Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LY9JA8E-RVvX6rXhQyeyopin_qw.roa
File: LY9JA8E-RVvX6rXhQyeyopin_qw.roa (raw, json)
Hash identifier: RPwbCygYmJ1ISRXQ1QF344ouyvC0kPHVPWledltrOsI=
Subject key identifier: 2D:8F:49:03:C1:3E:45:5B:D7:EA:B5:E1:43:27:B2:A2:98:A7:FE:AC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191C852D6035089F694CB8EE9B007E22222
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LY9JA8E-RVvX6rXhQyeyopin_qw.roa
Signing time: Fri 06 Sep 2024 17:12:37 +0000
ROA not before: Fri 06 Sep 2024 17:12:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c8:52:d6:03:50:89:f6:94:cb:8e:e9:b0:07:e2:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 6 17:12:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d8f4903c13e455bd7eab5e14327b2a298a7feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:49:e5:30:b4:bc:0f:32:ac:d6:64:7a:81:
6b:ab:22:81:07:28:44:dc:34:77:32:a3:90:01:f7:
50:a5:59:0a:d7:e4:b6:59:f0:73:fb:c1:ba:be:58:
ba:3c:95:0b:2f:50:58:35:f2:0e:f6:0a:a7:98:78:
8c:0b:70:0a:eb:50:04:ff:41:dd:0c:18:55:ff:a6:
6a:4e:79:00:0f:b0:55:8c:8d:b9:ff:aa:45:b9:9e:
f9:7f:f4:28:d2:d8:78:b9:69:59:9d:ec:20:dd:03:
59:d5:50:b0:7d:58:cc:b7:90:c4:06:9e:a8:3e:45:
bc:84:ae:da:59:13:d1:c9:c0:c1:62:6f:00:09:79:
31:cc:ec:22:08:ec:d1:83:b4:62:4b:59:9d:06:7d:
23:c8:17:3c:a1:44:10:8e:53:80:be:c2:bb:83:e4:
ad:35:ed:83:c6:f6:ae:c2:99:5c:1e:55:5c:a9:a9:
43:9d:be:5b:58:61:eb:44:8b:ad:dc:d5:92:7b:76:
7b:b3:1c:85:67:71:49:af:1f:56:8a:37:4f:25:4f:
b9:cb:97:c2:77:eb:b9:0c:c4:3e:83:59:df:a7:6b:
ef:15:d9:b8:56:3a:dc:00:c7:a4:45:b0:82:ec:3b:
02:ae:67:25:10:db:8c:90:d5:bb:0d:a9:b2:68:7d:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8F:49:03:C1:3E:45:5B:D7:EA:B5:E1:43:27:B2:A2:98:A7:FE:AC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/LY9JA8E-RVvX6rXhQyeyopin_qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
4e:18:2c:da:58:6a:a9:f6:56:e7:01:b6:d3:a6:cf:21:74:ef:
42:47:54:f4:5f:d4:a2:5b:78:21:15:6e:2d:73:0c:4f:99:60:
f8:33:09:5c:87:4b:75:84:bb:c8:0e:68:30:c1:6b:1f:2d:a1:
ae:84:07:29:08:80:9f:e5:4f:51:78:10:8c:22:cd:c0:73:b4:
fc:f9:e7:9f:99:c3:db:63:99:ca:40:9d:02:a1:ad:68:07:2c:
71:56:94:5a:27:27:ab:69:21:04:6f:2a:84:5d:45:b8:27:26:
78:b6:21:87:e2:1f:5a:20:0c:f4:b0:49:f7:84:ef:1e:b1:04:
f5:e9:d0:30:e9:bb:ff:be:9e:a2:f3:53:56:6e:2f:95:8d:b6:
45:0a:72:9f:6e:5d:b9:92:29:76:7a:78:64:63:e7:c8:6d:e5:
be:97:47:66:81:26:28:78:0d:07:6b:28:0e:fa:d7:20:a6:a0:
7d:6e:66:e2:56:07:aa:60:41:0f:1e:d5:48:cf:93:64:5e:73:
07:2c:33:95:69:9a:93:ae:d6:32:a5:ca:90:88:ac:76:3b:7d:
90:d2:6f:8f:b1:ec:f1:00:50:3b:5c:77:fc:65:76:cd:d5:20:
73:e4:20:75:dc:c1:8f:00:e0:82:0c:ce:f5:4d:df:bf:62:9f:
35:10:8f:63
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZHIUtYDUIn2lMuO6bAH4iIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwOTA2MTcxMjM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDhmNDkwM2MxM2U0NTViZDdlYWI1ZTE0MzI3YjJhMjk4YTdmZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHFJ5TC0vA8yrNZkeoFrqyKBByhE
3DR3MqOQAfdQpVkK1+S2WfBz+8G6vli6PJULL1BYNfIO9gqnmHiMC3AK61AE/0Hd
DBhV/6ZqTnkAD7BVjI25/6pFuZ75f/Qo0th4uWlZnewg3QNZ1VCwfVjMt5DEBp6o
PkW8hK7aWRPRycDBYm8ACXkxzOwiCOzRg7RiS1mdBn0jyBc8oUQQjlOAvsK7g+St
Ne2DxvauwplcHlVcqalDnb5bWGHrRIut3NWSe3Z7sxyFZ3FJrx9WijdPJU+5y5fC
d+u5DMQ+g1nfp2vvFdm4VjrcAMekRbCC7DsCrmclENuMkNW7DamyaH2cyQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFC2PSQPBPkVb1+q14UMnsqKYp/6sMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvTFk5SkE4RS1SVnZYNnJYaFF5ZXlvcGluX3F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAThgs2lhqqfZW5wG206bPIXTv
QkdU9F/Uolt4IRVuLXMMT5lg+DMJXIdLdYS7yA5oMMFrHy2hroQHKQiAn+VPUXgQ
jCLNwHO0/Pnnn5nD22OZykCdAqGtaAcscVaUWicnq2khBG8qhF1FuCcmeLYhh+If
WiAM9LBJ94TvHrEE9enQMOm7/76eovNTVm4vlY22RQpyn25duZIpdnp4ZGPnyG3l
vpdHZoEmKHgNB2soDvrXIKagfW5m4lYHqmBBDx7VSM+TZF5zBywzlWmak67WMqXK
kIisdjt9kNJvj7Hs8QBQO1x3/GV2zdUgc+QgddzBjwDgggzO9U3fv2KfNRCPYw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:47:58 2025 by rpki-client