Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YwFkIKAufazt2-EKvwplcz0kXv0.roa
File: YwFkIKAufazt2-EKvwplcz0kXv0.roa (raw, json)
Hash identifier: Pk3Lzq5BD4v44XrUUlv5OFOFKsyF9J4R9E5IpllOu3Q=
Subject key identifier: 63:01:64:20:A0:2E:7D:AC:ED:DB:E1:0A:BF:0A:65:73:3D:24:5E:FD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274815988DE223C0C59235A7F544C11D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YwFkIKAufazt2-EKvwplcz0kXv0.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.129.127.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
2a0f:1e84:10::/48 maxlen: 48
2a0f:2ec0::/29 maxlen: 29
2a0f:31c0::/29 maxlen: 29
2a12:ecc0:200::/48 maxlen: 48
2a13:8c86:150::/48 maxlen: 48
2a13:fc00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:15:98:8d:e2:23:c0:c5:92:35:a7:f5:44:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63016420a02e7daceddbe10abf0a65733d245efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:fa:3a:75:3f:0a:87:94:1c:98:0c:8d:88:
93:d0:e7:3a:d0:f8:b0:59:8a:90:e2:a5:c8:f2:ea:
a6:0c:8c:1e:e9:ff:4f:e0:1d:bf:76:44:49:47:28:
1a:28:e6:a9:44:89:08:83:0d:2a:b5:29:9b:98:f4:
f5:e3:97:e0:27:5f:65:4f:86:41:07:10:87:a6:43:
7d:8e:0a:52:f6:d0:73:3f:70:71:9d:3b:00:b0:85:
40:d2:3b:2d:12:c7:79:af:d8:55:a3:d0:2c:49:fd:
06:32:ad:0c:26:42:40:7a:50:3c:99:4d:44:07:80:
23:04:e2:52:8b:a5:c1:b1:3b:69:dc:18:46:35:a0:
b7:2e:a9:7f:5f:85:b4:cd:e0:27:72:4b:b7:a5:e2:
aa:16:e5:67:f6:89:c7:ed:25:2b:1b:2c:bd:f6:db:
0c:2d:3a:cc:1b:d0:a0:e8:08:a3:28:c6:af:5c:de:
93:93:c7:99:41:a4:da:fc:35:3b:08:b2:6d:39:d4:
9a:e2:01:17:90:be:50:d5:b6:f5:d4:c5:04:fd:d3:
a4:eb:9f:de:1c:4e:0c:32:b6:39:59:f3:40:79:23:
01:17:6a:57:49:c4:03:21:7d:0f:61:62:bf:fe:aa:
af:69:87:18:0f:cd:cb:a9:45:a6:88:04:9a:39:21:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:64:20:A0:2E:7D:AC:ED:DB:E1:0A:BF:0A:65:73:3D:24:5E:FD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YwFkIKAufazt2-EKvwplcz0kXv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
93.190.246.0/23
IPv6:
2a0f:1e84:10::/48
2a0f:2ec0::/29
2a0f:31c0::/29
2a12:ecc0:200::/48
2a13:8c86:150::/48
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
29:73:2c:37:2c:87:11:62:26:16:6d:f3:38:41:ea:ad:07:f3:
47:b9:15:0a:b8:8b:dd:cc:04:9c:0c:d9:eb:38:7d:5c:53:cf:
33:40:19:e4:dd:00:47:b2:3e:8f:37:1f:48:f5:6f:82:53:a3:
0b:09:bd:f0:e1:12:3e:89:3c:6d:2c:1b:c3:44:c8:5a:61:d3:
1b:fd:a7:31:6c:71:0b:13:20:3b:4e:cc:a7:f2:68:34:72:29:
6a:45:b9:c6:e2:2f:9f:57:40:cf:83:79:b1:92:99:2a:29:e6:
c4:1d:e9:08:b4:25:67:13:9c:88:4a:f8:b9:ec:0b:b0:34:b8:
a6:cd:65:5a:50:d8:48:80:be:65:f8:0c:5c:eb:11:e2:5a:7e:
43:f5:72:22:d8:5f:07:63:8f:75:5d:85:c5:5d:2f:cd:9a:88:
fd:9b:67:12:c9:27:ed:6d:a1:66:ec:c3:ee:78:84:a1:50:f4:
a6:dc:c2:82:ba:68:88:c6:c4:a3:f7:9b:7e:a7:67:78:39:93:
df:58:5f:08:6b:6f:ef:c5:85:24:77:4f:2d:bc:03:2e:d1:ff:
59:86:a4:fe:e4:19:06:82:30:f8:c5:c0:fd:8b:71:60:53:ca:
cf:60:3e:96:ea:d8:8f:21:00:8c:cd:a7:34:16:e4:42:35:c7:
fe:81:f3:93
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZQnSBWYjeIjwMWSNaf1RMEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzAxNjQyMGEwMmU3ZGFjZWRkYmUxMGFiZjBhNjU3MzNkMjQ1ZWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1n6OnU/CoeUHJgMjYiT0Oc60Piw
WYqQ4qXI8uqmDIwe6f9P4B2/dkRJRygaKOapRIkIgw0qtSmbmPT145fgJ19lT4ZB
BxCHpkN9jgpS9tBzP3BxnTsAsIVA0jstEsd5r9hVo9AsSf0GMq0MJkJAelA8mU1E
B4AjBOJSi6XBsTtp3BhGNaC3Lql/X4W0zeAncku3peKqFuVn9onH7SUrGyy99tsM
LTrMG9Cg6AijKMavXN6Tk8eZQaTa/DU7CLJtOdSa4gEXkL5Q1bb11MUE/dOk65/e
HE4MMrY5WfNAeSMBF2pXScQDIX0PYWK//qqvaYcYD83LqUWmiASaOSElFQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFGMBZCCgLn2s7dvhCr8KZXM9JF79MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWXdGa0lLQXVmYXp0Mi1FS3Z3cGxjejBrWHYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDASBAIAATAMAwQALYF/AwQB
Xb72MDYEAgACMDADBwAqDx6EABADBQMqDy7AAwUDKg8xwAMHACoS7MACAAMHACoT
jIYBUAMFAyoT/AAwDQYJKoZIhvcNAQELBQADggEBAClzLDcshxFiJhZt8zhB6q0H
80e5FQq4i93MBJwM2es4fVxTzzNAGeTdAEeyPo83H0j1b4JTowsJvfDhEj6JPG0s
G8NEyFph0xv9pzFscQsTIDtOzKfyaDRyKWpFucbiL59XQM+DebGSmSop5sQd6Qi0
JWcTnIhK+LnsC7A0uKbNZVpQ2EiAvmX4DFzrEeJafkP1ciLYXwdjj3VdhcVdL82a
iP2bZxLJJ+1toWbsw+54hKFQ9KbcwoK6aIjGxKP3m36nZ3g5k99YXwhrb+/FhSR3
Ty28Ay7R/1mGpP7kGQaCMPjFwP2LcWBTys9gPpbq2I8hAIzNpzQW5EI1x/6B85M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:21 2025 by rpki-client