Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/JYuUMIJaxq2o1qFYvq7GcDHWxsE.roa
File: JYuUMIJaxq2o1qFYvq7GcDHWxsE.roa (raw, json)
Hash identifier: ijNCaLR9o9dJLxv+H+mXKeMDoaIyvru8qoeamaxdkIs=
Subject key identifier: 25:8B:94:30:82:5A:C6:AD:A8:D6:A1:58:BE:AE:C6:70:31:D6:C6:C1
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0194266BDAE5EB0F4AB8EDFDE5C483977ABC
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/JYuUMIJaxq2o1qFYvq7GcDHWxsE.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:5b81:2010::/44 maxlen: 48
2a04:5b81:2060::/44 maxlen: 48
2a04:5b81:2100::/40 maxlen: 48
2a04:5b81:2130::/44 maxlen: 48
2a04:5b81:2200::/39 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:da:e5:eb:0f:4a:b8:ed:fd:e5:c4:83:97:7a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258b9430825ac6ada8d6a158beaec67031d6c6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:99:07:b1:e0:b0:34:4a:02:d7:ba:39:f3:
f3:91:95:8c:bf:fe:c3:0c:bb:8b:42:b7:e5:47:38:
04:55:69:17:69:83:9f:56:d2:c4:c6:3b:5a:61:02:
c8:41:18:f7:d0:d6:af:44:0f:91:c2:54:ef:48:98:
77:c9:ce:b0:d7:77:6d:c7:3a:54:19:08:8b:95:fe:
e5:3d:79:ec:49:62:84:0b:89:a8:eb:c4:01:9b:b7:
19:8d:50:e3:fb:d6:9c:ae:5a:57:24:d2:2b:c9:c5:
31:dd:35:b0:83:d1:77:52:12:ae:e8:98:8f:01:68:
69:ba:49:ce:2e:f1:73:54:86:10:a6:76:3f:2e:7d:
ab:e6:fc:f4:13:41:01:c3:96:04:e6:80:d6:c9:e6:
67:a8:58:ba:b1:44:36:80:0a:25:26:55:b1:45:b8:
87:28:05:bf:ec:70:84:cd:16:35:fc:6d:0f:c3:06:
3c:02:8f:79:2f:79:e1:d8:05:51:01:1e:a8:85:44:
b9:49:18:92:b4:a9:9f:8e:ca:9c:c0:33:26:2a:35:
a9:ff:2a:17:fe:77:65:5f:79:ee:d6:4f:0b:cf:00:
d8:03:69:b7:a8:71:fb:79:ee:f0:86:92:37:46:75:
59:06:99:88:8e:a8:d1:fd:8d:38:8a:b8:2e:9a:09:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:94:30:82:5A:C6:AD:A8:D6:A1:58:BE:AE:C6:70:31:D6:C6:C1
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/JYuUMIJaxq2o1qFYvq7GcDHWxsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b81:2100::-2a04:5b81:23ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3b:79:4f:90:f4:ad:5f:d0:a0:6c:4f:1e:c2:09:08:6e:80:01:
f9:e6:88:ab:d4:cb:49:1a:8e:6e:7d:60:34:91:9b:c4:0e:15:
5f:26:04:09:f6:98:73:17:43:b3:2b:db:03:e7:1c:e8:98:c7:
e6:96:09:f2:9e:c7:dc:4d:39:87:79:7d:bc:ef:5f:a1:85:61:
d7:08:f9:c2:cd:22:07:33:aa:c0:0d:37:54:b3:f9:79:2c:12:
b9:6d:63:0a:6e:75:90:93:02:12:c8:2e:d2:85:56:ec:7e:e3:
be:1e:76:fe:52:38:12:2d:f1:0f:bd:00:91:a8:0e:30:ac:1e:
5a:8f:95:1a:fe:7a:c4:df:61:c1:79:95:86:b0:17:6a:75:af:
8c:db:a5:8a:14:98:fb:2b:bf:8c:b4:cf:be:99:62:50:6a:04:
8e:a5:16:f8:83:c2:e6:b4:15:80:3d:db:46:4a:c6:e2:35:dc:
9b:fb:75:5e:09:c2:a2:9b:74:d6:64:74:47:81:6a:7b:0e:55:
49:e4:01:1b:3f:f7:22:63:49:a6:06:6e:10:6f:96:cc:d0:4a:
ef:3d:33:39:a2:d5:e3:7f:6a:72:a5:98:3d:0d:00:45:e6:c8:
de:bd:e2:d8:e0:bd:fe:61:13:f7:bc:54:71:ef:54:91:ee:18:
9d:f7:49:41
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQma9rl6w9KuO395cSDl3q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNThiOTQzMDgyNWFjNmFkYThkNmExNThiZWFlYzY3MDMxZDZjNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JOZB7HgsDRKAte6OfPzkZWMv/7D
DLuLQrflRzgEVWkXaYOfVtLExjtaYQLIQRj30NavRA+RwlTvSJh3yc6w13dtxzpU
GQiLlf7lPXnsSWKEC4mo68QBm7cZjVDj+9acrlpXJNIrycUx3TWwg9F3UhKu6JiP
AWhpuknOLvFzVIYQpnY/Ln2r5vz0E0EBw5YE5oDWyeZnqFi6sUQ2gAolJlWxRbiH
KAW/7HCEzRY1/G0PwwY8Ao95L3nh2AVRAR6ohUS5SRiStKmfjsqcwDMmKjWp/yoX
/ndlX3nu1k8LzwDYA2m3qHH7ee7whpI3RnVZBpmIjqjR/Y04irgumgnoJQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCWLlDCCWsatqNahWL6uxnAx1sbBMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvSll1VU1JSmF4cTJvMXFGWXZxN0djREhXeHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKgRbgSAQ
AwcEKgRbgSBgMBADBgAqBFuBIQMGAioEW4EgMA0GCSqGSIb3DQEBCwUAA4IBAQA7
eU+Q9K1f0KBsTx7CCQhugAH55oir1MtJGo5ufWA0kZvEDhVfJgQJ9phzF0OzK9sD
5xzomMfmlgnynsfcTTmHeX2871+hhWHXCPnCzSIHM6rADTdUs/l5LBK5bWMKbnWQ
kwISyC7ShVbsfuO+Hnb+UjgSLfEPvQCRqA4wrB5aj5Ua/nrE32HBeZWGsBdqda+M
26WKFJj7K7+MtM++mWJQagSOpRb4g8LmtBWAPdtGSsbiNdyb+3VeCcKim3TWZHRH
gWp7DlVJ5AEbP/ciY0mmBm4Qb5bM0ErvPTM5otXjf2pypZg9DQBF5sjeveLY4L3+
YRP3vFRx71SR7hid90lB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:38 2025 by rpki-client