:5f:
c8:3b:1f:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1qddwRTHPrikRdD3NOBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy
MjRmODkwHhcNMjUwMTAxMjE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDgyNzY0Mzg0MzNmZThhYTgzZDk0ZjVhNGZlOTk5OWIzNDg5YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAhIXB1J8PpsREAVkbdxxC0opkGk
bhM2QRZHChacueMLJJa74ZOrtPGu0kHAO3QFbCSMVDbI+TjxNpOqIpNW8YL3gRrY
9zPD02FJKN3KGTlKOzzdXaiCHWlh2zm0kEbe0s8AZYVZ31O8tySybX/5pbY0hLf0
e53w4o8VpTi+jCfsunhJ9fLensr+apzySTiStdXAw7X1MomFKJDG3q+dWoeLF2Md
Ud3oD2etPN1jq60I80NTriXJ0zEGUsE4cQdITTShTIsDSp+8WGIbG3I+cirb46PP
wAB9chEa9fvRRijrD4QApEszBAILGHnXvtrWceNH8cjzMkbnfUj6b2KxYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGCCdkOEM/6KqD2U9aT+mZmzSJrsMB8GA1UdIwQY
MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt
M2E1M2QwZWY4YjVhLzEvWUlKMlE0UXpfb3FvUFpUMXBQNlptYk5JbXV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh
LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgXoMA0G
CSqGSIb3DQEBCwUAA4IBAQB35hvsnV2pcotf4WJuDkkKvAKWxku9bqiOA7IwmAnW
EyJbASjlDrSFVnbX/8+Aqa7hPu1wDy48hfbjuAXomgSVmqosYJ93Y/nTZSwsFJsn
u69ZU2S22VrLmoR27Dz7AHS8eS7qLZBsb47rzatgZs4BiyN2Bg0VkKm0/pbCtH7f
+SyIuyundiRE5Nk/OVXXG0GchLN2m2d1V+fzerjUZxjFoDS0WdjcrtihzZi3R7G8
SRLsJeNgCMfoKyJBNZVEF1Dk78lL9y/b2fddx4sDqxOnbs8ifobOAYVObXEjj1gd
IJ0SGm4vZ7FeqH9GGDVWArohOZiWUBRNLg5rrV/IOx+I
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net