Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/SYazyu-u8AaHOp_p4fYOBWFSAH4.roa
File: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (raw, json)
Hash identifier: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=
Subject key identifier: 49:86:B3:CA:EF:AE:F0:06:87:3A:9F:E9:E1:F6:0E:05:61:52:00:7E
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 0194282717D83AAFF898379C80236F2D0563
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/SYazyu-u8AaHOp_p4fYOBWFSAH4.roa
Signing time: Thu 02 Jan 2025 17:53:58 +0000
ROA not before: Thu 02 Jan 2025 17:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142419
IP address blocks: 2a0e:46c4:107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:17:d8:3a:af:f8:98:37:9c:80:23:6f:2d:05:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4986b3caefaef006873a9fe9e1f60e056152007e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:3b:c5:d0:b0:3d:be:15:4d:2e:e4:ac:1c:
66:a9:57:87:5e:2b:5a:c8:af:14:d1:f5:44:b2:62:
ad:2c:d0:62:c8:d2:27:56:a7:b5:3a:f3:a4:61:90:
3e:24:78:b9:6b:2e:f1:62:ed:d3:64:c2:b4:3d:6d:
ec:95:df:c1:95:62:a5:f9:0d:2d:2b:40:ac:3e:21:
56:5d:9f:f5:37:5a:0a:27:f9:c8:00:63:b7:c4:56:
a9:dd:df:f4:c0:63:8f:5c:b4:f9:07:2b:b4:30:e0:
93:ae:83:6e:ee:40:f2:45:0d:7b:f7:64:40:ee:fb:
08:ef:e1:29:9b:d1:fb:0d:17:03:d7:8a:93:51:85:
64:2f:ad:4d:b1:ed:24:cb:d3:81:45:69:24:7c:aa:
15:0c:20:44:2e:cc:45:98:d5:b4:70:4d:2c:50:37:
1e:0b:02:9d:49:a3:64:50:28:29:55:cd:a9:7c:53:
98:67:0a:cc:14:69:a3:c4:7d:35:f3:17:fb:c2:6f:
e7:de:f4:07:f4:a5:db:4e:b9:e9:51:b1:52:99:09:
66:9f:3b:49:be:fa:45:00:93:0c:61:13:8d:39:7e:
4d:92:57:e0:b8:93:30:c2:60:d1:86:e6:16:86:26:
3f:bf:ef:e4:55:54:f8:ca:c9:e0:5f:7a:d3:b8:f3:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:B3:CA:EF:AE:F0:06:87:3A:9F:E9:E1:F6:0E:05:61:52:00:7E
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/SYazyu-u8AaHOp_p4fYOBWFSAH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:107::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d5:df:2f:eb:3c:fb:00:a7:69:27:90:77:30:4c:3a:19:5f:
78:45:87:27:e9:a7:95:0c:e1:fd:b2:6d:66:f5:31:d6:6b:25:
73:4d:a0:a9:9c:90:1a:a3:a6:19:c8:a6:99:6b:4c:45:98:29:
8a:5a:ad:fe:ea:d3:9a:84:e2:ad:b4:2a:5b:f0:79:68:cf:b6:
dd:88:fd:1d:e4:f7:5c:e3:50:95:36:4f:74:02:ed:ba:04:0d:
e7:da:1b:20:58:9c:fb:c3:b6:5d:0e:69:57:01:55:40:ae:9c:
d8:6b:1e:5f:68:19:72:c4:61:73:8e:d8:b8:ed:32:12:cd:57:
1c:8b:15:44:40:d1:bd:96:8f:c8:65:d9:99:5a:24:9f:fb:87:
4f:90:12:f7:4a:ff:7a:3b:5f:75:89:76:03:1a:f8:79:b8:1c:
ba:3c:2a:0b:f6:55:4d:95:55:dd:52:bd:07:b1:54:35:0f:74:
d1:ae:3b:0c:3a:72:db:7d:4e:dd:99:ad:f3:8e:69:b5:35:b9:
14:a2:a4:59:6d:89:07:b3:47:35:0f:bf:2e:e1:2f:73:a0:8d:
4c:0b:c8:9a:aa:cd:ca:9a:f1:6d:bc:7a:80:8a:c1:dc:7b:57:
f7:0f:a8:4f:36:d9:2d:e4:8c:86:2b:b9:74:d3:4d:a5:ed:ed:
6d:bd:c7:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQoJxfYOq/4mDecgCNvLQVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjUwMTAyMTc1MzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTg2YjNjYWVmYWVmMDA2ODczYTlmZTllMWY2MGUwNTYxNTIwMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5U7xdCwPb4VTS7krBxmqVeHXita
yK8U0fVEsmKtLNBiyNInVqe1OvOkYZA+JHi5ay7xYu3TZMK0PW3sld/BlWKl+Q0t
K0CsPiFWXZ/1N1oKJ/nIAGO3xFap3d/0wGOPXLT5Byu0MOCTroNu7kDyRQ1792RA
7vsI7+Epm9H7DRcD14qTUYVkL61Nse0ky9OBRWkkfKoVDCBELsxFmNW0cE0sUDce
CwKdSaNkUCgpVc2pfFOYZwrMFGmjxH018xf7wm/n3vQH9KXbTrnpUbFSmQlmnztJ
vvpFAJMMYRONOX5NklfguJMwwmDRhuYWhiY/v+/kVVT4ysngX3rTuPNaFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEmGs8rvrvAGhzqf6eH2DgVhUgB+MB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvU1lhenl1LXU4QWFIT3BfcDRmWU9CV0ZTQUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5GxAEH
MA0GCSqGSIb3DQEBCwUAA4IBAQA61d8v6zz7AKdpJ5B3MEw6GV94RYcn6aeVDOH9
sm1m9THWayVzTaCpnJAao6YZyKaZa0xFmCmKWq3+6tOahOKttCpb8Hloz7bdiP0d
5Pdc41CVNk90Au26BA3n2hsgWJz7w7ZdDmlXAVVArpzYax5faBlyxGFzjti47TIS
zVccixVEQNG9lo/IZdmZWiSf+4dPkBL3Sv96O191iXYDGvh5uBy6PCoL9lVNlVXd
Ur0HsVQ1D3TRrjsMOnLbfU7dma3zjmm1NbkUoqRZbYkHs0c1D78u4S9zoI1MC8ia
qs3KmvFtvHqAisHce1f3D6hPNtkt5IyGK7l0002l7e1tvccH
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:17 2025 by rpki-client