Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/YBHwa8V11c5qzA0UPwfMfypHCcg.roa
File: YBHwa8V11c5qzA0UPwfMfypHCcg.roa (raw, json)
Hash identifier: CuoK3u9YojcDSoTy/wRVt4JDPALAvwVfnZ3WWSE/eNo=
Subject key identifier: 60:11:F0:6B:C5:75:D5:CE:6A:CC:0D:14:3F:07:CC:7F:2A:47:09:C8
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244554763584BAD527A5CDB219C9D274
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/YBHwa8V11c5qzA0UPwfMfypHCcg.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34684
IP address blocks: 195.87.47.0/24 maxlen: 24
195.87.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:76:35:84:ba:d5:27:a5:cd:b2:19:c9:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6011f06bc575d5ce6acc0d143f07cc7f2a4709c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:d6:45:b0:e0:87:67:da:b9:56:2a:12:e6:
ca:47:a8:81:73:7c:13:c7:36:71:6d:a3:3b:57:a0:
23:68:3b:6e:7d:8e:d2:3e:b2:24:56:4e:4c:46:76:
bc:ef:99:97:bb:d7:66:1c:39:35:34:64:06:2b:71:
e8:98:4b:ce:98:9b:62:4b:d8:22:2a:77:56:be:63:
b6:aa:df:81:04:5b:38:20:c9:25:f6:d0:eb:20:1d:
d7:67:6e:07:0c:3c:2e:73:fb:3f:e5:ce:9c:1c:69:
47:cc:7c:74:6d:c4:cf:58:e9:2c:a7:d7:94:45:9a:
9a:d4:24:d0:a2:fa:bf:fb:bc:f5:1d:3b:90:f4:69:
25:dc:8e:57:1b:41:b0:68:41:63:9c:ca:f9:f3:a0:
47:2f:39:97:db:cc:0b:41:95:e1:85:69:a8:89:2f:
41:4b:55:0b:48:59:d0:5e:b9:d5:19:a2:10:f5:57:
5b:60:9e:4c:c1:ac:46:a5:ef:bf:0f:ac:b7:e5:cd:
c8:2d:de:ed:c1:15:5d:d9:2f:37:ec:8f:c4:e6:67:
da:eb:e6:c0:f4:93:96:3a:12:1a:d2:79:56:1a:68:
93:f6:b5:75:d3:77:44:b7:7e:b9:82:e7:e4:52:5f:
f4:af:62:07:ce:73:a4:c8:60:6d:57:4f:31:29:f2:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:F0:6B:C5:75:D5:CE:6A:CC:0D:14:3F:07:CC:7F:2A:47:09:C8
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/YBHwa8V11c5qzA0UPwfMfypHCcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.47.0/24
195.87.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:34:51:a2:e0:e0:7d:28:bf:c4:f6:07:d8:c9:c3:f7:2e:c9:
f6:10:31:a3:52:1e:4e:63:58:0e:0f:7b:eb:5e:67:12:93:ec:
a3:b8:a5:36:1c:b8:ae:95:81:de:e2:ae:f1:32:c8:b6:4c:e2:
27:e5:f5:77:95:72:c4:dc:17:11:d2:48:84:cd:80:ce:dd:78:
68:c8:3b:17:03:1b:f7:57:ae:85:28:f1:61:4f:dc:4e:74:4a:
64:c4:9e:b1:60:c3:e7:8b:5b:1d:1b:3d:40:d6:d3:30:2b:1b:
4f:82:c4:46:7e:0e:07:d1:12:a4:cf:2e:d5:1b:04:cd:7f:8b:
f0:ff:e3:26:17:c4:9b:2d:8d:ff:e7:60:20:3d:3a:42:a1:ba:
22:90:77:33:85:f1:83:b5:31:5e:13:74:63:69:54:3a:fa:4f:
16:eb:03:ec:10:dc:7e:1f:85:9d:e4:13:dd:d1:06:b6:8e:d3:
59:7b:ae:61:f3:43:9b:0a:c9:22:2d:25:b9:4b:c2:e5:66:70:
76:53:45:43:8d:b6:3c:40:a6:fc:19:b5:51:5e:de:65:84:95:
3d:44:bf:1b:2f:d5:dc:73:9e:e7:da:fb:96:12:75:e5:6d:db:
e3:3e:66:68:22:20:9b:02:63:f9:35:77:6b:68:83:aa:97:7b:
07:29:7b:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRVR2NYS61SelzbIZydJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjUwMTAxMjM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDExZjA2YmM1NzVkNWNlNmFjYzBkMTQzZjA3Y2M3ZjJhNDcwOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTHWRbDgh2fauVYqEubKR6iBc3wT
xzZxbaM7V6AjaDtufY7SPrIkVk5MRna875mXu9dmHDk1NGQGK3HomEvOmJtiS9gi
KndWvmO2qt+BBFs4IMkl9tDrIB3XZ24HDDwuc/s/5c6cHGlHzHx0bcTPWOksp9eU
RZqa1CTQovq/+7z1HTuQ9Gkl3I5XG0GwaEFjnMr586BHLzmX28wLQZXhhWmoiS9B
S1ULSFnQXrnVGaIQ9VdbYJ5MwaxGpe+/D6y35c3ILd7twRVd2S837I/E5mfa6+bA
9JOWOhIa0nlWGmiT9rV103dEt365gufkUl/0r2IHznOkyGBtV08xKfI58wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGAR8GvFddXOaswNFD8HzH8qRwnIMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvWUJId2E4VjExYzVxekEwVVB3Zk1meXBIQ2NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1cvAwQA
w1cxMA0GCSqGSIb3DQEBCwUAA4IBAQCkNFGi4OB9KL/E9gfYycP3Lsn2EDGjUh5O
Y1gOD3vrXmcSk+yjuKU2HLiulYHe4q7xMsi2TOIn5fV3lXLE3BcR0kiEzYDO3Xho
yDsXAxv3V66FKPFhT9xOdEpkxJ6xYMPni1sdGz1A1tMwKxtPgsRGfg4H0RKkzy7V
GwTNf4vw/+MmF8SbLY3/52AgPTpCoboikHczhfGDtTFeE3RjaVQ6+k8W6wPsENx+
H4Wd5BPd0Qa2jtNZe65h80ObCskiLSW5S8LlZnB2U0VDjbY8QKb8GbVRXt5lhJU9
RL8bL9Xcc57n2vuWEnXlbdvjPmZoIiCbAmP5NXdraIOql3sHKXtZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:07 2025 by rpki-client