Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/YV0LpnxtBTAq4lz06bEpbCvyfLw.roa
File: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (raw, json)
Hash identifier: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=
Subject key identifier: 61:5D:0B:A6:7C:6D:05:30:2A:E2:5C:F4:E9:B1:29:6C:2B:F2:7C:BC
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019426D96D84753DFD19AB81FD20601CB4D4
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/YV0LpnxtBTAq4lz06bEpbCvyfLw.roa
Signing time: Thu 02 Jan 2025 11:49:31 +0000
ROA not before: Thu 02 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213151
IP address blocks: 2001:678:1e8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6d:84:75:3d:fd:19:ab:81:fd:20:60:1c:b4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=615d0ba67c6d05302ae25cf4e9b1296c2bf27cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:2d:69:4a:86:eb:b6:1c:1c:71:e6:4a:62:
01:53:8f:8c:41:43:dc:9b:ae:f4:1d:f8:5d:ef:e9:
25:4b:18:4f:95:05:71:77:95:bc:ac:1a:73:83:34:
72:ff:dd:63:08:41:8d:64:e3:e4:e5:f3:ef:7a:51:
f5:ef:d7:a8:68:25:94:c4:71:e7:e5:12:cc:8d:60:
e7:61:02:e7:8d:34:48:e4:8c:80:12:fd:b4:90:52:
28:3d:cb:8e:f1:18:d8:21:b9:45:dc:cd:56:c5:58:
5e:e7:50:49:28:1a:47:b8:72:3e:de:f8:77:c9:43:
46:00:70:2f:a6:75:05:e9:81:03:82:5d:29:6a:da:
3e:ec:8d:9c:60:aa:3c:2a:6e:4d:f4:1f:04:4f:14:
17:d9:30:f6:2b:cf:fe:1c:6e:d4:fd:ca:e7:29:42:
f3:ba:9a:1e:ef:4e:48:f1:e2:23:98:ae:ef:d7:a0:
99:f8:08:c1:b5:44:1d:cb:44:9e:a6:ef:de:e3:2f:
65:11:73:16:74:44:b4:06:01:b1:77:b2:84:9d:a3:
00:f5:16:2c:3c:29:e4:63:f7:a5:16:a6:90:8b:ab:
80:2b:6f:13:05:45:0f:aa:0e:90:1a:6a:30:fd:19:
27:10:df:0c:36:bc:57:06:67:3c:6e:33:af:65:18:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:0B:A6:7C:6D:05:30:2A:E2:5C:F4:E9:B1:29:6C:2B:F2:7C:BC
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/YV0LpnxtBTAq4lz06bEpbCvyfLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1e8::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ef:fe:7a:bb:94:67:b9:59:d8:e6:43:1a:9b:d1:c7:89:8a:
23:1a:7a:75:e8:ac:39:de:3c:68:d5:b8:53:3c:85:33:a5:78:
3f:c7:b4:3c:b3:8e:43:05:f6:8c:f5:25:3e:5f:7f:34:49:55:
da:a4:e5:6b:3b:b2:15:1a:c4:c3:20:85:8c:79:ad:a3:26:ff:
d6:50:82:1f:1f:da:c5:2e:f0:25:65:d2:28:73:0a:0e:ea:2d:
8f:0f:20:0e:30:b7:df:f7:e7:7d:52:dc:41:72:6d:42:3a:26:
19:27:be:b0:03:c3:23:ee:a3:a2:ca:6f:f7:ab:0f:72:23:dc:
59:ba:a5:86:91:0f:95:65:2c:79:c8:b9:8c:4b:08:0a:af:22:
85:05:1f:1f:4e:89:59:ee:92:a0:0c:43:ab:b9:3c:55:be:99:
4c:94:3a:44:73:00:0d:ef:04:6c:65:3f:6d:19:24:0e:de:cc:
fa:ad:eb:44:45:9f:ec:82:da:57:f3:7c:8f:a9:f9:8d:41:13:
54:71:ab:a5:22:f6:ee:06:95:b0:a4:ee:ee:18:12:d0:5c:48:
62:b3:58:68:bc:be:bd:f7:7f:36:9b:45:18:dd:1f:3f:6e:7f:
50:9c:bf:43:17:c3:6e:84:19:00:4f:67:73:d0:73:bf:49:78:
5c:96:64:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2W2EdT39GauB/SBgHLTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDhiNzZiMjE2NDc2OTZjOWY0ZDYzODJiNTI1ZDgzYTA1
ODBmNGEwHhcNMjUwMTAyMTE0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTVkMGJhNjdjNmQwNTMwMmFlMjVjZjRlOWIxMjk2YzJiZjI3Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUktaUqG67YcHHHmSmIBU4+MQUPc
m670Hfhd7+klSxhPlQVxd5W8rBpzgzRy/91jCEGNZOPk5fPvelH179eoaCWUxHHn
5RLMjWDnYQLnjTRI5IyAEv20kFIoPcuO8RjYIblF3M1WxVhe51BJKBpHuHI+3vh3
yUNGAHAvpnUF6YEDgl0pato+7I2cYKo8Km5N9B8ETxQX2TD2K8/+HG7U/crnKULz
upoe705I8eIjmK7v16CZ+AjBtUQdy0Sepu/e4y9lEXMWdES0BgGxd7KEnaMA9RYs
PCnkY/elFqaQi6uAK28TBUUPqg6QGmow/RknEN8MNrxXBmc8bjOvZRjdJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGFdC6Z8bQUwKuJc9OmxKWwr8ny8MB8GA1UdIwQY
MBaAFJLYt2shZHaWyfTWOCtSXYOgWA9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUt
OGRmZDViMTUyZjc5LzEvWVYwTHBueHRCVEFxNGx6MDZiRXBiQ3Z5Zkx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjFmMmQtOTliYi00NGUwLWFkYzUtOGRmZDViMTUyZjc5
LzEva3RpM2F5RmtkcGJKOU5ZNEsxSmRnNkJZRDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAHo
MA0GCSqGSIb3DQEBCwUAA4IBAQAe7/56u5RnuVnY5kMam9HHiYojGnp16Kw53jxo
1bhTPIUzpXg/x7Q8s45DBfaM9SU+X380SVXapOVrO7IVGsTDIIWMea2jJv/WUIIf
H9rFLvAlZdIocwoO6i2PDyAOMLff9+d9UtxBcm1COiYZJ76wA8Mj7qOiym/3qw9y
I9xZuqWGkQ+VZSx5yLmMSwgKryKFBR8fTolZ7pKgDEOruTxVvplMlDpEcwAN7wRs
ZT9tGSQO3sz6retERZ/sgtpX83yPqfmNQRNUcaulIvbuBpWwpO7uGBLQXEhis1ho
vL699382m0UY3R8/bn9QnL9DF8NuhBkAT2dz0HO/SXhclmTh
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:41 2025 by rpki-client