Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YtuOvUFMVo09mKrknt-ojMdPYWM.roa
File: YtuOvUFMVo09mKrknt-ojMdPYWM.roa (raw, json)
Hash identifier: T3A2RIZNQBMqUeBCZdKs7FFJQLtQse8C79U49VQid+I=
Subject key identifier: 62:DB:8E:BD:41:4C:56:8D:3D:98:AA:E4:9E:DF:A8:8C:C7:4F:61:63
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B591064CA58102EFE7127BC5FABD
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YtuOvUFMVo09mKrknt-ojMdPYWM.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44386
IP address blocks: 195.34.20.0/23 maxlen: 23
195.34.20.0/24 maxlen: 24
195.34.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b5:91:06:4c:a5:81:02:ef:e7:12:7b:c5:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62db8ebd414c568d3d98aae49edfa88cc74f6163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:91:01:98:5a:3e:69:d1:6d:29:9e:7c:e6:
b4:97:1c:d3:87:43:52:a7:d3:0b:10:10:ff:5a:99:
c4:ef:ff:b7:02:54:3b:f2:54:fd:8a:0e:68:9a:30:
54:d7:a5:0d:40:3a:94:d7:3e:a6:c8:b9:49:f4:65:
ef:c9:cc:7c:7d:41:e1:e3:6c:3b:8b:73:80:b6:1d:
f2:9a:1d:c3:87:a0:59:52:70:1e:73:d9:08:0f:76:
cc:cd:61:ba:45:fc:66:ca:b5:e7:36:16:86:22:29:
b1:ec:74:d6:2a:22:d2:96:c2:c5:ed:60:e9:48:7c:
89:94:c5:22:27:fe:da:b2:ac:a6:84:f6:89:8a:6e:
7f:1f:6f:40:43:b0:cb:d0:16:3a:ab:9a:92:51:be:
22:ac:27:81:83:18:42:88:3c:d5:10:6e:4a:01:17:
a6:33:57:18:92:4d:cf:31:31:83:d6:e8:73:47:43:
27:51:44:d0:5b:98:5d:3c:db:54:44:5a:e6:25:7f:
fa:20:56:b3:12:2c:29:6a:6f:4d:1b:b2:71:98:fe:
62:dc:53:f3:0d:d2:07:aa:89:37:c6:53:8e:31:5c:
b5:59:92:77:e3:d5:f3:8c:ba:3c:5b:fb:6b:66:64:
4a:62:1e:67:4d:6a:8f:6e:18:3f:5c:2d:67:a0:f5:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:8E:BD:41:4C:56:8D:3D:98:AA:E4:9E:DF:A8:8C:C7:4F:61:63
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YtuOvUFMVo09mKrknt-ojMdPYWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.20.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:d0:66:c0:3a:3a:13:ff:8d:9f:ea:df:6f:48:b8:e1:14:f8:
41:08:cf:ef:7e:45:63:b2:09:22:10:56:59:24:e6:72:c6:dd:
c3:90:31:e4:6f:29:30:a7:c9:58:19:35:04:c3:d9:d8:28:db:
75:b9:02:4c:1e:6b:1a:75:da:02:22:27:f8:fd:75:d6:08:01:
f4:37:03:e4:f8:ac:e4:09:6b:c7:a4:09:95:5b:25:71:61:f1:
a5:aa:03:9c:50:9a:02:1c:32:7d:d8:b9:13:f3:dd:9c:6d:ca:
ce:d5:4b:04:7d:2b:4c:71:26:31:fb:60:30:75:6a:9a:14:bc:
58:f9:32:ab:15:8f:bd:8e:48:d4:3c:30:12:0c:65:e2:26:dc:
e4:28:59:67:24:43:67:3c:bb:e3:b5:02:ec:62:e9:ff:4c:2a:
61:12:2a:bc:aa:25:c9:70:ef:b4:9e:1d:7d:29:50:58:ef:f3:
f1:f1:85:fc:c6:00:df:49:30:5d:02:3e:fb:e4:f1:49:cc:a1:
7b:57:1c:e2:7a:0c:11:5d:e9:4f:9c:0b:ca:cd:33:5c:7c:96:
ed:ce:fd:2f:87:85:fa:d9:fd:d3:7b:88:88:5d:2f:d9:92:d1:
0a:9a:52:0b:eb:1f:1a:7a:74:a5:aa:0f:9b:c3:05:7e:18:a0:
82:af:5b:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2bWRBkylgQLv5xJ7xfq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjUwMTAyMTE0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmRiOGViZDQxNGM1NjhkM2Q5OGFhZTQ5ZWRmYTg4Y2M3NGY2MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0aRAZhaPmnRbSmefOa0lxzTh0NS
p9MLEBD/WpnE7/+3AlQ78lT9ig5omjBU16UNQDqU1z6myLlJ9GXvycx8fUHh42w7
i3OAth3ymh3Dh6BZUnAec9kID3bMzWG6RfxmyrXnNhaGIimx7HTWKiLSlsLF7WDp
SHyJlMUiJ/7asqymhPaJim5/H29AQ7DL0BY6q5qSUb4irCeBgxhCiDzVEG5KARem
M1cYkk3PMTGD1uhzR0MnUUTQW5hdPNtURFrmJX/6IFazEiwpam9NG7JxmP5i3FPz
DdIHqok3xlOOMVy1WZJ349XzjLo8W/trZmRKYh5nTWqPbhg/XC1noPXY8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLbjr1BTFaNPZiq5J7fqIzHT2FjMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvWXR1T3ZVRk1WbzA5bUtya250LW9qTWRQWVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwyIUMA0G
CSqGSIb3DQEBCwUAA4IBAQAL0GbAOjoT/42f6t9vSLjhFPhBCM/vfkVjsgkiEFZZ
JOZyxt3DkDHkbykwp8lYGTUEw9nYKNt1uQJMHmsaddoCIif4/XXWCAH0NwPk+Kzk
CWvHpAmVWyVxYfGlqgOcUJoCHDJ92LkT892cbcrO1UsEfStMcSYx+2AwdWqaFLxY
+TKrFY+9jkjUPDASDGXiJtzkKFlnJENnPLvjtQLsYun/TCphEiq8qiXJcO+0nh19
KVBY7/Px8YX8xgDfSTBdAj775PFJzKF7VxziegwRXelPnAvKzTNcfJbtzv0vh4X6
2f3Te4iIXS/ZktEKmlIL6x8aenSlqg+bwwV+GKCCr1vR
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:29 2025 by rpki-client