Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/YMIF9QGbE8ZUd4KtkxHWgl4rCYY.roa
File: YMIF9QGbE8ZUd4KtkxHWgl4rCYY.roa (raw, json)
Hash identifier: EfFPqt7V4dnU/dohJlXfwhRGHy28ftlIHNB1HaDfOmY=
Subject key identifier: 60:C2:05:F5:01:9B:13:C6:54:77:82:AD:93:11:D6:82:5E:2B:09:86
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC8BFE1FBB82D5A079DE6445788DE
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/YMIF9QGbE8ZUd4KtkxHWgl4rCYY.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198591
IP address blocks: 78.133.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c8:bf:e1:fb:b8:2d:5a:07:9d:e6:44:57:88:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60c205f5019b13c6547782ad9311d6825e2b0986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:37:db:a2:91:b3:9b:94:f4:3a:4e:0a:69:
43:99:03:61:e9:58:ad:6c:7c:1b:9c:18:b3:27:8f:
1f:96:f8:fb:f2:fd:c7:85:c6:82:e1:3f:87:74:9d:
87:ef:ab:4e:d6:2e:48:f9:6b:75:40:a6:9b:5d:99:
d3:a2:35:8a:49:e2:38:6c:ae:45:3c:69:6e:04:0d:
1b:b8:fe:ca:03:06:09:26:94:d2:3d:d0:92:52:53:
20:1d:3a:98:1a:b0:70:43:1d:a6:7a:dc:e2:49:70:
02:53:9e:13:82:83:52:7f:1c:8d:30:41:d8:e4:08:
ae:47:6b:db:87:bb:ba:cf:82:22:77:f3:89:8a:7f:
76:c0:47:61:d9:5b:d1:ca:7c:9c:a1:8c:ae:0b:b1:
e1:a8:a0:03:9a:62:11:20:c4:26:22:a3:4f:41:cc:
f2:c3:3f:ea:b7:9f:37:11:6c:07:2f:f8:76:9e:d7:
46:7f:ec:71:c2:41:78:25:64:eb:dc:68:9a:96:24:
ee:03:b1:52:ed:5a:fb:2f:8d:01:6e:3b:a3:85:f3:
da:31:af:5e:da:95:11:04:1b:3c:c3:54:83:81:65:
26:1e:6f:ec:4f:8e:3f:d9:e8:94:8b:11:98:0b:c9:
59:f7:ea:44:cf:72:90:ac:73:ad:0b:8e:96:43:04:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C2:05:F5:01:9B:13:C6:54:77:82:AD:93:11:D6:82:5E:2B:09:86
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/YMIF9QGbE8ZUd4KtkxHWgl4rCYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.133.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:07:f4:3e:35:9a:6b:c0:38:b6:1c:47:6c:c0:01:65:df:ab:
1f:20:37:0c:98:d7:81:19:c6:88:c7:83:d5:ae:97:4c:b8:cc:
fc:1f:86:97:4b:91:40:32:ad:aa:d2:53:26:a1:07:db:5b:74:
c6:12:64:f8:8f:c5:df:ad:5d:5a:1a:60:63:87:07:87:78:ce:
ec:6a:08:f0:dc:b3:31:ee:73:20:aa:69:1f:90:1f:d6:41:79:
14:bf:cb:5c:ef:67:c5:55:3d:46:f9:5e:a8:7f:bc:38:aa:93:
d3:3f:8e:69:77:87:a9:e7:2f:00:7b:9d:87:bf:96:3d:ab:fa:
9c:77:dd:9c:65:f2:19:90:d5:c1:27:1f:08:bf:70:b1:23:42:
b9:df:a6:49:1f:09:17:46:82:74:1a:da:05:a7:e1:eb:2b:2f:
32:7e:8a:54:08:d4:56:d4:ad:08:b3:72:f2:4c:92:65:65:c1:
85:46:f1:0a:11:c4:58:50:0f:e2:7a:ac:62:46:ad:2d:a0:70:
e8:6e:67:a9:bc:7b:fc:34:2f:0f:8f:5b:85:2c:df:49:9d:ec:
b4:31:3d:1c:67:a3:1d:89:f7:6e:5e:d6:43:6a:2a:fd:e1:45:
89:41:a2:d3:7d:fc:a7:13:f6:5b:e4:85:44:be:bf:6f:11:08:
69:95:d7:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH8i/4fu4LVoHneZEV4jeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjUwMTAxMTM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGMyMDVmNTAxOWIxM2M2NTQ3NzgyYWQ5MzExZDY4MjVlMmIwOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u0326KRs5uU9DpOCmlDmQNh6Vit
bHwbnBizJ48flvj78v3HhcaC4T+HdJ2H76tO1i5I+Wt1QKabXZnTojWKSeI4bK5F
PGluBA0buP7KAwYJJpTSPdCSUlMgHTqYGrBwQx2metziSXACU54TgoNSfxyNMEHY
5AiuR2vbh7u6z4Iid/OJin92wEdh2VvRynycoYyuC7HhqKADmmIRIMQmIqNPQczy
wz/qt583EWwHL/h2ntdGf+xxwkF4JWTr3GialiTuA7FS7Vr7L40BbjujhfPaMa9e
2pURBBs8w1SDgWUmHm/sT44/2eiUixGYC8lZ9+pEz3KQrHOtC46WQwR7ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGDCBfUBmxPGVHeCrZMR1oJeKwmGMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvWU1JRjlRR2JFOFpVZDRLdGt4SFdnbDRyQ1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToX2MA0G
CSqGSIb3DQEBCwUAA4IBAQCaB/Q+NZprwDi2HEdswAFl36sfIDcMmNeBGcaIx4PV
rpdMuMz8H4aXS5FAMq2q0lMmoQfbW3TGEmT4j8XfrV1aGmBjhweHeM7sagjw3LMx
7nMgqmkfkB/WQXkUv8tc72fFVT1G+V6of7w4qpPTP45pd4ep5y8Ae52Hv5Y9q/qc
d92cZfIZkNXBJx8Iv3CxI0K536ZJHwkXRoJ0GtoFp+HrKy8yfopUCNRW1K0Is3Ly
TJJlZcGFRvEKEcRYUA/ieqxiRq0toHDobmepvHv8NC8Pj1uFLN9Jney0MT0cZ6Md
ifduXtZDair94UWJQaLTffynE/Zb5IVEvr9vEQhplde+
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:32 2025 by rpki-client