Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YxuopTbahsIK6Vjyd3XmVtWTntY.roa
File: YxuopTbahsIK6Vjyd3XmVtWTntY.roa (raw, json)
Hash identifier: 07GwM/z4bCshX4ljBobQ+gskljsJbPmqUxf8M03DGXg=
Subject key identifier: 63:1B:A8:A5:36:DA:86:C2:0A:E9:58:F2:77:75:E6:56:D5:93:9E:D6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0190A3353FFA0D8AA065E9865A3AAD7A8276
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YxuopTbahsIK6Vjyd3XmVtWTntY.roa
Signing time: Thu 11 Jul 2024 19:11:34 +0000
ROA not before: Thu 11 Jul 2024 19:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a3:35:3f:fa:0d:8a:a0:65:e9:86:5a:3a:ad:7a:82:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 11 19:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=631ba8a536da86c20ae958f27775e656d5939ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:65:32:f1:da:36:fe:05:4d:ee:21:cc:e5:
2c:8e:c2:ad:13:6d:12:97:99:7a:75:1c:45:c4:83:
2b:e8:e4:80:0a:a5:c0:46:79:c8:2d:2d:44:1d:58:
bb:b8:58:ba:56:68:7e:c5:1f:f6:79:44:a7:6d:25:
d4:71:51:6e:1e:2f:16:37:55:65:84:af:81:20:f3:
99:8d:fb:37:c2:72:23:ab:80:51:89:44:26:b5:be:
6a:77:0e:ca:fd:f1:c9:00:71:0f:79:6a:c5:81:51:
71:37:ed:bf:41:e4:0e:5d:5b:a0:45:0d:2e:89:e1:
6a:90:17:30:42:a3:a5:ea:94:1c:ec:ad:a8:be:1c:
d7:72:91:74:14:fd:20:fd:fd:17:b6:39:30:c7:4b:
a5:da:74:ca:6e:10:45:c5:3c:37:13:b1:97:53:c3:
ce:36:41:07:e3:21:c3:df:4b:86:6a:92:6f:98:dd:
2c:f2:2d:f9:c9:82:53:fc:8b:24:b0:f4:e2:ba:aa:
4b:1b:e5:b5:d5:56:43:a1:18:dc:87:5f:ea:29:20:
13:66:0a:51:6a:41:6e:c1:53:ec:bb:49:19:ef:3c:
3d:45:4b:c9:d8:80:80:ea:62:6f:41:c4:0f:6b:5d:
ac:f0:57:47:a6:e5:02:a3:71:1b:41:b9:17:be:6f:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:A8:A5:36:DA:86:C2:0A:E9:58:F2:77:75:E6:56:D5:93:9E:D6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YxuopTbahsIK6Vjyd3XmVtWTntY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:28:89:33:92:68:48:94:e3:97:cc:53:4b:91:a0:c0:8c:90:
c7:87:5a:6e:bb:5c:83:ed:6d:03:72:a7:26:25:f0:a2:96:8a:
47:d9:c9:9d:f9:f6:c0:4c:d7:9c:dc:0b:ab:86:ec:7f:8f:7a:
35:09:d3:72:87:32:37:55:f6:69:a7:a4:6b:87:1a:17:33:d2:
8a:e7:84:1f:89:b1:6d:02:f9:5c:1c:1f:33:52:c1:6f:43:e7:
39:95:3f:3e:c5:a7:15:75:bd:52:77:ae:07:0e:a9:a2:81:e9:
e2:d0:05:ee:c7:8b:de:f0:fa:f7:d5:08:fe:ad:f5:c3:95:85:
20:b6:6c:54:f0:9b:2c:a2:d8:ea:84:fb:a5:a6:d5:e0:1b:f0:
0f:65:a9:c4:33:b2:83:9c:37:d6:53:1f:12:07:9b:41:4c:61:
ef:c2:f8:9c:0d:70:0c:f0:28:a8:6f:20:50:50:97:ea:de:c3:
e0:6b:46:49:e6:cd:58:2a:aa:cd:02:69:71:50:5f:17:44:98:
54:7c:2b:86:98:73:fd:cd:71:15:a0:6e:51:e7:50:f5:57:77:
7c:4c:ca:3e:c7:e4:f1:f0:76:a9:7e:96:12:2d:4e:7c:74:5e:
bb:a4:ad:9b:42:ce:6a:2e:4c:3d:5e:69:92:d9:8a:fa:70:35:
01:ae:a8:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCjNT/6DYqgZemGWjqteoJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzExMTkxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzFiYThhNTM2ZGE4NmMyMGFlOTU4ZjI3Nzc1ZTY1NmQ1OTM5ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUZlMvHaNv4FTe4hzOUsjsKtE20S
l5l6dRxFxIMr6OSACqXARnnILS1EHVi7uFi6Vmh+xR/2eUSnbSXUcVFuHi8WN1Vl
hK+BIPOZjfs3wnIjq4BRiUQmtb5qdw7K/fHJAHEPeWrFgVFxN+2/QeQOXVugRQ0u
ieFqkBcwQqOl6pQc7K2ovhzXcpF0FP0g/f0Xtjkwx0ul2nTKbhBFxTw3E7GXU8PO
NkEH4yHD30uGapJvmN0s8i35yYJT/IsksPTiuqpLG+W11VZDoRjch1/qKSATZgpR
akFuwVPsu0kZ7zw9RUvJ2ICA6mJvQcQPa12s8FdHpuUCo3EbQbkXvm/YywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGMbqKU22obCCulY8nd15lbVk57WMB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvWXh1b3BUYmFoc0lLNlZqeWQzWG1WdFdUbnRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADAoiTOSaEiU45fMU0uR
oMCMkMeHWm67XIPtbQNypyYl8KKWikfZyZ359sBM15zcC6uG7H+PejUJ03KHMjdV
9mmnpGuHGhcz0ornhB+JsW0C+VwcHzNSwW9D5zmVPz7FpxV1vVJ3rgcOqaKB6eLQ
Be7Hi97w+vfVCP6t9cOVhSC2bFTwmyyi2OqE+6Wm1eAb8A9lqcQzsoOcN9ZTHxIH
m0FMYe/C+JwNcAzwKKhvIFBQl+rew+BrRknmzVgqqs0CaXFQXxdEmFR8K4aYc/3N
cRWgblHnUPVXd3xMyj7H5PHwdql+lhItTnx0XrukrZtCzmouTD1eaZLZivpwNQGu
qK0=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:25 2025 by rpki-client