Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa
File: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (raw, json)
Hash identifier: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=
Subject key identifier: C9:B3:9E:F1:9A:B2:8A:01:B8:15:60:2C:08:C6:CE:70:BD:1C:E4:BD
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 01942144091371FFA903FAE2444A05257F79
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29670
IP address blocks: 2001:678:fd8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:13:71:ff:a9:03:fa:e2:44:4a:05:25:7f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9b39ef19ab28a01b815602c08c6ce70bd1ce4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:d4:5b:b1:e3:3c:7e:43:62:68:fe:64:b4:
18:c0:33:8a:4a:4f:47:cf:58:03:52:91:dc:09:b0:
40:6b:7d:8d:c7:74:b3:64:22:9c:33:ce:ad:d6:1a:
51:1a:e4:c8:59:af:bd:f0:37:af:a0:df:8c:e1:ac:
1d:fb:5a:6e:eb:cb:9c:0c:a7:4a:b3:b0:b6:0e:63:
cf:54:e5:22:cf:0a:e2:dc:87:7b:92:ce:7a:5f:e2:
ee:52:e2:bf:31:8a:93:10:e2:9b:5a:92:b0:59:51:
29:19:8c:ce:ef:f4:85:09:89:13:3d:25:dd:f3:61:
bf:fc:25:a0:90:6e:a9:a0:b2:4c:17:19:a0:fd:2c:
97:54:15:99:6a:f1:c0:46:fa:ec:b7:10:bc:de:6a:
3b:68:be:38:fd:eb:50:ae:34:89:88:87:be:50:9c:
b9:bd:9d:11:69:e7:ef:b7:f4:19:3e:7d:59:72:c0:
2d:f7:50:a3:6a:64:18:b3:85:53:cb:c9:1b:25:9d:
16:b7:e9:32:1e:bd:a0:8e:3b:f3:92:9e:f0:3d:5b:
43:a1:7d:d8:7c:2c:b3:54:c0:bf:74:06:0a:ca:89:
38:9a:d3:ed:43:f7:09:27:68:c8:21:0b:4e:6f:05:
e9:4a:49:74:dd:ae:40:d1:e6:f4:06:cb:87:91:6c:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B3:9E:F1:9A:B2:8A:01:B8:15:60:2C:08:C6:CE:70:BD:1C:E4:BD
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fd8::/48
Signature Algorithm: sha256WithRSAEncryption
2c:de:39:5f:30:51:8e:61:58:06:43:7b:33:de:c5:2d:ef:4f:
e9:1d:8a:68:9e:52:32:35:af:f8:e3:6b:f5:e6:5f:2b:0e:57:
f3:fa:e3:ad:8a:69:9b:02:6b:e2:1d:d1:94:36:14:35:d2:18:
c7:b1:84:1b:3c:b8:f3:2a:c9:3c:69:18:d0:bf:d2:f3:a4:9d:
52:b4:32:a0:d1:bc:26:41:f8:78:0b:71:b2:ac:7a:f4:3e:d0:
91:c7:e7:aa:b8:6b:80:8c:ea:52:6e:12:2b:b5:9b:dd:7c:8e:
13:6e:7a:da:f5:c4:ea:44:f1:01:80:4c:ad:92:e3:f8:b1:85:
5d:b7:14:88:c2:b0:bd:2c:3f:89:e0:cb:7b:23:46:33:79:a0:
4d:90:11:7d:2b:eb:09:bc:d0:06:a0:f8:97:75:ec:1d:6b:2a:
32:0a:68:73:94:a7:06:9a:67:ad:61:88:78:9e:6c:31:ed:f9:
cb:d0:da:bc:3e:26:d8:bd:95:1c:83:f0:77:ae:59:2e:4c:64:
9e:51:c9:86:66:5b:5e:7b:63:aa:dd:d8:7a:c0:5f:1b:aa:ea:
e8:39:d5:7a:10:8a:70:f6:32:db:b0:67:4f:fe:7e:21:79:c5:
c4:a3:a4:05:91:41:e2:29:5c:30:5c:ad:f1:64:ce:bb:df:21:
fe:82:56:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhRAkTcf+pA/riREoFJX95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDM1NGJiYTBlMDRkN2U1YWFkMjc3OTI3ODlmYzI2ZGRk
NmRmNTEwHhcNMjUwMTAxMDk0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWIzOWVmMTlhYjI4YTAxYjgxNTYwMmMwOGM2Y2U3MGJkMWNlNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMLUW7HjPH5DYmj+ZLQYwDOKSk9H
z1gDUpHcCbBAa32Nx3SzZCKcM86t1hpRGuTIWa+98DevoN+M4awd+1pu68ucDKdK
s7C2DmPPVOUizwri3Id7ks56X+LuUuK/MYqTEOKbWpKwWVEpGYzO7/SFCYkTPSXd
82G//CWgkG6poLJMFxmg/SyXVBWZavHARvrstxC83mo7aL44/etQrjSJiIe+UJy5
vZ0Raefvt/QZPn1ZcsAt91CjamQYs4VTy8kbJZ0Wt+kyHr2gjjvzkp7wPVtDoX3Y
fCyzVMC/dAYKyok4mtPtQ/cJJ2jIIQtObwXpSkl03a5A0eb0BsuHkWwBRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMmznvGasooBuBVgLAjGznC9HOS9MB8GA1UdIwQY
MBaAFCrTVLug4E1+Wq0neSeJ/Cbd1t9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAt
M2E3MDM3ODliMDNiLzEveWJPZThacXlpZ0c0RldBc0NNYk9jTDBjNUwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83OTlmMGQtYTRmMS00YTViLThjYzAtM2E3MDM3ODliMDNi
LzEvS3ROVXU2RGdUWDVhclNkNUo0bjhKdDNXMzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA/Y
MA0GCSqGSIb3DQEBCwUAA4IBAQAs3jlfMFGOYVgGQ3sz3sUt70/pHYponlIyNa/4
42v15l8rDlfz+uOtimmbAmviHdGUNhQ10hjHsYQbPLjzKsk8aRjQv9LzpJ1StDKg
0bwmQfh4C3GyrHr0PtCRx+equGuAjOpSbhIrtZvdfI4Tbnra9cTqRPEBgEytkuP4
sYVdtxSIwrC9LD+J4Mt7I0YzeaBNkBF9K+sJvNAGoPiXdewdayoyCmhzlKcGmmet
YYh4nmwx7fnL0Nq8PibYvZUcg/B3rlkuTGSeUcmGZltee2Oq3dh6wF8bquroOdV6
EIpw9jLbsGdP/n4hecXEo6QFkUHiKVwwXK3xZM673yH+glbX
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:46 2025 by rpki-client