Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/YSRwVcOmkzY4y6xsxUUlMYiCsuM.roa
File: YSRwVcOmkzY4y6xsxUUlMYiCsuM.roa (raw, json)
Hash identifier: E+2G7AnDfRBspqYaGVN2cbM3DsdpEi3XPr/W//FkOXo=
Subject key identifier: 61:24:70:55:C3:A6:93:36:38:CB:AC:6C:C5:45:25:31:88:82:B2:E3
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 01942522121ADA5E569B374DF84EFA732610
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/YSRwVcOmkzY4y6xsxUUlMYiCsuM.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210779
IP address blocks: 176.105.253.0/24 maxlen: 24
176.105.255.0/24 maxlen: 24
2a0d:c740:a::/48 maxlen: 48
2a0d:c740:f::/48 maxlen: 48
2a0d:c740:2c::/48 maxlen: 48
2a0d:c740:3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:1a:da:5e:56:9b:37:4d:f8:4e:fa:73:26:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61247055c3a6933638cbac6cc54525318882b2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:89:bc:cb:dc:f3:77:4c:6b:34:ab:a5:e4:
62:38:97:b8:3e:7f:0b:bf:1b:da:2d:f7:f6:50:f8:
e6:5a:39:24:c1:13:1c:d8:c1:4f:55:d4:8f:63:74:
a7:82:f6:34:ab:e4:e9:ed:a4:eb:0b:cd:4e:86:00:
ab:9c:05:7c:52:61:fb:e4:50:f9:52:52:9f:95:a9:
ad:fe:e9:03:48:ab:18:f7:0f:b3:e6:60:c7:7a:d2:
90:a5:9e:59:c4:6d:5d:f5:89:e3:15:9d:b2:c7:82:
a4:3c:09:95:6e:10:14:77:fa:8c:bd:51:0b:48:e6:
50:94:2c:98:29:af:d8:76:d4:bc:7d:e2:91:0e:f6:
22:6a:14:24:63:e0:9b:df:d5:a4:4b:61:c7:1b:58:
d1:dd:f7:c8:dd:45:cc:17:4f:de:da:b6:72:c2:13:
1d:0e:07:48:2f:a1:6e:ce:e7:75:cc:3b:98:19:58:
db:fe:c2:79:bf:f6:aa:61:0e:e1:ab:f3:82:31:5f:
13:45:34:6d:d2:9e:03:e5:3e:11:57:b4:25:57:65:
60:dd:d1:03:85:a4:bf:b7:99:b8:56:7e:e0:e4:38:
fd:85:96:6a:b2:30:ad:69:14:b9:a0:df:51:4d:a0:
02:38:3b:18:61:63:b8:b8:71:77:d6:b7:8e:17:2b:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:70:55:C3:A6:93:36:38:CB:AC:6C:C5:45:25:31:88:82:B2:E3
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/YSRwVcOmkzY4y6xsxUUlMYiCsuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
176.105.255.0/24
IPv6:
2a0d:c740:a::/48
2a0d:c740:f::/48
2a0d:c740:2c::/48
2a0d:c740:3c::/48
Signature Algorithm: sha256WithRSAEncryption
7d:53:6d:80:2a:88:e0:8b:ca:d3:64:ef:f1:f9:87:52:e3:f2:
63:2b:10:d5:12:76:bc:ed:50:b9:16:8d:9b:3c:2c:99:cb:07:
ff:dd:a7:1a:40:e5:a3:ce:5e:eb:d8:21:65:d0:dd:bc:08:6d:
58:d8:52:dd:76:c1:c3:fb:0c:0f:ad:97:67:a9:78:cc:06:ee:
bb:2e:73:38:5e:bb:12:03:30:ca:9d:65:0b:fc:61:2e:99:87:
6e:48:d6:f2:81:7e:27:d1:af:41:59:2d:ba:5a:cc:bb:63:74:
68:b4:ae:96:b5:de:8b:9b:fe:4a:5b:31:e8:fb:b1:17:68:a6:
fd:05:07:fe:81:57:13:e6:9b:74:4b:8e:9f:ef:6b:22:7b:94:
3c:41:40:99:be:52:dc:25:41:14:4e:7d:b5:6d:24:59:93:f3:
23:90:8e:b2:5d:c7:f8:5b:61:6f:c3:14:46:ce:a8:9e:db:df:
36:c8:90:d0:74:db:6b:74:44:2c:02:ff:e5:de:e7:3c:e4:e1:
d9:ed:45:f8:a0:99:4e:e0:61:e2:66:96:f6:11:cc:d0:b3:ca:
46:18:50:84:96:1a:3c:aa:70:03:76:1a:c4:8c:6a:3f:98:9c:
10:c5:b4:3b:19:e7:f3:c1:5b:dd:6f:1f:98:de:3f:3a:2b:b8:
24:37:5a:86
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZQlIhIa2l5WmzdN+E76cyYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTI2YjU2Y2VlOTdmNjAyMDk0MWJiMTdjNmE3YzZjZWEw
ZjgxNGEwHhcNMjUwMTAyMDM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTI0NzA1NWMzYTY5MzM2MzhjYmFjNmNjNTQ1MjUzMTg4ODJiMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5SJvMvc83dMazSrpeRiOJe4Pn8L
vxvaLff2UPjmWjkkwRMc2MFPVdSPY3SngvY0q+Tp7aTrC81OhgCrnAV8UmH75FD5
UlKflamt/ukDSKsY9w+z5mDHetKQpZ5ZxG1d9YnjFZ2yx4KkPAmVbhAUd/qMvVEL
SOZQlCyYKa/YdtS8feKRDvYiahQkY+Cb39WkS2HHG1jR3ffI3UXMF0/e2rZywhMd
DgdIL6Fuzud1zDuYGVjb/sJ5v/aqYQ7hq/OCMV8TRTRt0p4D5T4RV7QlV2Vg3dED
haS/t5m4Vn7g5Dj9hZZqsjCtaRS5oN9RTaACODsYYWO4uHF31reOFytLXwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFGEkcFXDppM2OMusbMVFJTGIgrLjMB8GA1UdIwQY
MBaAFGuia1bO6X9gIJQbsXxqfGzqD4FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYt
MzY5MmY5NmUzM2E5LzEvWVNSd1ZjT21relk0eTZ4c3hVVWxNWWlDc3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYtMzY5MmY5NmUzM2E5
LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDASBAIAATAMAwQAsGn9AwQA
sGn/MCoEAgACMCQDBwAqDcdAAAoDBwAqDcdAAA8DBwAqDcdAACwDBwAqDcdAADww
DQYJKoZIhvcNAQELBQADggEBAH1TbYAqiOCLytNk7/H5h1Lj8mMrENUSdrztULkW
jZs8LJnLB//dpxpA5aPOXuvYIWXQ3bwIbVjYUt12wcP7DA+tl2epeMwG7rsuczhe
uxIDMMqdZQv8YS6Zh25I1vKBfifRr0FZLbpazLtjdGi0rpa13oub/kpbMej7sRdo
pv0FB/6BVxPmm3RLjp/vayJ7lDxBQJm+UtwlQRROfbVtJFmT8yOQjrJdx/hbYW/D
FEbOqJ7b3zbIkNB022t0RCwC/+Xe5zzk4dntRfigmU7gYeJmlvYRzNCzykYYUISW
GjyqcAN2GsSMaj+YnBDFtDsZ5/PBW91vH5jePzoruCQ3WoY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:18 2025 by rpki-client