Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa
File: Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa (raw, json)
Hash identifier: BzYAqVCWtu3EBRZpVM9KZ2KVYbyGK5c4dT3hbIbWT74=
Subject key identifier: 62:49:3E:0F:B8:89:DB:AB:4E:72:A6:2C:F5:5A:1A:F4:EB:6B:5F:C7
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 01942826DE69E0FB5A575967F75AB79F6850
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa
Signing time: Thu 02 Jan 2025 17:53:43 +0000
ROA not before: Thu 02 Jan 2025 17:53:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47904
IP address blocks: 91.216.54.0/24 maxlen: 24
91.223.115.0/24 maxlen: 24
2001:67c:2324::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:de:69:e0:fb:5a:57:59:67:f7:5a:b7:9f:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Jan 2 17:53:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62493e0fb889dbab4e72a62cf55a1af4eb6b5fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:57:d7:ad:22:d8:14:50:eb:47:04:7a:72:
2d:fd:b9:13:12:4f:cc:ad:98:e7:14:d5:0b:9b:26:
63:35:5c:73:0e:8d:be:a3:09:2e:87:f1:39:8e:37:
24:df:a7:c6:45:e5:31:51:50:36:6b:eb:1f:d0:ad:
0f:92:1f:1f:f3:d3:9d:6c:6f:62:70:79:75:ab:12:
c5:8c:8c:33:fc:36:70:75:7f:40:73:d1:d0:3b:52:
41:e0:1e:81:e6:12:f9:ea:2a:ca:30:2f:1a:7b:67:
bf:d6:4b:38:1d:00:9f:23:b1:d9:7b:b7:2d:3f:b8:
12:4c:4b:40:7c:ca:d3:d4:7c:a0:78:2e:19:99:17:
3c:73:37:ac:be:73:0a:b0:7e:4b:87:bf:18:af:67:
50:a4:e5:fa:47:7c:59:13:e8:6a:96:2e:fe:78:6d:
db:11:08:1f:fb:de:83:91:fb:dd:d7:39:30:ef:6e:
41:fa:36:5c:0f:66:05:b9:5f:18:f1:52:07:37:1c:
60:81:57:ba:a8:ea:45:9d:84:be:8c:f7:99:48:d1:
e6:04:3d:9d:3e:5b:e0:05:77:ad:bd:fa:08:b1:c5:
31:8c:92:12:13:ec:bd:52:23:c1:73:83:3e:d1:6f:
cb:be:2a:02:11:4b:a4:29:fe:81:44:7c:5f:86:05:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:49:3E:0F:B8:89:DB:AB:4E:72:A6:2C:F5:5A:1A:F4:EB:6B:5F:C7
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/Ykk-D7iJ26tOcqYs9Voa9OtrX8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.54.0/24
91.223.115.0/24
IPv6:
2001:67c:2324::/48
Signature Algorithm: sha256WithRSAEncryption
3b:4a:c8:77:58:79:b0:a6:62:8b:b3:8b:5d:e2:c4:48:b9:8f:
e3:2b:01:14:89:e6:a9:c2:b1:86:05:e9:15:87:0c:b0:4e:da:
a6:80:83:ac:ad:af:d7:67:ad:4c:75:6a:bb:9e:26:3e:84:f2:
47:58:21:03:0b:7c:dc:26:45:14:9d:a5:a1:36:2e:a1:fb:b3:
4e:3c:1b:34:e6:46:b1:f6:3b:c0:be:bb:b8:72:b8:4d:4c:ac:
a5:45:e1:e7:0d:8b:89:d3:8a:95:4a:8c:b7:d1:56:a6:fb:08:
fd:d2:e7:07:27:e3:a7:df:57:e7:f4:aa:05:dc:15:15:2e:97:
29:16:3c:cd:82:ac:d6:56:80:c1:41:5d:19:cc:58:11:ad:28:
17:e3:ee:17:48:22:75:23:cb:8f:ba:d4:f6:6f:bc:5b:6d:7a:
99:b8:0f:c7:25:80:05:f7:84:80:77:d1:4c:5b:80:cd:08:1d:
ae:4c:f3:a0:27:6e:17:b8:f0:21:73:ee:92:e2:42:3b:1a:f3:
ae:9b:0b:0f:61:4f:2b:83:b6:e8:96:d8:eb:74:e4:d7:4b:20:
e1:a5:50:5d:68:bc:f9:ec:5b:3f:7a:7a:ca:c3:ca:33:4d:e8:
b9:88:4a:9c:f4:6c:80:41:93:db:b1:ca:c5:93:4b:43:b3:6a:
36:01:f4:2d
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQoJt5p4PtaV1ln91q3n2hQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzczM2U5ZjYxMzRmNzQ0OWM0MWE1ZWViZjU4M2NlMzVi
NTQyNjAwHhcNMjUwMTAyMTc1MzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjQ5M2UwZmI4ODlkYmFiNGU3MmE2MmNmNTVhMWFmNGViNmI1ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NRX160i2BRQ60cEenIt/bkTEk/M
rZjnFNULmyZjNVxzDo2+owkuh/E5jjck36fGReUxUVA2a+sf0K0Pkh8f89OdbG9i
cHl1qxLFjIwz/DZwdX9Ac9HQO1JB4B6B5hL56irKMC8ae2e/1ks4HQCfI7HZe7ct
P7gSTEtAfMrT1HygeC4ZmRc8czesvnMKsH5Lh78Yr2dQpOX6R3xZE+hqli7+eG3b
EQgf+96Dkfvd1zkw725B+jZcD2YFuV8Y8VIHNxxggVe6qOpFnYS+jPeZSNHmBD2d
PlvgBXetvfoIscUxjJISE+y9UiPBc4M+0W/LvioCEUukKf6BRHxfhgUaEQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGJJPg+4idurTnKmLPVaGvTra1/HMB8GA1UdIwQY
MBaAFNfHM+n2E090ScQaXuv1g841tUJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMt
OWM5MDJjNjZlZTk5LzEvWWtrLUQ3aUoyNnRPY3FZczlWb2E5T3RyWDhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYmJkYzYtOWYyMi00ZTJmLWJlOGMtOWM5MDJjNjZlZTk5
LzEvMThjejZmWVRUM1JKeEJwZTZfV0R6alcxUW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9g2AwQA
W99zMA8EAgACMAkDBwAgAQZ8IyQwDQYJKoZIhvcNAQELBQADggEBADtKyHdYebCm
Youzi13ixEi5j+MrARSJ5qnCsYYF6RWHDLBO2qaAg6ytr9dnrUx1arueJj6E8kdY
IQMLfNwmRRSdpaE2LqH7s048GzTmRrH2O8C+u7hyuE1MrKVF4ecNi4nTipVKjLfR
Vqb7CP3S5wcn46ffV+f0qgXcFRUulykWPM2CrNZWgMFBXRnMWBGtKBfj7hdIInUj
y4+61PZvvFttepm4D8clgAX3hIB30UxbgM0IHa5M86Anbhe48CFz7pLiQjsa866b
Cw9hTyuDtuiW2Ot05NdLIOGlUF1ovPnsWz96esrDyjNN6LmISpz0bIBBk9uxysWT
S0OzajYB9C0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net