Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/YELUwe4nammHucxrbZyOcSXhQAs.roa
File: YELUwe4nammHucxrbZyOcSXhQAs.roa (raw, json)
Hash identifier: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=
Subject key identifier: 60:42:D4:C1:EE:27:6A:69:87:B9:CC:6B:6D:9C:8E:71:25:E1:40:0B
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019421B23D6739BC92F6D306A4C8CE3571DB
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/YELUwe4nammHucxrbZyOcSXhQAs.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210020
IP address blocks: 188.124.3.0/24 maxlen: 24
188.124.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3d:67:39:bc:92:f6:d3:06:a4:c8:ce:35:71:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6042d4c1ee276a6987b9cc6b6d9c8e7125e1400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:46:95:fb:0f:06:3f:8c:1c:30:5e:e3:64:
52:9d:33:76:ec:52:fe:ca:5e:b2:14:c4:b1:a6:c7:
7c:f0:11:fe:d4:5d:42:2f:3d:70:b5:fa:cb:95:15:
79:f2:95:8d:2e:56:de:c4:82:58:1b:02:2b:48:c9:
9c:47:24:5e:3c:71:24:77:31:37:90:0c:d6:20:84:
cf:10:a9:37:8b:e1:39:91:37:b4:be:66:0d:2a:74:
ea:c5:99:2c:76:02:86:d4:ae:c9:f8:4f:1e:aa:aa:
55:50:61:1d:32:6e:69:dd:e9:d9:bd:ff:a4:b2:1b:
5f:61:e9:ec:4a:e6:cf:72:23:4a:9d:18:4e:79:ee:
3f:6f:d1:ca:25:2a:bb:5d:10:c0:ce:14:7a:3d:1c:
fa:75:ce:a4:f0:4e:09:0a:23:73:4d:12:75:59:91:
68:fc:fb:ed:20:88:35:ef:91:b6:51:50:53:28:46:
45:69:3a:1b:b0:65:a5:bc:bc:fb:90:54:07:6a:21:
f7:08:9d:4b:90:e6:e8:b6:be:3d:2e:61:8f:fc:3d:
f2:58:3d:42:eb:1e:8e:d4:44:a8:7e:2c:be:e8:cf:
e0:ba:f0:1a:c3:ea:96:dd:cf:2c:98:2f:25:a8:23:
75:b1:76:65:da:78:16:f9:6d:ff:c0:67:46:8e:20:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:D4:C1:EE:27:6A:69:87:B9:CC:6B:6D:9C:8E:71:25:E1:40:0B
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/YELUwe4nammHucxrbZyOcSXhQAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.3.0/24
188.124.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4b:23:4b:1c:d1:a3:f4:52:e1:f6:2c:ff:c6:d7:35:74:ba:
c3:c7:4f:54:fe:7f:8c:18:4e:46:14:ea:18:4c:36:da:ea:84:
7f:85:ac:c8:47:03:bb:4f:4f:11:88:8b:ea:23:a3:dc:17:8f:
3a:fe:7e:5a:9c:d7:be:96:b0:db:aa:be:d4:52:78:88:a7:c9:
2e:55:4b:2a:13:d9:60:b3:17:e7:fe:d5:52:84:0e:6d:27:e6:
e4:52:93:a5:f9:ff:ad:84:b7:52:6f:89:73:a9:d4:10:65:62:
c7:a2:9a:20:61:81:fe:c4:ab:06:92:fa:52:bd:93:c2:78:c5:
b8:31:5f:c1:5c:b7:54:0e:8d:be:b8:7e:85:df:2a:2b:66:52:
80:84:52:d2:1b:e5:ec:31:cb:b1:ff:74:7f:cb:06:c1:ec:cf:
d5:18:98:0c:96:4f:b5:9e:4c:dd:e9:45:1d:7d:30:2d:0f:6f:
f9:62:2a:c1:49:11:39:db:51:35:94:36:e2:e1:e3:09:8d:f4:
d2:76:bd:ec:1a:07:55:f5:16:a0:55:a7:56:81:a0:7f:83:d0:
ac:f7:3c:e2:cd:a1:92:e3:a1:8b:a5:71:d0:e5:7d:1c:28:cd:
b4:2f:44:9f:4a:c7:18:b3:07:99:a7:17:97:af:b9:23:61:5c:
3b:02:45:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsj1nObyS9tMGpMjONXHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFiYThiNjA3NDkzOTM0NzhlODNjMzYwZTZjYmQ3NWQx
NTZmODkwHhcNMjUwMTAxMTE0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDQyZDRjMWVlMjc2YTY5ODdiOWNjNmI2ZDljOGU3MTI1ZTE0MDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0tGlfsPBj+MHDBe42RSnTN27FL+
yl6yFMSxpsd88BH+1F1CLz1wtfrLlRV58pWNLlbexIJYGwIrSMmcRyRePHEkdzE3
kAzWIITPEKk3i+E5kTe0vmYNKnTqxZksdgKG1K7J+E8eqqpVUGEdMm5p3enZvf+k
shtfYensSubPciNKnRhOee4/b9HKJSq7XRDAzhR6PRz6dc6k8E4JCiNzTRJ1WZFo
/PvtIIg175G2UVBTKEZFaTobsGWlvLz7kFQHaiH3CJ1LkObotr49LmGP/D3yWD1C
6x6O1ESofiy+6M/guvAaw+qW3c8smC8lqCN1sXZl2ngW+W3/wGdGjiB52wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGBC1MHuJ2pph7nMa22cjnEl4UALMB8GA1UdIwQY
MBaAFLFKuotgdJOTR46Dw2Dmy9ddFW+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYt
Y2Y2YzMwNTIxMmViLzEvWUVMVXdlNG5hbW1IdWN4cmJaeU9jU1hoUUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NjE2ODUtMDczZS00MWFmLTliYjYtY2Y2YzMwNTIxMmVi
LzEvc1VxNmkyQjBrNU5Iam9QRFlPYkwxMTBWYjRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvHwDAwQA
vHwFMA0GCSqGSIb3DQEBCwUAA4IBAQCxSyNLHNGj9FLh9iz/xtc1dLrDx09U/n+M
GE5GFOoYTDba6oR/hazIRwO7T08RiIvqI6PcF486/n5anNe+lrDbqr7UUniIp8ku
VUsqE9lgsxfn/tVShA5tJ+bkUpOl+f+thLdSb4lzqdQQZWLHopogYYH+xKsGkvpS
vZPCeMW4MV/BXLdUDo2+uH6F3yorZlKAhFLSG+XsMcux/3R/ywbB7M/VGJgMlk+1
nkzd6UUdfTAtD2/5YirBSRE521E1lDbi4eMJjfTSdr3sGgdV9RagVadWgaB/g9Cs
9zzizaGS46GLpXHQ5X0cKM20L0SfSscYsweZpxeXr7kjYVw7AkUi
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:21 2025 by rpki-client