Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YdNZRpJSMBbjlzc_6xjsyjhcNGg.roa
File: YdNZRpJSMBbjlzc_6xjsyjhcNGg.roa (raw, json)
Hash identifier: sQBIJJbnipfuH24GB84zTDl9t6qAw6ahntORC2enDd4=
Subject key identifier: 61:D3:59:46:92:52:30:16:E3:97:37:3F:EB:18:EC:CA:38:5C:34:68
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019462CD06FDFA3C124DD9D0913720FC9496
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YdNZRpJSMBbjlzc_6xjsyjhcNGg.roa
Signing time: Tue 14 Jan 2025 03:13:11 +0000
ROA not before: Tue 14 Jan 2025 03:13:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:62:cd:06:fd:fa:3c:12:4d:d9:d0:91:37:20:fc:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 14 03:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61d3594692523016e397373feb18ecca385c3468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:c5:a3:17:82:0f:a4:dc:76:6b:b3:68:50:
64:de:5f:3c:9e:e2:fc:a4:f4:be:26:a6:16:5f:43:
4d:4f:46:7f:87:ac:f4:9c:d6:93:81:18:77:1a:3c:
bf:94:3e:8d:35:1a:ee:8d:4c:2e:ce:a7:c6:7e:b6:
c8:28:4b:9f:e7:fa:63:81:f3:5f:55:84:a9:7c:0c:
0f:a2:69:cc:89:2e:cc:12:49:cc:f2:d0:df:0d:6e:
92:3b:0c:13:02:71:30:c4:f9:0a:d4:37:8e:3b:46:
a3:12:8c:57:dc:06:28:74:83:19:9c:a5:62:a4:8f:
6f:82:8f:35:59:65:d6:58:a8:c4:03:7e:75:0a:af:
b5:e7:b2:26:5b:66:6e:17:8b:44:c8:95:0e:bd:47:
1e:d5:18:04:90:0b:68:96:41:62:e1:a4:f1:c1:56:
5e:08:65:65:15:fc:e5:b5:7a:cb:81:36:67:69:77:
86:0b:ed:a2:0c:24:6e:d7:3b:2f:58:75:f7:d4:53:
8a:0d:c7:20:03:53:c3:ee:fe:3f:12:1e:5e:e6:cb:
60:01:42:8e:0f:b1:6f:2a:5d:5f:4f:c5:b8:19:a3:
b6:87:ad:6b:6b:0c:22:bd:ad:6c:ec:1b:64:54:39:
bb:40:8e:f9:61:c1:76:99:62:99:95:27:63:fd:89:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:59:46:92:52:30:16:E3:97:37:3F:EB:18:EC:CA:38:5C:34:68
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YdNZRpJSMBbjlzc_6xjsyjhcNGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
97:75:9f:11:d0:f5:e3:d2:71:c2:ed:79:04:6c:16:ee:4d:11:
fb:ac:9e:f7:da:e9:c1:68:f5:8d:7c:19:5e:21:b1:20:83:05:
48:87:15:00:d3:30:53:e5:93:98:63:06:a2:c9:9b:98:5f:54:
25:dd:6e:55:14:b2:d9:47:39:39:23:31:aa:3f:4c:68:f5:e4:
3c:a9:74:01:73:79:b0:46:bd:7a:09:26:11:a2:50:15:bb:49:
00:e1:cb:a8:af:ec:47:7b:54:f6:5f:76:7a:04:48:90:e9:05:
66:20:c2:bc:44:75:b9:7d:fc:aa:ad:2f:85:4f:74:ca:08:03:
92:3b:93:31:a6:93:d1:8c:cc:09:ba:42:d5:ea:55:83:5c:4e:
f2:f7:43:b1:ea:34:e8:15:b6:e0:61:a9:c9:8d:f7:e9:ad:a7:
d8:10:ac:04:2d:d9:8f:7b:90:e2:06:4c:27:08:fb:72:48:61:
fc:12:b9:d3:53:75:02:46:b1:38:dc:a1:f1:b3:fe:c8:e6:42:
93:67:0a:31:88:b7:cb:71:d4:b5:35:34:84:1d:59:94:e9:d4:
49:3a:65:a7:8d:11:f4:fd:6d:d9:a2:17:84:68:03:e4:1d:b8:
22:89:80:2c:55:eb:b8:8a:0e:19:2f:8c:90:89:c9:49:28:d3:
c0:9c:c0:6a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZRizQb9+jwSTdnQkTcg/JSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjUwMTE0MDMxMzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWQzNTk0NjkyNTIzMDE2ZTM5NzM3M2ZlYjE4ZWNjYTM4NWMzNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv3FoxeCD6TcdmuzaFBk3l88nuL8
pPS+JqYWX0NNT0Z/h6z0nNaTgRh3Gjy/lD6NNRrujUwuzqfGfrbIKEuf5/pjgfNf
VYSpfAwPomnMiS7MEknM8tDfDW6SOwwTAnEwxPkK1DeOO0ajEoxX3AYodIMZnKVi
pI9vgo81WWXWWKjEA351Cq+157ImW2ZuF4tEyJUOvUce1RgEkAtolkFi4aTxwVZe
CGVlFfzltXrLgTZnaXeGC+2iDCRu1zsvWHX31FOKDccgA1PD7v4/Eh5e5stgAUKO
D7FvKl1fT8W4GaO2h61rawwiva1s7BtkVDm7QI75YcF2mWKZlSdj/Ym5mwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFGHTWUaSUjAW45c3P+sY7Mo4XDRoMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWWROWlJwSlNNQmJqbHpjXzZ4anN5amhjTkdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGULA1mgDANBgkqhkiG9w0BAQsFAAOCAQEAl3WfEdD149Jxwu15BGwW7k0R
+6ye99rpwWj1jXwZXiGxIIMFSIcVANMwU+WTmGMGosmbmF9UJd1uVRSy2Uc5OSMx
qj9MaPXkPKl0AXN5sEa9egkmEaJQFbtJAOHLqK/sR3tU9l92egRIkOkFZiDCvER1
uX38qq0vhU90yggDkjuTMaaT0YzMCbpC1epVg1xO8vdDseo06BW24GGpyY336a2n
2BCsBC3Zj3uQ4gZMJwj7ckhh/BK501N1AkaxONyh8bP+yOZCk2cKMYi3y3HUtTU0
hB1ZlOnUSTplp40R9P1t2aIXhGgD5B24IomALFXruIoOGS+MkInJSSjTwJzAag==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:39:24 2025 by rpki-client