Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/yeksH9vuwOfY2GZnjy3cVhtk3jU.roa
File: yeksH9vuwOfY2GZnjy3cVhtk3jU.roa (raw, json)
Hash identifier: tBtwKbAIW9+lpdwVZBQ+U96ax1Xc5EXkO1D3NFot0II=
Subject key identifier: C9:E9:2C:1F:DB:EE:C0:E7:D8:D8:66:67:8F:2D:DC:56:1B:64:DE:35
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC3DC4319DCD89C78D82A7E4034E8
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/yeksH9vuwOfY2GZnjy3cVhtk3jU.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59958
IP address blocks: 85.219.176.0/20 maxlen: 20
89.174.128.0/19 maxlen: 19
89.174.160.0/23 maxlen: 23
89.174.162.0/24 maxlen: 24
89.174.192.0/20 maxlen: 20
89.174.208.0/22 maxlen: 22
217.153.84.0/26 maxlen: 26
217.153.85.192/26 maxlen: 26
217.153.168.0/23 maxlen: 23
217.153.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:dc:43:19:dc:d8:9c:78:d8:2a:7e:40:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9e92c1fdbeec0e7d8d866678f2ddc561b64de35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:ac:13:61:ba:9c:3e:43:c8:7e:0f:87:6e:
4f:78:6b:61:3f:b4:f1:58:04:bc:21:92:5f:d8:54:
83:61:46:cb:6c:35:63:a2:73:a9:e9:73:fe:1f:d3:
90:db:cd:37:ed:6c:19:a9:f3:41:e7:01:c5:c7:d7:
df:87:69:e9:a7:95:93:c1:c9:be:cc:a8:a2:04:54:
ed:ec:6b:40:7a:11:fe:42:e8:ea:22:c6:c3:2c:7f:
66:3d:05:ba:11:9e:b9:8f:23:59:bd:c4:c1:1b:5d:
b0:29:5b:72:1f:4d:c5:95:68:76:4f:fc:10:17:b7:
6b:73:93:03:13:aa:7b:9e:56:11:b3:19:03:26:fc:
30:82:ca:d7:b8:43:f8:c0:7a:d6:4b:ed:68:de:1f:
6f:19:70:4d:67:20:03:94:33:53:37:8a:01:b1:9a:
9b:8a:11:88:f7:a0:ba:35:c8:5b:15:64:c9:97:5b:
62:9b:69:12:a6:49:7f:8b:1b:99:b7:36:2c:ac:c7:
9b:3c:4e:e8:f4:4a:40:0f:a3:47:50:fb:a9:cc:c6:
9e:f7:d3:e7:72:fe:b9:49:b5:bc:a1:29:b7:6a:4e:
de:9a:5f:42:3c:e9:40:4f:d6:fa:8a:41:f8:42:74:
dc:da:ec:2d:7b:8a:1e:d2:b3:76:a1:5a:66:e6:d7:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:2C:1F:DB:EE:C0:E7:D8:D8:66:67:8F:2D:DC:56:1B:64:DE:35
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/yeksH9vuwOfY2GZnjy3cVhtk3jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.176.0/20
89.174.128.0-89.174.162.255
89.174.192.0-89.174.211.255
217.153.84.0/26
217.153.85.192/26
217.153.168.0/23
217.153.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:fc:45:20:42:16:71:f9:9d:cb:0c:1f:04:b7:ee:c1:de:91:
d3:de:9b:47:c8:ba:72:a5:64:e0:22:02:ad:e9:8a:f1:1c:eb:
61:52:be:36:1a:34:f2:a5:14:bb:dc:95:9c:95:29:7e:2a:8c:
ce:15:53:76:6c:a8:d7:18:e8:08:46:22:bd:6d:f5:89:3c:d8:
5d:39:64:b0:cc:6b:ce:26:09:a9:32:c8:73:fd:db:87:78:14:
f1:f3:a8:a8:97:20:72:0b:35:ff:c6:dd:e9:33:37:2d:11:4c:
b9:54:24:0f:b8:dc:fd:d2:c0:50:51:2a:fd:fe:bc:03:8c:a3:
c6:46:ae:02:c2:67:2a:2f:89:76:39:b1:0d:cc:62:bc:aa:17:
1e:6d:17:e8:d9:cf:98:67:55:30:97:6e:c5:94:fb:13:74:e2:
e7:7a:1b:30:24:db:3b:04:88:48:56:62:f7:3c:f4:37:d1:68:
fe:d8:c5:0b:9c:62:a1:49:b0:05:02:aa:fc:f9:9c:f4:76:4f:
80:e8:47:93:9e:df:8b:c7:b0:44:fb:4d:1a:0c:f8:b3:d6:53:
09:04:a9:7a:06:00:5f:a2:e0:b4:6d:c4:b5:2b:e9:37:04:57:
9d:70:f7:85:53:5e:16:93:38:6e:30:54:d1:96:a3:1c:07:f5:
d2:8d:51:a0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZQiH8PcQxnc2Jx42Cp+QDToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjUwMTAxMTM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWU5MmMxZmRiZWVjMGU3ZDhkODY2Njc4ZjJkZGM1NjFiNjRkZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwysE2G6nD5DyH4Ph25PeGthP7Tx
WAS8IZJf2FSDYUbLbDVjonOp6XP+H9OQ28037WwZqfNB5wHFx9ffh2npp5WTwcm+
zKiiBFTt7GtAehH+QujqIsbDLH9mPQW6EZ65jyNZvcTBG12wKVtyH03FlWh2T/wQ
F7drc5MDE6p7nlYRsxkDJvwwgsrXuEP4wHrWS+1o3h9vGXBNZyADlDNTN4oBsZqb
ihGI96C6NchbFWTJl1tim2kSpkl/ixuZtzYsrMebPE7o9EpAD6NHUPupzMae99Pn
cv65SbW8oSm3ak7eml9CPOlAT9b6ikH4QnTc2uwte4oe0rN2oVpm5tdZmQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFMnpLB/b7sDn2NhmZ48t3FYbZN41MB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEveWVrc0g5dnV3T2ZZMkdabmp5M2NWaHRrM2pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQEVduwMAwD
BAdZroADBABZrqIwDAMEBlmuwAMEAlmu0AMFBtmZVAADBQbZmVXAAwQB2ZmoAwQC
2Zn8MA0GCSqGSIb3DQEBCwUAA4IBAQBO/EUgQhZx+Z3LDB8Et+7B3pHT3ptHyLpy
pWTgIgKt6YrxHOthUr42GjTypRS73JWclSl+KozOFVN2bKjXGOgIRiK9bfWJPNhd
OWSwzGvOJgmpMshz/duHeBTx86iolyByCzX/xt3pMzctEUy5VCQPuNz90sBQUSr9
/rwDjKPGRq4CwmcqL4l2ObENzGK8qhcebRfo2c+YZ1Uwl27FlPsTdOLnehswJNs7
BIhIVmL3PPQ30Wj+2MULnGKhSbAFAqr8+Zz0dk+A6EeTnt+Lx7BE+00aDPiz1lMJ
BKl6BgBfouC0bcS1K+k3BFedcPeFU14WkzhuMFTRlqMcB/XSjVGg
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:52 2025 by rpki-client