Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/YOMeWbqb2YP39GnUdvNTCOO7DWs.roa
File: YOMeWbqb2YP39GnUdvNTCOO7DWs.roa (raw, json)
Hash identifier: erbiSipizHuhTzJ/bRQWlIlf0Vk1QR2jgutHpwagwgc=
Subject key identifier: 60:E3:1E:59:BA:9B:D9:83:F7:F4:69:D4:76:F3:53:08:E3:BB:0D:6B
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 0194252199EB84284286D43480576478B13D
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/YOMeWbqb2YP39GnUdvNTCOO7DWs.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200597
IP address blocks: 185.32.77.0/24 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:99:eb:84:28:42:86:d4:34:80:57:64:78:b1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60e31e59ba9bd983f7f469d476f35308e3bb0d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:e1:3f:a5:e3:39:8f:8a:67:6a:aa:cf:a2:
7f:13:31:4b:8b:2b:52:e0:25:5c:d1:d8:43:34:3a:
c1:51:b9:d6:68:1b:c4:5f:7e:56:d5:49:d6:d0:84:
41:84:95:67:9f:1e:ea:f2:6a:b1:ed:39:88:4d:ce:
1a:4c:03:57:9a:4c:79:b7:ab:dc:8c:54:a1:9e:d1:
3b:3d:79:8a:f1:66:05:48:64:07:56:89:89:ea:29:
c2:a7:95:6f:2e:e2:6d:4d:91:6c:f5:cc:d3:e2:7d:
fa:b0:b4:d5:0a:e9:3f:fe:b9:15:6e:2b:07:de:e9:
0e:cd:4e:2b:90:ff:51:27:0d:6d:62:2c:ef:00:83:
59:2f:61:ed:b3:43:92:7d:c7:0a:08:c1:fd:39:43:
f8:e6:e8:86:44:08:4c:65:3d:7c:88:7e:5d:3b:28:
d6:fc:da:6b:08:ab:a2:21:69:36:ab:9d:7f:08:88:
c7:91:d4:1a:b5:2d:49:aa:9f:cb:9f:6e:75:70:90:
75:d3:47:cc:e6:ce:e1:09:6a:fd:3c:dd:d9:5f:0a:
d1:b3:b4:b4:fe:ef:16:2a:7d:2f:16:68:a9:15:a2:
83:cc:b7:b3:df:ae:a9:f7:99:54:1d:33:47:46:c8:
12:34:be:c9:ee:b9:59:71:e7:d5:ff:81:59:db:aa:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:1E:59:BA:9B:D9:83:F7:F4:69:D4:76:F3:53:08:E3:BB:0D:6B
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/YOMeWbqb2YP39GnUdvNTCOO7DWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.77.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:15:b8:e0:d6:a5:a6:d7:9b:ae:62:72:b2:40:8b:5e:31:91:
5e:6e:5c:a0:f9:92:9c:a5:b7:94:09:8b:26:e3:fa:b6:16:bf:
31:01:91:8f:d9:35:27:ec:1d:1d:d3:36:6e:2c:b6:87:04:1a:
7f:98:5c:4d:99:89:6a:b0:2a:11:a0:c9:76:64:a8:e9:44:b8:
b2:81:e0:55:52:08:5f:a1:8c:5a:c1:1f:e4:0e:ba:93:f7:40:
25:46:a2:4d:20:ab:68:20:6e:dc:d8:0c:3d:54:be:c3:24:3f:
07:db:ba:d6:3d:0c:4c:cb:f2:1d:ad:9f:f5:ab:e4:65:2a:85:
8c:01:2f:e5:2e:c6:7e:38:b7:06:aa:a8:3e:30:0d:74:aa:86:
75:68:3c:d8:62:e6:63:5b:78:ae:12:13:27:fe:f6:b7:e2:95:
80:cd:75:8a:82:72:bd:52:85:c5:f0:c6:6c:3c:a1:3e:52:16:
2a:4b:e7:62:d9:46:d5:89:73:d4:3e:df:78:63:7a:68:4c:cc:
df:4e:43:8a:80:66:9b:25:e8:0e:d4:9d:fb:f3:88:58:b8:29:
5f:f7:07:a3:49:56:f6:d1:e9:df:25:38:bf:15:a3:3e:7a:c6:
5a:8c:c7:6e:d9:c8:b8:5f:2d:f7:0f:34:09:a7:71:b8:20:c1:
b5:67:bc:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIZnrhChChtQ0gFdkeLE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODQ2YzhjMGRiNjVkYzc0NmVmNjRjZmQ4MmJiOWMxOTRl
MjdmNzMwHhcNMjUwMTAyMDM0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGUzMWU1OWJhOWJkOTgzZjdmNDY5ZDQ3NmYzNTMwOGUzYmIwZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV7hP6XjOY+KZ2qqz6J/EzFLiytS
4CVc0dhDNDrBUbnWaBvEX35W1UnW0IRBhJVnnx7q8mqx7TmITc4aTANXmkx5t6vc
jFShntE7PXmK8WYFSGQHVomJ6inCp5VvLuJtTZFs9czT4n36sLTVCuk//rkVbisH
3ukOzU4rkP9RJw1tYizvAINZL2Hts0OSfccKCMH9OUP45uiGRAhMZT18iH5dOyjW
/NprCKuiIWk2q51/CIjHkdQatS1Jqp/Ln251cJB100fM5s7hCWr9PN3ZXwrRs7S0
/u8WKn0vFmipFaKDzLez366p95lUHTNHRsgSNL7J7rlZcefV/4FZ26pCLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDjHlm6m9mD9/Rp1HbzUwjjuw1rMB8GA1UdIwQY
MBaAFG+EbIwNtl3HRu9kz9grucGU4n9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMt
NDhiYTkyOGZiMWJlLzEvWU9NZVdicWIyWVAzOUduVWR2TlRDT083RFdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82YTAxMDItNDE3ZC00OWJmLWIxOTMtNDhiYTkyOGZiMWJl
LzEvYjRSc2pBMjJYY2RHNzJUUDJDdTV3WlRpZjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSBNMA0G
CSqGSIb3DQEBCwUAA4IBAQC8Fbjg1qWm15uuYnKyQIteMZFeblyg+ZKcpbeUCYsm
4/q2Fr8xAZGP2TUn7B0d0zZuLLaHBBp/mFxNmYlqsCoRoMl2ZKjpRLiygeBVUghf
oYxawR/kDrqT90AlRqJNIKtoIG7c2Aw9VL7DJD8H27rWPQxMy/IdrZ/1q+RlKoWM
AS/lLsZ+OLcGqqg+MA10qoZ1aDzYYuZjW3iuEhMn/va34pWAzXWKgnK9UoXF8MZs
PKE+UhYqS+di2UbViXPUPt94Y3poTMzfTkOKgGabJegO1J3784hYuClf9wejSVb2
0enfJTi/FaM+esZajMdu2ci4Xy33DzQJp3G4IMG1Z7xR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:57 2025 by rpki-client on console.sobornost.net