Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PyuJ8ajQMYNnyXsNHDMS0giYKAw.roa
File: PyuJ8ajQMYNnyXsNHDMS0giYKAw.roa (raw, json)
Hash identifier: vOpvsrmW6NObHI95Q1ZbU69Xm5y/8DMv/oIzgb4wq4Y=
Subject key identifier: 3F:2B:89:F1:A8:D0:31:83:67:C9:7B:0D:1C:33:12:D2:08:98:28:0C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBDC09247F42A58ACE95A2E4F93956
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PyuJ8ajQMYNnyXsNHDMS0giYKAw.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203062
IP address blocks: 2a0c:9a40:9100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dc:09:24:7f:42:a5:8a:ce:95:a2:e4:f9:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2b89f1a8d0318367c97b0d1c3312d20898280c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:72:71:98:45:1f:fb:5b:a6:65:99:ca:a9:
1c:83:e4:18:ac:12:bd:b7:91:4e:86:d4:43:f9:31:
52:fe:bb:2d:53:f1:f5:c5:10:91:58:cd:90:80:21:
e0:ae:96:41:f4:ce:c1:9a:19:82:08:a6:df:75:95:
36:f0:96:74:a2:9b:b2:bd:ec:b5:0d:5f:e2:d8:92:
df:65:47:a3:b3:32:c3:af:6d:32:01:5d:83:11:3a:
07:7c:6d:92:b5:92:91:19:04:80:b4:64:29:1f:db:
c2:42:bf:28:e5:00:18:93:eb:cf:3e:77:3e:80:1f:
7a:78:e4:d7:ad:30:11:97:73:5f:4c:93:0e:11:f4:
09:4a:8b:92:7e:ca:68:11:37:a4:c2:d6:0a:7a:f7:
cf:ef:2a:9a:e8:98:df:eb:e6:ad:6e:ef:83:ab:56:
51:f8:6e:2f:c6:b8:4e:06:aa:d8:fb:9e:aa:26:d9:
7b:c6:a7:e1:78:43:78:a1:c4:75:f4:37:32:1e:db:
55:f1:5d:5a:c4:ef:f0:a8:7b:76:c9:19:80:30:ca:
b7:92:7a:12:51:9c:62:2a:bc:14:40:c6:ff:fc:e4:
da:17:4b:63:8a:91:2c:a5:d3:dc:12:63:77:65:01:
97:8b:59:7e:ac:73:24:8f:40:27:8f:ac:9f:34:a3:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:89:F1:A8:D0:31:83:67:C9:7B:0D:1C:33:12:D2:08:98:28:0C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PyuJ8ajQMYNnyXsNHDMS0giYKAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9100::/40
Signature Algorithm: sha256WithRSAEncryption
06:c7:df:e7:54:9c:5b:e4:45:fc:0c:02:d5:79:03:d5:c6:04:
9d:51:f1:75:22:46:e5:ab:ce:ef:ae:6d:40:c3:1f:31:d9:59:
2d:1d:fd:7d:9e:f5:4a:c5:9e:12:8d:1f:2e:86:ed:f9:55:66:
d7:64:dc:c8:99:13:05:90:c7:64:1e:aa:9a:44:ef:39:3a:7f:
c1:06:b4:aa:16:bb:dc:76:88:95:8d:b1:56:f8:c3:43:54:8c:
f9:2b:e9:82:2d:d0:e8:ff:0a:11:9d:09:90:fc:0f:bb:12:ee:
35:49:fe:f1:3b:c4:5c:e3:93:ee:a1:d9:81:8d:77:05:ab:a3:
0a:96:66:84:10:57:d5:14:8a:4b:fb:bc:5b:dd:53:4c:e3:9f:
21:08:b6:e1:14:c3:23:f0:ef:c0:46:78:39:1d:db:e6:80:4e:
c7:65:2b:74:e3:67:09:fa:09:be:32:cb:6c:11:0f:10:55:a9:
a7:8b:7c:28:c6:ca:5c:35:f8:0d:db:80:ab:40:d4:65:49:36:
3c:cf:98:8a:24:7a:75:d8:ae:fd:fd:cb:93:e5:24:78:78:d3:
07:c1:04:4d:a6:d9:77:f8:60:1b:87:73:e7:31:56:96:6e:f1:
10:95:43:a3:2a:7b:d0:5a:82:c6:3e:7b:76:55:41:d3:a7:ca:
9e:3d:00:51
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQi+9wJJH9CpYrOlaLk+TlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjJiODlmMWE4ZDAzMTgzNjdjOTdiMGQxYzMzMTJkMjA4OTgyODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQxycZhFH/tbpmWZyqkcg+QYrBK9
t5FOhtRD+TFS/rstU/H1xRCRWM2QgCHgrpZB9M7BmhmCCKbfdZU28JZ0opuyvey1
DV/i2JLfZUejszLDr20yAV2DEToHfG2StZKRGQSAtGQpH9vCQr8o5QAYk+vPPnc+
gB96eOTXrTARl3NfTJMOEfQJSouSfspoETekwtYKevfP7yqa6Jjf6+atbu+Dq1ZR
+G4vxrhOBqrY+56qJtl7xqfheEN4ocR19DcyHttV8V1axO/wqHt2yRmAMMq3knoS
UZxiKrwUQMb//OTaF0tjipEspdPcEmN3ZQGXi1l+rHMkj0Anj6yfNKOcGQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFD8rifGo0DGDZ8l7DRwzEtIImCgMMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvUHl1SjhhalFNWU5ueVhzTkhETVMwZ2lZS0F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQJEw
DQYJKoZIhvcNAQELBQADggEBAAbH3+dUnFvkRfwMAtV5A9XGBJ1R8XUiRuWrzu+u
bUDDHzHZWS0d/X2e9UrFnhKNHy6G7flVZtdk3MiZEwWQx2QeqppE7zk6f8EGtKoW
u9x2iJWNsVb4w0NUjPkr6YIt0Oj/ChGdCZD8D7sS7jVJ/vE7xFzjk+6h2YGNdwWr
owqWZoQQV9UUikv7vFvdU0zjnyEItuEUwyPw78BGeDkd2+aATsdlK3TjZwn6Cb4y
y2wRDxBVqaeLfCjGylw1+A3bgKtA1GVJNjzPmIokenXYrv39y5PlJHh40wfBBE2m
2Xf4YBuHc+cxVpZu8RCVQ6Mqe9BagsY+e3ZVQdOnyp49AFE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:15 2025 by rpki-client