Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yk5Y0r2z-Z41El5Y2tTDc_qvczk.roa
File: yk5Y0r2z-Z41El5Y2tTDc_qvczk.roa (raw, json)
Hash identifier: D2wVBP/pds4cHJv61UsEEikk49UU0L/rarlVLSUUnns=
Subject key identifier: CA:4E:58:D2:BD:B3:F9:9E:35:12:5E:58:DA:D4:C3:73:FA:AF:73:39
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01918F07DBEC6267C109183382DFE75AD506
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yk5Y0r2z-Z41El5Y2tTDc_qvczk.roa
Signing time: Mon 26 Aug 2024 14:12:22 +0000
ROA not before: Mon 26 Aug 2024 14:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8f:07:db:ec:62:67:c1:09:18:33:82:df:e7:5a:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 26 14:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca4e58d2bdb3f99e35125e58dad4c373faaf7339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:06:44:4a:da:46:7a:c7:47:29:70:b0:d6:
52:b6:ec:fd:22:f3:07:f4:ce:28:60:28:98:74:e6:
2d:8b:0e:eb:a1:52:e6:df:98:1f:c1:64:bb:9a:d4:
f3:3d:7e:93:d0:2a:61:43:34:5c:d8:66:f9:db:da:
7d:cc:28:2a:54:f3:f4:8f:92:c3:87:76:57:31:b0:
46:6b:1f:5a:24:35:62:65:8f:c9:90:9e:0c:41:20:
0f:1a:c4:ef:cf:98:7a:89:00:66:fb:63:39:1e:ce:
e7:a8:f5:d9:39:1f:ed:a5:4a:06:8a:f6:f1:c1:d1:
f1:9b:e7:bf:d8:5f:54:5e:10:38:8d:71:cf:1f:53:
f7:5b:a8:ef:e7:ba:8a:a4:91:20:cd:b9:a0:ec:78:
4c:94:1e:94:a4:c1:25:80:a3:e3:05:cf:9f:11:01:
cb:a1:ba:e6:02:14:a0:67:09:3b:b0:fc:46:1e:92:
ee:54:f0:e2:3c:3a:0d:df:8c:3d:5f:2e:27:b1:5c:
89:17:f0:48:44:ca:90:21:26:52:fd:7f:03:5c:57:
04:c8:02:10:f9:0f:aa:0b:74:d5:da:a4:f2:23:3f:
2d:ae:c6:50:51:7c:52:ba:4a:b3:b3:e1:f5:5a:ea:
08:7a:91:d7:ca:c6:30:3a:bb:39:e9:ae:1f:fc:f5:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:58:D2:BD:B3:F9:9E:35:12:5E:58:DA:D4:C3:73:FA:AF:73:39
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yk5Y0r2z-Z41El5Y2tTDc_qvczk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
59:bd:6a:0e:2b:4a:06:09:29:29:6e:7f:0d:7d:40:62:d2:1a:
c6:de:fb:75:f5:81:4a:60:0d:6a:82:29:0e:0a:64:b9:94:67:
52:db:a8:e7:d5:25:ef:f6:64:68:61:7f:42:68:a2:73:d5:a3:
e9:6c:bf:fa:23:f5:1e:36:82:39:3c:36:f7:b0:80:0a:04:b6:
49:1e:6d:45:56:34:a2:fc:03:94:6e:85:42:00:f0:8d:68:e4:
17:dd:f8:db:4a:37:06:1c:c4:63:06:78:fe:cc:1b:d8:7b:61:
f1:49:aa:10:be:08:37:c2:b5:d0:17:27:9a:cb:e9:51:c1:d8:
c5:28:a6:e4:51:52:f8:e0:22:f4:a0:1c:34:36:39:ea:9e:b1:
77:15:40:ba:8b:e9:6c:4a:d7:23:a8:82:62:f8:d3:9e:91:88:
98:91:02:ad:e9:44:62:9f:6f:65:5f:40:50:c6:f3:d4:11:bb:
d3:b6:a3:1d:5d:de:89:59:f7:6b:ac:01:71:9c:e0:98:1f:4d:
10:d2:bd:52:96:bf:86:9f:20:c1:f4:6a:a0:5c:ab:a3:cb:d6:
55:9e:08:f2:e5:4e:f6:2b:8c:76:47:0e:1e:e3:21:10:45:99:
37:20:00:c4:6c:88:c3:c1:81:1b:a4:41:93:b9:7d:f0:ee:e0:
b7:af:a5:a6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZGPB9vsYmfBCRgzgt/nWtUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwODI2MTQxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTRlNThkMmJkYjNmOTllMzUxMjVlNThkYWQ0YzM3M2ZhYWY3MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBIGREraRnrHRylwsNZStuz9IvMH
9M4oYCiYdOYtiw7roVLm35gfwWS7mtTzPX6T0CphQzRc2Gb529p9zCgqVPP0j5LD
h3ZXMbBGax9aJDViZY/JkJ4MQSAPGsTvz5h6iQBm+2M5Hs7nqPXZOR/tpUoGivbx
wdHxm+e/2F9UXhA4jXHPH1P3W6jv57qKpJEgzbmg7HhMlB6UpMElgKPjBc+fEQHL
obrmAhSgZwk7sPxGHpLuVPDiPDoN34w9Xy4nsVyJF/BIRMqQISZS/X8DXFcEyAIQ
+Q+qC3TV2qTyIz8trsZQUXxSukqzs+H1WuoIepHXysYwOrs56a4f/PVO1QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFMpOWNK9s/meNRJeWNrUw3P6r3M5MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEveWs1WTByMnotWjQxRWw1WTJ0VERjX3F2Y3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk
//8AAAGQ/fLzAjANBgkqhkiG9w0BAQsFAAOCAQEAWb1qDitKBgkpKW5/DX1AYtIa
xt77dfWBSmANaoIpDgpkuZRnUtuo59Ul7/ZkaGF/Qmiic9Wj6Wy/+iP1HjaCOTw2
97CACgS2SR5tRVY0ovwDlG6FQgDwjWjkF93420o3BhzEYwZ4/swb2Hth8UmqEL4I
N8K10BcnmsvpUcHYxSim5FFS+OAi9KAcNDY56p6xdxVAuovpbErXI6iCYvjTnpGI
mJECrelEYp9vZV9AUMbz1BG707ajHV3eiVn3a6wBcZzgmB9NENK9Upa/hp8gwfRq
oFyro8vWVZ4I8uVO9iuMdkcOHuMhEEWZNyAAxGyIw8GBG6RBk7l98O7gt6+lpg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:24 2025 by rpki-client