Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/YMTxPOuM97EplT8sh2WGlcFfkOw.roa
File: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (raw, json)
Hash identifier: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=
Subject key identifier: 60:C4:F1:3C:EB:8C:F7:B1:29:95:3F:2C:87:65:86:95:C1:5F:90:EC
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019426D96CA29F520C0B8165DCE2076FF839
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/YMTxPOuM97EplT8sh2WGlcFfkOw.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208468
IP address blocks: 91.135.176.0/23 maxlen: 23
91.135.176.0/24 maxlen: 24
91.135.177.0/24 maxlen: 24
91.135.188.0/23 maxlen: 23
91.135.188.0/24 maxlen: 24
91.135.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6c:a2:9f:52:0c:0b:81:65:dc:e2:07:6f:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60c4f13ceb8cf7b129953f2c87658695c15f90ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:b9:4f:4b:33:e8:d0:57:b8:ab:92:ca:c5:
45:a3:a3:21:fb:fb:98:91:43:9e:74:f4:e6:40:bd:
ac:de:7d:c4:ae:cc:b4:d3:d5:88:3b:8f:8d:ba:e2:
2f:ed:11:c5:82:b0:97:4a:75:81:a2:3a:38:e5:aa:
f9:a5:f6:22:95:c5:5b:f0:f9:60:ae:9c:5f:be:3b:
c4:9f:77:17:18:65:80:a3:91:e0:8b:6a:09:76:c1:
17:5b:cd:e3:2c:8b:eb:75:44:eb:fb:43:5c:8d:c0:
9d:5d:5e:f6:63:f2:61:78:aa:71:05:41:55:f7:a6:
e3:8f:33:72:48:4a:96:e3:21:d1:52:6e:af:2b:f2:
08:b1:65:2b:b0:12:69:55:81:53:1c:4c:eb:b2:ca:
85:44:7a:db:4d:65:98:e7:22:76:c2:8f:bd:8a:2c:
9f:04:11:21:87:74:59:07:1c:70:8e:cf:35:8b:37:
80:f4:04:ac:08:b7:6a:22:ef:41:f0:ee:ba:78:20:
c5:58:63:3e:38:32:4b:e2:3f:d6:b7:c3:2f:36:a3:
77:39:20:df:49:11:20:b7:72:b4:9e:0b:78:a6:a6:
4e:11:60:d5:a8:e9:4b:47:83:59:f6:2e:63:ed:b8:
c1:19:dc:80:99:38:b0:30:ef:1c:f9:98:dc:17:88:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:F1:3C:EB:8C:F7:B1:29:95:3F:2C:87:65:86:95:C1:5F:90:EC
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/YMTxPOuM97EplT8sh2WGlcFfkOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/23
91.135.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:6c:ce:b6:9f:dd:04:27:08:3b:d9:e0:6e:01:7e:8f:c5:34:
f3:92:d8:0b:ce:50:4c:ad:89:f7:92:bd:b2:f1:8a:7d:dd:b7:
3c:42:3b:d1:98:93:37:eb:dd:2e:c8:50:1a:54:6e:6c:1a:66:
41:ea:03:8b:4f:ea:de:8a:ef:35:85:e3:41:e8:0c:9c:0b:58:
34:81:8a:3c:e8:cf:85:2e:ab:c1:a1:92:c9:f9:bf:e1:c7:02:
3b:ec:aa:59:03:1d:ec:90:c9:17:88:71:2e:14:20:98:f9:39:
aa:a8:61:3e:d0:84:54:1c:85:9f:bc:49:89:1f:d0:74:62:29:
d4:0b:d7:b5:64:55:32:21:46:79:58:44:fe:8c:2d:c3:58:85:
7c:33:2e:9c:19:1f:c9:2f:6a:b2:14:6f:32:80:ed:71:8e:95:
57:3e:ee:06:01:a4:1a:ad:ff:f1:18:e0:5a:8a:7b:e5:56:4a:
1e:dc:16:a2:96:8b:bc:2a:71:58:c9:bc:a0:c3:33:02:e6:50:
ab:a7:95:fb:dd:a7:73:8a:87:69:df:22:74:87:c6:7f:d2:23:
b8:52:a7:61:84:f8:54:28:82:94:e5:3f:ad:33:67:cb:ce:27:
46:55:1b:a4:25:d4:65:5b:9b:75:20:e2:75:fa:c9:c3:16:67:
cf:9d:8c:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2Wyin1IMC4Fl3OIHb/g5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzVkN2E4YmFjMDQ3N2Y1NTA5ZGZmMTFiOTE5NWNhNjBk
Zjg3ZGEwHhcNMjUwMTAyMTE0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGM0ZjEzY2ViOGNmN2IxMjk5NTNmMmM4NzY1ODY5NWMxNWY5MGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSO5T0sz6NBXuKuSysVFo6Mh+/uY
kUOedPTmQL2s3n3Ersy009WIO4+NuuIv7RHFgrCXSnWBojo45ar5pfYilcVb8Plg
rpxfvjvEn3cXGGWAo5Hgi2oJdsEXW83jLIvrdUTr+0NcjcCdXV72Y/JheKpxBUFV
96bjjzNySEqW4yHRUm6vK/IIsWUrsBJpVYFTHEzrssqFRHrbTWWY5yJ2wo+9iiyf
BBEhh3RZBxxwjs81izeA9ASsCLdqIu9B8O66eCDFWGM+ODJL4j/Wt8MvNqN3OSDf
SREgt3K0ngt4pqZOEWDVqOlLR4NZ9i5j7bjBGdyAmTiwMO8c+ZjcF4i2oQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGDE8TzrjPexKZU/LIdlhpXBX5DsMB8GA1UdIwQY
MBaAFNJ116i6wEd/VQnf8RuRlcpg34faMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQt
NTY1YjE0NDcwMzdiLzEvWU1UeFBPdU05N0VwbFQ4c2gyV0dsY0Zma093LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQtNTY1YjE0NDcwMzdi
LzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW4ewAwQB
W4e8MA0GCSqGSIb3DQEBCwUAA4IBAQAtbM62n90EJwg72eBuAX6PxTTzktgLzlBM
rYn3kr2y8Yp93bc8QjvRmJM3690uyFAaVG5sGmZB6gOLT+reiu81heNB6AycC1g0
gYo86M+FLqvBoZLJ+b/hxwI77KpZAx3skMkXiHEuFCCY+TmqqGE+0IRUHIWfvEmJ
H9B0YinUC9e1ZFUyIUZ5WET+jC3DWIV8My6cGR/JL2qyFG8ygO1xjpVXPu4GAaQa
rf/xGOBainvlVkoe3Bailou8KnFYybygwzMC5lCrp5X73adziodp3yJ0h8Z/0iO4
UqdhhPhUKIKU5T+tM2fLzidGVRukJdRlW5t1IOJ1+snDFmfPnYxT
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:56:28 2025 by rpki-client