Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa
File: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (raw, json)
Hash identifier: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=
Subject key identifier: 61:B5:69:26:69:B9:77:5F:6B:33:EC:D8:65:E0:34:65:67:6D:0C:C8
Certificate issuer: /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial: 0194266BECFADFC4CE107CA0E83C29B58833
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 91.207.92.0/24 maxlen: 24
91.207.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:fa:df:c4:ce:10:7c:a0:e8:3c:29:b5:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61b5692669b9775f6b33ecd865e03465676d0cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:a2:97:84:2f:2b:f2:43:08:b9:84:39:d2:
b5:90:09:24:48:53:4d:0a:e5:53:b0:c4:02:6a:b4:
3a:b3:70:da:0f:c7:08:e9:2b:8c:c5:5c:74:99:d6:
24:c2:3a:36:e2:b2:99:56:32:7a:98:2c:0a:32:b8:
09:59:df:e1:04:4b:8a:d3:ce:13:9a:8e:46:98:13:
80:a3:2c:f1:6f:6d:a8:73:69:28:0f:47:38:2b:46:
d1:15:c0:36:d6:24:46:19:51:6c:82:09:94:91:46:
a4:26:6d:9f:1f:a7:05:33:86:55:f2:18:8b:6c:82:
1b:ed:e8:5f:a3:b4:45:40:cf:38:79:d6:47:0e:5b:
54:76:de:30:62:14:a3:c2:ab:86:86:43:59:37:58:
d0:c3:b1:b6:40:5b:42:65:d3:ac:e7:27:4b:66:00:
a4:85:0b:a1:4c:6a:4d:2b:2f:00:3c:87:e5:f7:e9:
fa:37:73:1a:76:43:7b:b2:bc:5d:b9:65:6f:dd:e3:
24:99:ec:2a:d1:82:d7:a3:51:8d:28:b7:d3:e3:5f:
ab:48:68:ce:b3:67:91:2a:ed:8a:1c:30:47:f4:69:
75:1a:46:33:38:86:09:9a:eb:30:6f:0c:b7:d8:29:
9e:5e:3a:55:79:89:1d:3f:55:34:df:3a:48:ad:b0:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:69:26:69:B9:77:5F:6B:33:EC:D8:65:E0:34:65:67:6D:0C:C8
X509v3 Authority Key Identifier:
keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.92.0/23
Signature Algorithm: sha256WithRSAEncryption
42:79:e6:c5:96:49:e7:96:8a:e4:62:42:00:a7:3c:a1:34:19:
f0:a3:48:74:22:7b:b0:35:d5:d3:30:93:ce:4e:f2:f6:9b:59:
c3:4c:76:6a:e5:c0:e0:c6:22:49:bd:a6:67:3f:e0:3c:bd:2b:
d2:b7:0b:12:d6:35:86:d5:6d:a8:ee:7d:c3:00:d3:34:23:0f:
e3:71:6c:08:4f:91:3f:44:39:8c:91:8c:b4:bc:7a:ce:15:ff:
2f:d3:d7:b6:69:39:f4:fa:90:eb:32:a7:7f:fd:14:68:96:43:
dc:ba:a3:f0:16:db:61:97:e8:74:f7:5d:5a:c4:f5:18:a6:b4:
12:4a:b2:b9:b7:e8:eb:a9:c8:eb:28:e2:00:3b:b1:73:d6:7c:
57:b3:b5:37:b2:5c:7b:27:c3:1b:0e:d7:cb:79:64:40:ec:0e:
2c:19:59:9d:8c:63:51:bc:dc:2e:2c:e8:d2:8d:81:78:c6:31:
3c:2b:d3:fd:89:77:81:43:20:ae:a2:5e:bc:da:83:8f:2b:65:
ed:a9:4b:80:25:dd:ea:e8:4e:74:4c:9b:cb:f5:42:93:18:9b:
70:2f:c0:6a:bb:77:fb:4c:ab:6a:a7:ad:fd:09:94:46:b0:8c:
83:69:b2:3e:ed:21:05:46:c8:cd:33:35:c8:4d:8f:6d:8e:5f:
ad:9a:68:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+z638TOEHyg6DwptYgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDg5ZmQzNDZlNzIxNDg2NjE1OWFjMmYwZWM5Yzk5MGM0
ZjE0YjkwHhcNMjUwMTAyMDk0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWI1NjkyNjY5Yjk3NzVmNmIzM2VjZDg2NWUwMzQ2NTY3NmQwY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF2il4QvK/JDCLmEOdK1kAkkSFNN
CuVTsMQCarQ6s3DaD8cI6SuMxVx0mdYkwjo24rKZVjJ6mCwKMrgJWd/hBEuK084T
mo5GmBOAoyzxb22oc2koD0c4K0bRFcA21iRGGVFsggmUkUakJm2fH6cFM4ZV8hiL
bIIb7ehfo7RFQM84edZHDltUdt4wYhSjwquGhkNZN1jQw7G2QFtCZdOs5ydLZgCk
hQuhTGpNKy8APIfl9+n6N3MadkN7srxduWVv3eMkmewq0YLXo1GNKLfT41+rSGjO
s2eRKu2KHDBH9Gl1GkYzOIYJmuswbwy32CmeXjpVeYkdP1U03zpIrbCj3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGG1aSZpuXdfazPs2GXgNGVnbQzIMB8GA1UdIwQY
MBaAFHlIn9NG5yFIZhWawvDsnJkMTxS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVVpZjAwYm5JVWhtRlpyQzhPeWNtUXhQRkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZTMwZjEtMDUzZC00NjA3LThjNDUt
MDllY2M2ODFhMzg2LzEvWWJWcEptbTVkMTlyTS16WVplQTBaV2R0RE1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZTMwZjEtMDUzZC00NjA3LThjNDUtMDllY2M2ODFhMzg2
LzEvZVVpZjAwYm5JVWhtRlpyQzhPeWNtUXhQRkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW89cMA0G
CSqGSIb3DQEBCwUAA4IBAQBCeebFlknnlorkYkIApzyhNBnwo0h0InuwNdXTMJPO
TvL2m1nDTHZq5cDgxiJJvaZnP+A8vSvStwsS1jWG1W2o7n3DANM0Iw/jcWwIT5E/
RDmMkYy0vHrOFf8v09e2aTn0+pDrMqd//RRolkPcuqPwFtthl+h0911axPUYprQS
SrK5t+jrqcjrKOIAO7Fz1nxXs7U3slx7J8MbDtfLeWRA7A4sGVmdjGNRvNwuLOjS
jYF4xjE8K9P9iXeBQyCuol682oOPK2XtqUuAJd3q6E50TJvL9UKTGJtwL8Bqu3f7
TKtqp639CZRGsIyDabI+7SEFRsjNMzXITY9tjl+tmmgW
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:57 2025 by rpki-client