Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa
File: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (raw, json)
Hash identifier: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=
Subject key identifier: 60:B2:28:44:96:2A:E8:C1:11:68:56:7B:20:62:EA:52:46:76:58:D0
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 0194221F702D462493857F3912C45DF2F93E
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50137
IP address blocks: 193.104.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:70:2d:46:24:93:85:7f:39:12:c4:5d:f2:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60b22844962ae8c11168567b2062ea52467658d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:e1:8e:02:f3:3c:a9:c3:76:51:ec:e1:f6:
f1:2b:0b:f6:a6:fd:71:3f:cd:9d:c4:11:a0:f7:22:
6a:5b:cf:de:f3:8d:e4:54:0a:09:ac:b5:d0:9a:d7:
51:12:00:97:18:df:9a:46:95:44:0c:98:c1:0c:de:
4b:6d:85:00:6c:0f:93:6b:b4:51:ec:78:4c:69:89:
37:cc:5e:a3:8e:c6:24:ac:48:6c:57:62:02:4a:19:
dc:8c:0e:cc:85:fa:17:ab:1d:94:bd:db:3e:bb:44:
bf:a2:82:aa:f0:d1:01:7e:60:38:e1:9c:f4:d3:c9:
0c:10:46:61:0b:2b:9b:ae:93:03:15:d4:7a:9c:d7:
4a:f0:5c:11:eb:7d:6b:95:cb:9c:9d:9a:37:de:87:
63:9d:ed:f8:bf:72:1e:e4:7a:1c:cb:60:40:aa:7e:
3a:9f:7a:f0:42:61:db:88:8d:08:29:23:c4:ac:c2:
7f:5a:10:cd:74:f3:1a:b1:11:3b:37:36:eb:60:19:
d6:02:be:4c:24:6c:f9:89:1a:9a:86:42:a5:88:71:
58:79:95:f8:75:f0:78:16:a6:fa:66:31:95:61:4f:
64:c4:65:3e:fa:de:28:14:9f:bb:1f:61:fc:48:11:
ba:bf:15:55:72:01:ae:0a:6f:62:52:cc:37:a4:5a:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B2:28:44:96:2A:E8:C1:11:68:56:7B:20:62:EA:52:46:76:58:D0
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.150.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9d:68:92:4a:24:42:21:92:a8:6b:9b:ec:d1:ba:ff:83:35:
d2:aa:9a:b8:57:ba:5a:ed:33:3c:2c:9f:d5:d7:74:11:0b:9a:
03:49:4e:94:ab:3e:b6:11:10:0f:1b:cc:ba:e6:d9:6d:65:66:
ea:8e:31:7f:82:8f:79:5c:f3:de:5e:2f:e0:51:c4:e1:ab:d7:
f3:63:17:cc:5a:74:63:1d:30:0c:5f:25:5e:1d:bc:b2:9f:47:
be:13:fe:1c:9a:ab:76:30:04:4c:2a:f7:0e:6d:f0:eb:88:c2:
6c:7e:4a:da:41:4f:76:13:5f:04:80:9d:32:60:f9:af:0c:05:
87:2b:11:96:63:a9:6f:88:51:e6:61:31:fc:8e:30:a9:7e:cc:
84:b7:47:b5:de:8c:02:9b:48:5c:a0:2c:36:fc:8d:04:f1:1a:
e8:c0:67:b5:6a:de:01:2a:0b:d2:d9:f6:7b:fa:90:71:83:26:
91:81:92:44:c2:90:83:11:48:a4:a2:99:35:bc:90:29:e3:6c:
9c:28:85:c6:86:e7:74:21:8e:3a:03:d5:fa:99:94:e5:db:0e:
5e:f8:1e:c5:3d:f7:a5:74:91:60:55:3f:5b:6d:62:8e:d1:0d:
58:5f:2d:3c:af:37:22:07:06:8a:1c:8c:cf:7d:0a:fc:cb:9d:
c8:e8:49:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH3AtRiSThX85EsRd8vk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk
N2E3OTAwHhcNMjUwMTAxMTM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGIyMjg0NDk2MmFlOGMxMTE2ODU2N2IyMDYyZWE1MjQ2NzY1OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh/hjgLzPKnDdlHs4fbxKwv2pv1x
P82dxBGg9yJqW8/e843kVAoJrLXQmtdREgCXGN+aRpVEDJjBDN5LbYUAbA+Ta7RR
7HhMaYk3zF6jjsYkrEhsV2ICShncjA7MhfoXqx2Uvds+u0S/ooKq8NEBfmA44Zz0
08kMEEZhCyubrpMDFdR6nNdK8FwR631rlcucnZo33odjne34v3Ie5Hocy2BAqn46
n3rwQmHbiI0IKSPErMJ/WhDNdPMasRE7NzbrYBnWAr5MJGz5iRqahkKliHFYeZX4
dfB4Fqb6ZjGVYU9kxGU++t4oFJ+7H2H8SBG6vxVVcgGuCm9iUsw3pFqqUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGCyKESWKujBEWhWeyBi6lJGdljQMB8GA1UdIwQY
MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt
Yjc5NTUyZTcwMGM1LzEvWUxJb1JKWXE2TUVSYUZaN0lHTHFVa1oyV05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1
LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiWMA0G
CSqGSIb3DQEBCwUAA4IBAQBFnWiSSiRCIZKoa5vs0br/gzXSqpq4V7pa7TM8LJ/V
13QRC5oDSU6Uqz62ERAPG8y65tltZWbqjjF/go95XPPeXi/gUcThq9fzYxfMWnRj
HTAMXyVeHbyyn0e+E/4cmqt2MARMKvcObfDriMJsfkraQU92E18EgJ0yYPmvDAWH
KxGWY6lviFHmYTH8jjCpfsyEt0e13owCm0hcoCw2/I0E8RrowGe1at4BKgvS2fZ7
+pBxgyaRgZJEwpCDEUikopk1vJAp42ycKIXGhud0IY46A9X6mZTl2w5e+B7FPfel
dJFgVT9bbWKO0Q1YXy08rzciBwaKHIzPfQr8y53I6EkM
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:04 2025 by rpki-client