Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/yVtJV2wHnYYgGKReSCSnZYps7Ag.roa
File: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (raw, json)
Hash identifier: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=
Subject key identifier: C9:5B:49:57:6C:07:9D:86:20:18:A4:5E:48:24:A7:65:8A:6C:EC:08
Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial: 0194221FFC2BADFB7A49F20AAFA973944FC8
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/yVtJV2wHnYYgGKReSCSnZYps7Ag.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29238
IP address blocks: 79.98.112.0/21 maxlen: 21
79.98.112.0/24 maxlen: 24
79.98.113.0/24 maxlen: 24
79.98.114.0/24 maxlen: 24
79.98.115.0/24 maxlen: 24
79.98.116.0/24 maxlen: 24
79.98.117.0/24 maxlen: 24
185.66.128.0/22 maxlen: 22
217.21.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fc:2b:ad:fb:7a:49:f2:0a:af:a9:73:94:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c95b49576c079d862018a45e4824a7658a6cec08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:1e:6a:9b:4a:84:12:7e:c7:e5:6f:16:78:
a4:76:0c:a2:00:1e:f9:6e:b4:7e:8b:cc:83:ab:e3:
0d:2e:15:51:fe:bd:fb:85:ae:72:fc:d7:ee:53:a9:
69:bc:ad:b1:b6:3a:ba:22:e3:44:c6:4e:e4:1a:63:
45:71:6b:5d:0a:ac:ed:fc:63:3a:b9:93:df:f3:5d:
85:59:5b:61:30:24:e9:d3:b1:fa:34:f7:fc:0c:c7:
72:6a:bf:e2:af:53:db:09:a7:00:55:5f:93:ae:ae:
5d:6f:b6:d2:8c:36:d5:b2:78:b0:cd:a3:27:de:08:
3c:f8:dd:2c:26:a3:74:55:e8:d5:44:07:07:42:aa:
4d:00:b0:75:f0:1e:98:53:af:a7:84:5c:49:55:55:
93:6b:ec:a2:8e:01:b5:a0:3f:57:eb:26:11:30:b3:
9c:a8:8a:d5:e8:0a:da:61:46:99:81:65:03:ac:bb:
0e:cc:d4:55:52:58:c2:e9:82:b4:09:c3:38:07:a5:
e3:8b:73:81:d4:25:95:7a:b6:8a:65:7a:ee:e3:7c:
de:bb:fa:53:26:ba:ec:2d:a9:25:80:db:d4:c9:99:
6c:a3:d7:7a:48:40:4b:ed:e4:46:4f:cb:43:74:b1:
5f:2b:d0:31:ec:fb:00:e4:77:db:f5:f1:9c:92:7e:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:49:57:6C:07:9D:86:20:18:A4:5E:48:24:A7:65:8A:6C:EC:08
X509v3 Authority Key Identifier:
keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/yVtJV2wHnYYgGKReSCSnZYps7Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.112.0/21
185.66.128.0/22
217.21.144.0/20
Signature Algorithm: sha256WithRSAEncryption
68:80:c6:2d:54:80:45:ff:bd:0e:c3:d7:18:0a:c6:4c:e3:fc:
f3:13:f2:2e:fe:d2:dc:4e:7d:8e:87:00:b6:79:2d:0f:cd:15:
5f:a7:4d:7b:69:f3:18:6e:d6:79:c9:c3:4a:ca:18:53:1b:ab:
c2:e3:40:9c:03:8b:c7:e2:2d:58:20:ab:c6:36:d7:1b:6c:1e:
b2:5d:b2:94:f2:e8:61:1c:39:da:94:bb:a1:0c:5d:1f:72:69:
0e:c8:f9:55:73:3c:bb:83:94:c9:d8:1a:24:fb:49:d1:ff:22:
a9:01:c0:8c:7f:6f:7c:6c:18:7d:98:ea:c3:70:ad:4f:e3:45:
b6:d4:cb:eb:19:bc:df:ee:7a:c5:9d:75:ac:40:a9:c3:f3:f8:
9e:62:05:81:c1:48:b1:45:35:e3:1b:66:04:1e:0a:78:a8:b3:
f2:f5:22:35:01:6f:54:34:ce:e7:51:25:93:13:77:90:a2:ce:
67:27:2b:21:d5:e4:11:9c:b1:f1:c3:de:56:1d:47:2b:aa:18:
68:51:15:83:07:e9:80:0b:d7:31:52:0a:a4:20:79:d8:42:d6:
ca:9f:49:e6:27:ca:c7:16:70:04:6d:15:e3:95:e6:77:1c:ba:
46:01:55:6d:c4:03:1f:da:f7:bc:8b:2c:5f:97:9f:68:e4:73:
88:fe:dc:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQiH/wrrft6SfIKr6lzlE/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0N2I2NWY5Zjg3YWE4Zjc0MGQ1YTE3YTcyZTZmOGJjMWU1
ZDg4OGYwHhcNMjUwMTAxMTM0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTViNDk1NzZjMDc5ZDg2MjAxOGE0NWU0ODI0YTc2NThhNmNlYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL8eaptKhBJ+x+VvFnikdgyiAB75
brR+i8yDq+MNLhVR/r37ha5y/NfuU6lpvK2xtjq6IuNExk7kGmNFcWtdCqzt/GM6
uZPf812FWVthMCTp07H6NPf8DMdyar/ir1PbCacAVV+Trq5db7bSjDbVsniwzaMn
3gg8+N0sJqN0VejVRAcHQqpNALB18B6YU6+nhFxJVVWTa+yijgG1oD9X6yYRMLOc
qIrV6AraYUaZgWUDrLsOzNRVUljC6YK0CcM4B6Xji3OB1CWVeraKZXru43zeu/pT
JrrsLaklgNvUyZlso9d6SEBL7eRGT8tDdLFfK9Ax7PsA5Hfb9fGckn6hSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMlbSVdsB52GIBikXkgkp2WKbOwIMB8GA1UdIwQY
MBaAFER7Zfn4eqj3QNWhenLm+LweXYiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2Ut
MTVjYTc1M2ZhNTEwLzEveVZ0SlYyd0huWVlnR0tSZVNDU25aWXBzN0FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2UtMTVjYTc1M2ZhNTEw
LzEvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDT2JwAwQC
uUKAAwQE2RWQMA0GCSqGSIb3DQEBCwUAA4IBAQBogMYtVIBF/70Ow9cYCsZM4/zz
E/Iu/tLcTn2OhwC2eS0PzRVfp017afMYbtZ5ycNKyhhTG6vC40CcA4vH4i1YIKvG
NtcbbB6yXbKU8uhhHDnalLuhDF0fcmkOyPlVczy7g5TJ2Bok+0nR/yKpAcCMf298
bBh9mOrDcK1P40W21MvrGbzf7nrFnXWsQKnD8/ieYgWBwUixRTXjG2YEHgp4qLPy
9SI1AW9UNM7nUSWTE3eQos5nJysh1eQRnLHxw95WHUcrqhhoURWDB+mAC9cxUgqk
IHnYQtbKn0nmJ8rHFnAEbRXjleZ3HLpGAVVtxAMf2ve8iyxfl59o5HOI/twz
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:49 2025 by rpki-client