Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/yp2315R2ufQovlLYyqvF4L6qpic.roa
File: yp2315R2ufQovlLYyqvF4L6qpic.roa (raw, json)
Hash identifier: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=
Subject key identifier: CA:9D:B7:D7:94:76:B9:F4:28:BE:52:D8:CA:AB:C5:E0:BE:AA:A6:27
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019421B1FEF62CFB87D4E867AACF1D1EECEE
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/yp2315R2ufQovlLYyqvF4L6qpic.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33667
IP address blocks: 2a03:2887:ff31::/48 maxlen: 48
2a03:2887:ff32::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fe:f6:2c:fb:87:d4:e8:67:aa:cf:1d:1e:ec:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca9db7d79476b9f428be52d8caabc5e0beaaa627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:bb:d5:3d:b9:6f:69:ed:bb:e8:2a:d8:a3:
8d:7c:6b:2f:94:09:bd:7e:37:39:84:03:a7:dd:bb:
bc:c8:70:cf:6a:c9:6d:f4:53:2b:ae:94:c9:eb:0c:
5d:51:f3:00:47:94:46:4a:ee:0a:0f:0f:54:14:f7:
ad:54:db:3c:42:c6:55:95:6b:f0:e6:19:5b:d4:45:
1b:f8:d1:0c:f0:f0:ce:b2:90:57:e6:4f:af:cd:3f:
cf:28:01:e9:16:8b:ef:34:e7:af:a1:6f:8a:51:b3:
4b:8f:eb:3f:6c:2a:e6:1e:e2:e4:4c:e0:34:0d:b4:
4b:4b:3b:11:cd:4b:7e:e9:df:aa:4c:bb:97:67:85:
89:ed:15:84:ae:6e:19:3b:0d:c8:c3:4a:00:f7:61:
19:7e:22:b1:a8:a1:7a:da:24:66:a8:52:75:cd:d0:
52:9f:5a:f2:26:f3:89:78:04:ee:12:82:cd:19:63:
bb:b6:88:10:51:dd:3e:6f:30:1d:66:21:e9:41:e2:
18:74:62:fc:96:fe:33:e7:74:8c:60:56:d0:eb:d6:
69:68:50:52:a4:d1:71:74:ad:8a:8c:ff:9c:d3:74:
5f:5f:5e:f7:0f:88:c8:18:d9:eb:e6:ad:63:3a:28:
cd:2c:ed:74:31:b0:aa:b2:56:15:7a:56:a4:ad:06:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:B7:D7:94:76:B9:F4:28:BE:52:D8:CA:AB:C5:E0:BE:AA:A6:27
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/yp2315R2ufQovlLYyqvF4L6qpic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff31::-2a03:2887:ff32:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cc:73:24:62:e5:d9:eb:4d:51:f0:6c:49:00:4a:6b:5f:30:8b:
1d:ac:42:de:10:37:7e:cd:47:a7:03:2a:82:4e:d4:c5:4c:01:
bd:5c:26:6c:41:89:02:6a:39:af:c3:5c:f3:38:7f:e6:9d:0b:
1a:ea:ef:b1:05:e8:23:55:3e:11:08:3c:6f:07:e6:eb:3e:39:
45:f8:01:26:47:8e:e2:9f:71:21:4f:9c:35:57:cf:4c:8c:52:
f8:2b:f3:0f:a5:93:c0:ce:45:29:bc:0b:17:a0:3d:df:a0:72:
75:71:77:c3:98:fa:e3:77:7d:10:1f:80:fd:f6:b8:62:34:93:
45:d2:a6:b6:9a:60:64:88:46:9b:e3:30:97:da:c5:94:e7:7d:
e3:62:d2:f7:a4:4d:95:e1:e1:d4:6e:a8:e4:22:27:d3:b9:70:
33:be:f5:29:30:ca:e8:6a:1a:72:1c:7f:6e:df:44:8a:2d:3a:
39:f9:14:da:47:21:5e:a0:b3:ad:e0:73:36:e0:65:93:0a:d0:
35:3d:b7:af:96:c4:f6:13:d0:a5:44:91:bb:32:fa:60:e8:b9:
e3:45:fa:ec:e3:6b:d3:6e:f1:ba:74:48:15:d6:71:36:03:21:
a4:5d:14:2f:2c:21:b5:13:2b:55:af:35:64:af:d8:4c:72:c0:
61:ca:fb:fd
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQhsf72LPuH1Ohnqs8dHuzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx
MmE4MTEwHhcNMjUwMTAxMTE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTlkYjdkNzk0NzZiOWY0MjhiZTUyZDhjYWFiYzVlMGJlYWFhNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23i71T25b2ntu+gq2KONfGsvlAm9
fjc5hAOn3bu8yHDPaslt9FMrrpTJ6wxdUfMAR5RGSu4KDw9UFPetVNs8QsZVlWvw
5hlb1EUb+NEM8PDOspBX5k+vzT/PKAHpFovvNOevoW+KUbNLj+s/bCrmHuLkTOA0
DbRLSzsRzUt+6d+qTLuXZ4WJ7RWErm4ZOw3Iw0oA92EZfiKxqKF62iRmqFJ1zdBS
n1ryJvOJeATuEoLNGWO7togQUd0+bzAdZiHpQeIYdGL8lv4z53SMYFbQ69ZpaFBS
pNFxdK2KjP+c03RfX173D4jIGNnr5q1jOijNLO10MbCqslYVelakrQYWewIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMqdt9eUdrn0KL5S2MqrxeC+qqYnMB8GA1UdIwQY
MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt
ZjQ0YTU3Y2VkNzNkLzEveXAyMzE1UjJ1ZlFvdmxMWXlxdkY0TDZxcGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk
LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqAyiH
/zEDBwAqAyiH/zIwDQYJKoZIhvcNAQELBQADggEBAMxzJGLl2etNUfBsSQBKa18w
ix2sQt4QN37NR6cDKoJO1MVMAb1cJmxBiQJqOa/DXPM4f+adCxrq77EF6CNVPhEI
PG8H5us+OUX4ASZHjuKfcSFPnDVXz0yMUvgr8w+lk8DORSm8CxegPd+gcnVxd8OY
+uN3fRAfgP32uGI0k0XSpraaYGSIRpvjMJfaxZTnfeNi0vekTZXh4dRuqOQiJ9O5
cDO+9SkwyuhqGnIcf27fRIotOjn5FNpHIV6gs63gczbgZZMK0DU9t6+WxPYT0KVE
kbsy+mDoueNF+uzja9Nu8bp0SBXWcTYDIaRdFC8sIbUTK1WvNWSv2ExywGHK+/0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:35:32 2025 by rpki-client