Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/YqwVujDHhfLEawoR2PJTNXDGOkQ.roa
File: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (raw, json)
Hash identifier: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=
Subject key identifier: 62:AC:15:BA:30:C7:85:F2:C4:6B:0A:11:D8:F2:53:35:70:C6:3A:44
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 01942144376E3C7C0C071B2D7BDB4BEEE20D
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/YqwVujDHhfLEawoR2PJTNXDGOkQ.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34934
IP address blocks: 78.24.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:37:6e:3c:7c:0c:07:1b:2d:7b:db:4b:ee:e2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62ac15ba30c785f2c46b0a11d8f2533570c63a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:2f:28:47:47:7b:ac:c4:67:ec:9f:de:5e:
7a:33:d3:25:0c:44:d1:87:6a:7b:9c:15:14:df:d9:
f5:77:8a:96:09:a5:3f:85:66:1e:50:24:66:95:89:
18:83:55:22:d9:1e:1c:c4:4f:d7:18:1f:f1:6e:48:
3a:de:86:f1:d1:c7:5c:b6:97:e1:b2:ae:82:4f:8e:
7f:ed:ce:94:0b:a2:c1:c6:bf:23:84:c2:10:b2:91:
93:1c:f2:10:e3:61:5d:a0:81:e0:6d:5c:6c:e7:e1:
15:38:5c:c7:7d:ba:03:31:0a:55:8e:21:f0:30:9d:
4d:53:ae:49:e9:d1:6d:63:72:8b:3b:4e:32:6b:64:
02:55:1b:aa:6a:7d:30:85:5d:52:42:bf:1c:13:f0:
9a:25:1f:96:ee:3f:c8:c4:57:77:7f:c4:f0:3f:14:
96:ce:2b:da:11:a1:aa:20:f8:0a:c6:79:db:0b:58:
21:0a:37:fb:4f:e3:6d:0c:9a:06:ec:5a:d9:06:61:
17:db:91:4a:dc:d2:0f:54:fd:4a:3a:b6:ef:c5:d0:
60:7e:04:78:33:1d:45:34:32:34:5d:05:a9:56:16:
4c:5f:f8:42:45:9b:0f:87:bd:8c:7a:6e:c3:c6:01:
db:2f:a5:4e:90:04:4f:cb:e5:97:45:09:8f:83:85:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AC:15:BA:30:C7:85:F2:C4:6B:0A:11:D8:F2:53:35:70:C6:3A:44
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/YqwVujDHhfLEawoR2PJTNXDGOkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:09:de:f8:11:4a:2b:db:91:d8:93:1b:e0:80:6a:4a:c7:4a:
42:bd:c7:5d:b6:50:5f:e7:a2:07:c9:1b:cf:ee:41:b4:33:0d:
10:a7:b4:7b:a4:7a:95:dc:69:bf:90:6f:ae:56:98:41:03:06:
f0:13:bd:bb:0f:17:ff:a0:93:5e:85:9a:dc:61:26:a3:a8:4b:
1a:7f:4b:88:e3:a3:bb:03:d6:48:f3:36:6c:42:3f:ca:8e:40:
e2:5e:35:c6:e3:74:9d:9f:b1:19:2a:25:2e:bd:bb:7d:73:f8:
6c:35:68:22:73:51:ce:11:29:69:c3:a3:d7:6d:f2:02:f7:f0:
5a:94:2d:c0:ff:02:9d:45:36:72:f4:f3:ac:ce:8b:12:a6:f9:
b3:d3:e5:35:df:ee:f2:ed:b9:58:16:77:45:35:1c:d4:fa:0b:
56:27:8a:ba:39:01:a2:10:8a:ef:f8:15:d0:3a:5f:24:b6:58:
69:af:7b:21:50:32:c0:fa:39:c8:79:52:11:03:62:93:ce:63:
49:a9:fe:9d:72:4d:36:76:12:41:fb:95:48:0b:60:54:ac:bf:
9b:0c:19:b4:ed:aa:5f:39:c5:06:82:2a:02:ab:d5:08:ac:3e:
80:dc:32:29:18:ff:b5:ce:84:2e:61:34:31:ee:c2:5e:59:fb:
3c:8b:88:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRDduPHwMBxste9tL7uINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzhhMzkwZGRlNWUxNTE5YTRiZDNkYTc1NGE5M2U5ODg0
OTJkNjcwHhcNMjUwMTAxMDk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmFjMTViYTMwYzc4NWYyYzQ2YjBhMTFkOGYyNTMzNTcwYzYzYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtQvKEdHe6zEZ+yf3l56M9MlDETR
h2p7nBUU39n1d4qWCaU/hWYeUCRmlYkYg1Ui2R4cxE/XGB/xbkg63obx0cdctpfh
sq6CT45/7c6UC6LBxr8jhMIQspGTHPIQ42FdoIHgbVxs5+EVOFzHfboDMQpVjiHw
MJ1NU65J6dFtY3KLO04ya2QCVRuqan0whV1SQr8cE/CaJR+W7j/IxFd3f8TwPxSW
zivaEaGqIPgKxnnbC1ghCjf7T+NtDJoG7FrZBmEX25FK3NIPVP1KOrbvxdBgfgR4
Mx1FNDI0XQWpVhZMX/hCRZsPh72Mem7DxgHbL6VOkARPy+WXRQmPg4XJ2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKsFbowx4XyxGsKEdjyUzVwxjpEMB8GA1UdIwQY
MBaAFODIo5Dd5eFRmkvT2nVKk+mISS1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUt
YmVmM2JhMjFjNzE1LzEvWXF3VnVqREhoZkxFYXdvUjJQSlROWERHT2tRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84NjliMzAtZmNkNi00OGRmLThkMjUtYmVmM2JhMjFjNzE1
LzEvNE1pamtOM2w0VkdhUzlQYWRVcVQ2WWhKTFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThhZMA0G
CSqGSIb3DQEBCwUAA4IBAQAmCd74EUor25HYkxvggGpKx0pCvcddtlBf56IHyRvP
7kG0Mw0Qp7R7pHqV3Gm/kG+uVphBAwbwE727Dxf/oJNehZrcYSajqEsaf0uI46O7
A9ZI8zZsQj/KjkDiXjXG43Sdn7EZKiUuvbt9c/hsNWgic1HOESlpw6PXbfIC9/Ba
lC3A/wKdRTZy9POszosSpvmz0+U13+7y7blYFndFNRzU+gtWJ4q6OQGiEIrv+BXQ
Ol8ktlhpr3shUDLA+jnIeVIRA2KTzmNJqf6dck02dhJB+5VIC2BUrL+bDBm07apf
OcUGgioCq9UIrD6A3DIpGP+1zoQuYTQx7sJeWfs8i4ji
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:21 2025 by rpki-client