Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/YWh_o51jvYOy_7yJxKWIzC6AjVw.roa
File: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (raw, json)
Hash identifier: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=
Subject key identifier: 61:68:7F:A3:9D:63:BD:83:B2:FF:BC:89:C4:A5:88:CC:2E:80:8D:5C
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 019426D98B06F336840EBE618C55C3BB5CB5
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/YWh_o51jvYOy_7yJxKWIzC6AjVw.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42978
IP address blocks: 185.117.13.0/24 maxlen: 24
2a06:8280:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:06:f3:36:84:0e:be:61:8c:55:c3:bb:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61687fa39d63bd83b2ffbc89c4a588cc2e808d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:f5:93:4d:6e:30:16:7e:ff:6e:57:ef:b6:
ef:ae:91:d6:db:48:38:9e:e3:be:e4:cb:28:a2:d1:
60:e4:9d:48:2f:90:ed:66:8b:16:f4:87:06:40:3d:
2c:fb:52:33:67:f5:75:e8:59:d0:fe:7c:de:41:ca:
df:35:9d:48:c0:00:7c:dd:d3:c6:27:57:a5:9e:59:
04:de:39:60:14:08:d0:f9:e7:97:9b:48:c7:63:95:
9e:33:e9:93:7c:6d:69:7c:09:e0:e6:2f:cb:1f:5a:
f9:04:9d:b7:68:60:5a:f2:c7:26:65:97:78:4e:32:
37:e5:1f:b6:3a:47:16:f4:53:5f:cb:de:e1:4a:ea:
14:02:2d:a6:65:d1:60:e7:ee:c8:e7:aa:4c:10:5e:
ef:5a:27:15:f6:db:35:57:22:ab:02:9a:18:ae:e1:
62:35:3c:2a:de:fe:c3:14:57:4e:31:1c:e2:8c:d2:
ba:ed:c5:2c:2e:96:99:10:8c:49:91:01:52:d7:7e:
15:54:22:d5:be:14:11:0c:8d:43:21:d9:7a:43:45:
f0:ac:81:7e:0a:4b:29:00:33:ec:9a:84:46:13:31:
fc:58:1f:b4:b1:b4:4a:d8:74:ae:a1:67:1d:14:c8:
11:1d:de:cd:4d:23:fb:40:c1:c1:f7:92:6f:13:53:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:7F:A3:9D:63:BD:83:B2:FF:BC:89:C4:A5:88:CC:2E:80:8D:5C
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/YWh_o51jvYOy_7yJxKWIzC6AjVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.13.0/24
IPv6:
2a06:8280:10::/44
Signature Algorithm: sha256WithRSAEncryption
08:a5:6f:5b:24:91:02:12:4e:6e:11:a4:dd:34:1e:eb:32:19:
a7:d1:19:f5:f0:57:ed:30:7f:71:2a:42:10:c0:64:7b:f9:17:
cc:f9:7a:94:b8:f7:7b:a5:12:ed:54:e4:cd:b8:2a:87:7c:9e:
aa:8b:56:32:a0:eb:14:4c:f1:63:a8:6e:9b:ed:fd:72:46:da:
15:c8:ad:d0:5e:2c:60:49:3d:23:4d:eb:60:53:06:31:21:b8:
4f:ee:5d:86:dc:47:3b:1b:10:e3:a2:fa:43:b8:e6:a1:20:e4:
29:16:b6:c6:3b:14:d0:c1:1f:b1:4a:57:00:7a:04:26:44:16:
94:21:4d:8f:b9:4d:fd:02:ae:7a:42:f6:29:33:27:62:d7:18:
e0:9e:d8:28:fe:f7:6b:ca:1b:28:a7:c7:ec:1d:80:45:d9:d2:
dc:29:fd:da:3a:ee:b9:e1:d3:53:4e:47:66:b3:13:b4:db:f4:
02:04:e4:0d:c7:8f:7b:fa:0e:5f:da:43:86:63:6c:47:06:22:
23:ae:66:45:06:3a:ea:ed:0b:40:a8:28:e4:fa:22:e5:7a:ac:
52:53:a4:44:d2:fd:09:42:52:92:ce:95:71:ba:ea:66:65:5c:
0b:4d:e1:db:3c:2b:47:b4:53:0c:5f:40:f5:8d:57:f6:44:b9:
f6:30:9a:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQm2YsG8zaEDr5hjFXDu1y1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj
NTljNjkwHhcNMjUwMTAyMTE0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTY4N2ZhMzlkNjNiZDgzYjJmZmJjODljNGE1ODhjYzJlODA4ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxP1k01uMBZ+/25X77bvrpHW20g4
nuO+5MsootFg5J1IL5DtZosW9IcGQD0s+1IzZ/V16FnQ/nzeQcrfNZ1IwAB83dPG
J1elnlkE3jlgFAjQ+eeXm0jHY5WeM+mTfG1pfAng5i/LH1r5BJ23aGBa8scmZZd4
TjI35R+2OkcW9FNfy97hSuoUAi2mZdFg5+7I56pMEF7vWicV9ts1VyKrApoYruFi
NTwq3v7DFFdOMRzijNK67cUsLpaZEIxJkQFS134VVCLVvhQRDI1DIdl6Q0XwrIF+
CkspADPsmoRGEzH8WB+0sbRK2HSuoWcdFMgRHd7NTSP7QMHB95JvE1MKnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGFof6OdY72Dsv+8icSliMwugI1cMB8GA1UdIwQY
MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct
OTFjNzBmNjFhMDY3LzEvWVdoX281MWp2WU95Xzd5SnhLV0l6QzZBalZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3
LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXUNMA8E
AgACMAkDBwQqBoKAABAwDQYJKoZIhvcNAQELBQADggEBAAilb1skkQISTm4RpN00
HusyGafRGfXwV+0wf3EqQhDAZHv5F8z5epS493ulEu1U5M24Kod8nqqLVjKg6xRM
8WOobpvt/XJG2hXIrdBeLGBJPSNN62BTBjEhuE/uXYbcRzsbEOOi+kO45qEg5CkW
tsY7FNDBH7FKVwB6BCZEFpQhTY+5Tf0CrnpC9ikzJ2LXGOCe2Cj+92vKGyinx+wd
gEXZ0twp/do67rnh01NOR2azE7Tb9AIE5A3Hj3v6Dl/aQ4ZjbEcGIiOuZkUGOurt
C0CoKOT6IuV6rFJTpETS/QlCUpLOlXG66mZlXAtN4ds8K0e0UwxfQPWNV/ZEufYw
moE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:08 2025 by rpki-client