Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/2yubxXoUeTneba4EBY4P8MPWw2Y.roa
File: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (raw, json)
Hash identifier: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=
Subject key identifier: DB:2B:9B:C5:7A:14:79:39:DE:6D:AE:04:05:8E:0F:F0:C3:D6:C3:66
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01946B6322D52626C8C4505AD5AAFBD4F567
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/2yubxXoUeTneba4EBY4P8MPWw2Y.roa
Signing time: Wed 15 Jan 2025 19:14:06 +0000
ROA not before: Wed 15 Jan 2025 19:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 161.8.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:63:22:d5:26:26:c8:c4:50:5a:d5:aa:fb:d4:f5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 15 19:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db2b9bc57a147939de6dae04058e0ff0c3d6c366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:45:22:d0:23:02:e9:4f:fd:e2:13:47:e7:
d5:97:0b:be:fa:3f:b8:3e:60:21:1e:6b:80:57:7f:
27:a8:a7:c0:ea:9f:af:ff:8e:68:c8:b7:12:e8:7e:
6d:98:a7:71:2e:71:7b:56:02:1e:db:52:17:a7:be:
32:dc:68:42:67:67:94:20:f8:f4:52:5c:50:c0:0c:
38:de:38:01:39:a1:bd:78:86:dd:e5:4b:1a:6c:f2:
a2:67:fe:53:1e:e2:52:18:e8:e1:d1:76:e1:23:d7:
44:b9:d8:16:ca:67:64:65:8f:4d:42:b6:a9:ba:f4:
55:15:78:7c:34:a9:6e:f2:b3:d2:95:c3:cf:be:35:
b9:88:d9:e7:85:5b:90:97:4d:82:6e:46:5a:67:d7:
12:ed:96:00:c6:a8:f5:83:bd:50:b2:68:44:84:02:
bc:37:a5:86:ed:32:c9:3e:f3:07:7c:c0:15:a0:75:
40:13:9e:8f:71:83:c6:24:cf:2b:91:6f:67:bf:f8:
38:1c:22:a8:bc:3e:04:81:f7:e4:82:88:07:a7:c9:
d8:89:9c:b2:fb:e9:f9:dc:78:57:68:16:50:e0:c1:
f4:00:1a:47:38:0f:35:67:20:5b:44:94:04:fd:91:
c2:73:37:50:10:21:cb:1f:49:fd:d9:1a:f7:fb:5c:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2B:9B:C5:7A:14:79:39:DE:6D:AE:04:05:8E:0F:F0:C3:D6:C3:66
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/2yubxXoUeTneba4EBY4P8MPWw2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:3a:c9:1a:79:df:0b:ab:c8:41:75:cc:13:f5:ee:9f:e2:6b:
69:36:60:40:32:12:cf:30:5a:13:d3:25:6c:7d:37:f5:49:bd:
37:59:59:49:d2:f4:7b:50:eb:6f:9f:86:9c:cb:09:70:32:5d:
cb:55:6e:46:df:77:9e:44:06:33:93:a2:e2:06:fb:87:8c:d2:
c1:be:7f:ef:0f:05:7a:62:13:01:af:bd:68:51:c5:ed:45:f7:
e3:6e:a1:9e:75:28:4f:58:3c:e6:30:73:28:00:67:de:71:a4:
36:12:f5:50:aa:8c:4b:89:88:97:12:76:8a:4b:c9:64:0d:b3:
f5:ff:b6:ca:07:78:6c:9c:32:80:d3:d3:93:4d:92:dc:7d:c2:
8e:c3:fc:41:76:81:e7:54:26:a8:84:45:54:da:5d:ac:50:7f:
31:0d:8e:a1:b6:f2:f0:fd:ab:66:9a:6b:f6:dd:1f:86:ab:b9:
27:b3:e3:c5:b2:27:80:42:d5:7b:c7:fb:5e:f1:17:6c:88:b3:
7e:a7:3d:99:e4:d3:e5:b8:68:aa:ee:19:14:c8:19:7e:c6:87:
4d:ed:b6:60:ae:a0:df:4e:43:18:74:b0:a3:1d:b6:af:f4:1e:
79:5d:ed:46:ca:12:53:59:95:e3:38:d2:36:96:5e:ae:88:f1:
44:b8:6f:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRrYyLVJibIxFBa1ar71PVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjUwMTE1MTkxNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjJiOWJjNTdhMTQ3OTM5ZGU2ZGFlMDQwNThlMGZmMGMzZDZjMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX5FItAjAulP/eITR+fVlwu++j+4
PmAhHmuAV38nqKfA6p+v/45oyLcS6H5tmKdxLnF7VgIe21IXp74y3GhCZ2eUIPj0
UlxQwAw43jgBOaG9eIbd5UsabPKiZ/5THuJSGOjh0XbhI9dEudgWymdkZY9NQrap
uvRVFXh8NKlu8rPSlcPPvjW5iNnnhVuQl02CbkZaZ9cS7ZYAxqj1g71QsmhEhAK8
N6WG7TLJPvMHfMAVoHVAE56PcYPGJM8rkW9nv/g4HCKovD4EgffkgogHp8nYiZyy
++n53HhXaBZQ4MH0ABpHOA81ZyBbRJQE/ZHCczdQECHLH0n92Rr3+1yKgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsrm8V6FHk53m2uBAWOD/DD1sNmMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvMnl1YnhYb1VlVG5lYmE0RUJZNFA4TVBXdzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoQigMA0G
CSqGSIb3DQEBCwUAA4IBAQBOOskaed8Lq8hBdcwT9e6f4mtpNmBAMhLPMFoT0yVs
fTf1Sb03WVlJ0vR7UOtvn4acywlwMl3LVW5G33eeRAYzk6LiBvuHjNLBvn/vDwV6
YhMBr71oUcXtRffjbqGedShPWDzmMHMoAGfecaQ2EvVQqoxLiYiXEnaKS8lkDbP1
/7bKB3hsnDKA09OTTZLcfcKOw/xBdoHnVCaohEVU2l2sUH8xDY6htvLw/atmmmv2
3R+Gq7kns+PFsieAQtV7x/te8RdsiLN+pz2Z5NPluGiq7hkUyBl+xodN7bZgrqDf
TkMYdLCjHbav9B55Xe1GyhJTWZXjONI2ll6uiPFEuG+F
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:47 2025 by rpki-client