Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YScv2-9T1ggALL0njd2H8-RS-g0.roa
File: YScv2-9T1ggALL0njd2H8-RS-g0.roa (raw, json)
Hash identifier: XewQTVQXqiJ0PcMDA22pJD04lcS8cZdcghZ4qugfEh4=
Subject key identifier: 61:27:2F:DB:EF:53:D6:08:00:2C:BD:27:8D:DD:87:F3:E4:52:FA:0D
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01917924D5539951FF96CD4445580980C2DD
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YScv2-9T1ggALL0njd2H8-RS-g0.roa
Signing time: Thu 22 Aug 2024 08:12:22 +0000
ROA not before: Thu 22 Aug 2024 08:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:24:d5:53:99:51:ff:96:cd:44:45:58:09:80:c2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 22 08:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61272fdbef53d608002cbd278ddd87f3e452fa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:41:81:1e:3f:18:f9:a3:46:b2:33:b1:92:
c0:87:a6:60:9f:0d:af:69:73:3a:3e:07:46:50:be:
6d:20:1e:4c:6a:9a:ed:b2:08:fd:f3:43:8d:6d:d4:
12:70:16:f2:ea:d6:ca:79:a2:5b:f0:67:ce:fb:dc:
99:a4:74:c9:2d:38:e2:a2:c1:b9:ec:51:32:6e:5f:
b5:c8:d7:80:c6:ec:b8:d1:93:0d:02:9f:08:cf:e7:
8b:d6:90:a0:5a:42:fa:5a:3c:a3:5a:20:b5:c9:a8:
ae:cd:e5:28:41:4e:8c:a2:ed:9a:c7:9c:f2:73:cb:
a0:84:49:57:88:67:49:42:c9:56:d1:b7:e6:54:98:
22:e8:b9:91:fa:d9:d5:28:64:81:a5:78:d0:b6:49:
29:6c:cb:d5:e5:30:e4:aa:0e:02:f1:fd:e7:e7:80:
f5:40:90:30:38:a1:cb:e0:b7:b5:97:3d:2f:02:3b:
45:f4:9b:7e:71:d6:f2:fa:5d:76:d7:f7:93:ad:ef:
e7:d3:73:8d:26:b2:f1:e8:3c:ba:04:84:85:b9:66:
62:69:5c:01:35:0f:6d:5d:96:1b:83:02:0c:8b:a0:
f2:be:bd:d9:e9:9a:46:b4:b8:f6:87:81:04:59:f3:
91:2b:34:b3:77:f2:d9:96:77:70:b7:ac:04:97:4a:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:27:2F:DB:EF:53:D6:08:00:2C:BD:27:8D:DD:87:F3:E4:52:FA:0D
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YScv2-9T1ggALL0njd2H8-RS-g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1f:4d:82:ca:67:2c:96:5b:68:cc:ed:39:a6:09:be:6c:7b:75:
79:c2:a1:49:bb:01:1e:fb:1f:33:05:f1:01:1f:1f:fa:bb:2a:
3f:06:fd:c5:78:63:8f:d8:fa:b6:cb:17:70:f5:32:62:81:d4:
f2:b8:f1:0c:c4:17:41:75:6e:aa:3e:af:ec:7a:54:19:94:0b:
ea:6f:6b:83:f6:91:13:99:81:51:3a:5b:94:03:75:72:1f:68:
bd:df:86:6c:67:ca:7e:b2:88:9e:43:ab:dc:ed:ac:04:67:64:
f4:ec:7e:8a:41:57:c2:70:14:56:1f:f0:3a:25:2f:73:2c:65:
11:e5:f5:1a:61:cd:3c:53:19:17:0f:05:58:62:98:70:c5:64:
33:0a:b0:0d:c5:97:6b:53:21:3d:80:16:5e:f0:ec:b2:c6:7c:
1f:ef:fc:0d:9e:ab:8f:f3:ab:40:a5:b5:a8:02:9a:93:68:ef:
d6:e1:a5:22:20:ef:a8:29:3f:16:87:cf:a3:b8:18:9a:89:b7:
d6:20:5a:0a:1a:9a:8f:ad:9f:1c:ed:63:13:4f:ec:b9:bf:3d:
51:8d:2a:92:cd:7b:c1:fe:2c:18:bb:e6:c4:bb:ea:40:73:87:
a9:25:8d:c2:29:ed:25:ae:14:d7:a5:a7:3d:b0:8f:5a:24:45:
cd:bb:54:9f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZF5JNVTmVH/ls1ERVgJgMLdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODIyMDgxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTI3MmZkYmVmNTNkNjA4MDAyY2JkMjc4ZGRkODdmM2U0NTJmYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhpBgR4/GPmjRrIzsZLAh6Zgnw2v
aXM6PgdGUL5tIB5Maprtsgj980ONbdQScBby6tbKeaJb8GfO+9yZpHTJLTjiosG5
7FEybl+1yNeAxuy40ZMNAp8Iz+eL1pCgWkL6WjyjWiC1yaiuzeUoQU6Mou2ax5zy
c8ughElXiGdJQslW0bfmVJgi6LmR+tnVKGSBpXjQtkkpbMvV5TDkqg4C8f3n54D1
QJAwOKHL4Le1lz0vAjtF9Jt+cdby+l121/eTre/n03ONJrLx6Dy6BISFuWZiaVwB
NQ9tXZYbgwIMi6Dyvr3Z6ZpGtLj2h4EEWfORKzSzd/LZlndwt6wEl0rFCQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGEnL9vvU9YIACy9J43dh/PkUvoNMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWVNjdjItOVQxZ2dBTEwwbmpkMkg4LVJTLWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAH02CymcslltozO05pgm+bHt1
ecKhSbsBHvsfMwXxAR8f+rsqPwb9xXhjj9j6tssXcPUyYoHU8rjxDMQXQXVuqj6v
7HpUGZQL6m9rg/aRE5mBUTpblAN1ch9ovd+GbGfKfrKInkOr3O2sBGdk9Ox+ikFX
wnAUVh/wOiUvcyxlEeX1GmHNPFMZFw8FWGKYcMVkMwqwDcWXa1MhPYAWXvDsssZ8
H+/8DZ6rj/OrQKW1qAKak2jv1uGlIiDvqCk/FofPo7gYmom31iBaChqaj62fHO1j
E0/sub89UY0qks17wf4sGLvmxLvqQHOHqSWNwintJa4U16WnPbCPWiRFzbtUnw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:26:06 2025 by rpki-client