Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/YfAgsC_cdxTTdTc3lRuKLUA9Ek4.roa
File: YfAgsC_cdxTTdTc3lRuKLUA9Ek4.roa (raw, json)
Hash identifier: 6JxCw6QKy553BkYrq5SFqTFyUQePShSh+1QhYyHxmes=
Subject key identifier: 61:F0:20:B0:2F:DC:77:14:D3:75:37:37:95:1B:8A:2D:40:3D:12:4E
Certificate issuer: /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial: 019421443CBB24A95CA94613598CDE1A107B
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/YfAgsC_cdxTTdTc3lRuKLUA9Ek4.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15380
IP address blocks: 193.0.231.0/24 maxlen: 24
2001:678:a20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3c:bb:24:a9:5c:a9:46:13:59:8c:de:1a:10:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61f020b02fdc7714d3753737951b8a2d403d124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:2b:b6:3e:1e:41:29:11:7b:db:b6:73:af:
27:6e:8c:d6:21:77:4d:bb:14:60:69:d3:ca:7a:89:
cd:9b:59:96:61:3f:ad:ff:0b:4d:8e:10:14:a3:d9:
71:bf:e4:40:b5:e5:eb:5f:ab:98:de:81:20:a6:12:
07:d7:ad:21:62:83:6e:51:94:c8:d0:87:56:17:d3:
31:20:c0:8f:56:98:93:df:6f:56:cd:4b:19:bc:a6:
c3:14:49:45:7d:66:e3:bc:24:6d:31:d3:eb:69:7a:
97:cd:d8:5e:20:c2:af:2f:d9:a1:a3:a7:1b:69:ad:
cb:23:58:b5:da:9e:b2:9b:38:59:4b:2a:03:ed:f2:
17:ea:3a:e6:87:96:44:a4:37:c5:64:65:0b:16:8c:
2c:48:b2:3a:32:fa:9c:62:8e:c1:3f:3b:67:a8:b0:
d9:34:6d:61:15:6f:d4:fd:5b:61:55:45:ba:63:1e:
cb:93:4a:c9:1e:a5:11:8d:60:03:7b:d6:bd:7e:84:
75:57:79:b4:e8:35:a6:83:09:56:b1:77:58:69:aa:
7e:05:59:4a:1d:d4:d5:fa:47:6f:dc:b6:bd:27:de:
c8:06:71:5a:6d:d3:9f:7f:ac:a8:6c:a5:6d:7b:6c:
62:e9:65:2b:ed:c9:0e:4b:ab:f0:9d:61:af:8e:00:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:20:B0:2F:DC:77:14:D3:75:37:37:95:1B:8A:2D:40:3D:12:4E
X509v3 Authority Key Identifier:
keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/YfAgsC_cdxTTdTc3lRuKLUA9Ek4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.231.0/24
IPv6:
2001:678:a20::/48
Signature Algorithm: sha256WithRSAEncryption
97:81:72:c6:09:ed:5f:10:5f:aa:a5:fe:a3:f3:0b:e2:fb:5c:
d1:9a:0c:23:16:b2:7f:c1:f5:89:54:91:10:8a:36:81:31:0e:
7b:0c:4a:a6:04:30:7b:24:b7:5c:6e:aa:b8:b1:de:a1:08:33:
9c:45:44:12:31:c0:89:e1:6b:82:7a:12:b7:5c:d8:9f:36:f6:
e5:fc:82:15:15:9c:7c:3b:ed:3e:7a:15:7b:b1:df:09:32:ad:
b4:ad:f5:ca:a8:62:be:f1:e4:9e:07:7d:18:cb:b2:a9:04:0e:
da:08:aa:84:89:7c:ea:f4:26:a0:9b:6b:e5:a1:92:3e:ae:79:
7a:d0:c4:af:6c:5d:5f:15:b1:9f:30:f4:2e:a5:42:59:de:4d:
a2:33:9e:00:cc:79:fe:c0:31:d4:4a:2c:bc:23:6d:63:e5:4f:
d4:32:3d:53:76:b3:8e:19:7e:04:df:49:7d:21:96:4f:9a:e5:
d8:40:f0:61:66:93:bd:f2:f3:72:e5:41:33:0a:43:29:c4:8e:
54:6f:17:4e:2b:a8:a5:a6:66:f3:b6:04:1c:a4:46:5d:50:7e:
3c:bf:bb:65:b9:e5:88:93:16:34:84:2d:6d:cb:44:e0:99:c0:
ae:25:fd:b3:5c:8c:d3:04:ee:db:8c:08:a2:61:92:ec:34:f7:
e4:8f:53:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhRDy7JKlcqUYTWYzeGhB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTNjYWNkZjhmMzM1MTRiZTNhYmRjNTJjNTBlYzg2NDY3
NWU5NTUwHhcNMjUwMTAxMDk0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWYwMjBiMDJmZGM3NzE0ZDM3NTM3Mzc5NTFiOGEyZDQwM2QxMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolkrtj4eQSkRe9u2c68nbozWIXdN
uxRgadPKeonNm1mWYT+t/wtNjhAUo9lxv+RAteXrX6uY3oEgphIH160hYoNuUZTI
0IdWF9MxIMCPVpiT329WzUsZvKbDFElFfWbjvCRtMdPraXqXzdheIMKvL9mho6cb
aa3LI1i12p6ymzhZSyoD7fIX6jrmh5ZEpDfFZGULFowsSLI6MvqcYo7BPztnqLDZ
NG1hFW/U/VthVUW6Yx7Lk0rJHqURjWADe9a9foR1V3m06DWmgwlWsXdYaap+BVlK
HdTV+kdv3La9J97IBnFabdOff6yobKVte2xi6WUr7ckOS6vwnWGvjgB/pQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGHwILAv3HcU03U3N5Ubii1APRJOMB8GA1UdIwQY
MBaAFNijys348zUUvjq9xSxQ7IZGdelVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktQS3pmanpOUlMtT3IzRkxGRHNoa1oxNlZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMzNjMWEtZTRhNS00OTZkLTlhODEt
Yjc5MWI5ODlhZjI5LzEvWWZBZ3NDX2NkeFRUZFRjM2xSdUtMVUE5RWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMzNjMWEtZTRhNS00OTZkLTlhODEtYjc5MWI5ODlhZjI5
LzEvMktQS3pmanpOUlMtT3IzRkxGRHNoa1oxNlZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQDnMA8E
AgACMAkDBwAgAQZ4CiAwDQYJKoZIhvcNAQELBQADggEBAJeBcsYJ7V8QX6ql/qPz
C+L7XNGaDCMWsn/B9YlUkRCKNoExDnsMSqYEMHskt1xuqrix3qEIM5xFRBIxwInh
a4J6Erdc2J829uX8ghUVnHw77T56FXux3wkyrbSt9cqoYr7x5J4HfRjLsqkEDtoI
qoSJfOr0JqCba+Whkj6ueXrQxK9sXV8VsZ8w9C6lQlneTaIzngDMef7AMdRKLLwj
bWPlT9QyPVN2s44ZfgTfSX0hlk+a5dhA8GFmk73y83LlQTMKQynEjlRvF04rqKWm
ZvO2BBykRl1Qfjy/u2W55YiTFjSELW3LROCZwK4l/bNcjNME7tuMCKJhkuw09+SP
Uwg=
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:30 2025 by rpki-client