Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa
File: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (raw, json)
Hash identifier: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=
Subject key identifier: C8:94:36:CA:41:64:D0:8D:53:31:40:29:D2:93:ED:86:99:0A:C4:73
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271DB31DAB0C4CC449177D38723A09
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa
Signing time: Thu 02 Jan 2025 17:53:59 +0000
ROA not before: Thu 02 Jan 2025 17:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213392
IP address blocks: 2a0e:46c3:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:1d:b3:1d:ab:0c:4c:c4:49:17:7d:38:72:3a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c89436ca4164d08d53314029d293ed86990ac473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:ac:71:8a:16:5b:bf:7a:53:20:50:31:8c:
74:d3:66:d6:fd:9f:d6:c6:80:c4:57:6f:90:4d:c9:
9d:13:0d:94:8a:1e:d5:c6:ba:29:68:60:2c:bc:b1:
b5:81:cd:19:b4:77:ee:65:32:57:6f:48:52:e8:d2:
ac:66:a8:ab:0c:ce:22:87:a6:8e:50:db:dc:fb:c1:
df:5a:9b:77:56:a5:6a:07:35:f5:ea:57:a4:f6:5f:
b4:28:c1:61:61:f6:e0:0c:2c:c4:c6:07:9d:4c:ee:
46:48:b6:4c:0e:fe:96:ed:7b:2d:f6:99:d0:3a:28:
36:1e:00:93:b4:21:36:b1:08:4c:7d:8b:ec:62:21:
78:49:e8:09:17:51:d5:ac:7e:14:28:d9:87:e8:80:
e1:e7:e5:8c:88:1a:d4:b6:cb:30:e9:b3:40:ac:3b:
c3:46:f0:e9:b5:c9:19:84:92:21:98:fc:82:5d:1b:
e1:a1:e3:15:7a:5c:93:a9:3e:89:24:c1:b9:a6:5e:
39:21:8b:0d:31:24:04:cf:07:5d:fa:c6:13:db:92:
a6:3f:98:07:7b:fb:a1:7b:90:b0:79:29:e9:39:5a:
23:97:f8:09:17:5f:88:aa:3c:2e:b3:49:da:99:f2:
c8:72:d4:32:39:73:27:1b:29:2c:1e:b9:e6:6d:fe:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:36:CA:41:64:D0:8D:53:31:40:29:D2:93:ED:86:99:0A:C4:73
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c3:800::/40
Signature Algorithm: sha256WithRSAEncryption
4d:8c:64:1c:aa:18:a1:a1:9d:3f:35:ab:5e:3e:66:6a:6e:5d:
bd:d2:a3:a1:a6:6d:ce:ab:34:92:4d:b3:bf:d7:de:32:f7:85:
78:10:d7:d6:ad:4f:8f:91:6b:9a:da:b4:18:d6:43:9e:d0:c6:
f2:bb:10:c4:84:8c:ee:27:f5:f9:93:63:cf:8c:8b:e5:4f:b8:
41:65:6d:c2:e9:1c:4a:85:02:54:4d:9c:b0:ed:29:4b:9a:cb:
e1:65:88:3e:f4:8e:ea:b4:5c:31:aa:99:50:e8:d5:2c:5d:67:
9b:22:19:55:a6:7c:d9:e1:71:d9:25:9b:d0:fd:c1:a9:e4:1b:
fa:85:dc:45:41:a3:89:11:84:3d:84:15:5f:4f:ed:da:ac:dd:
5c:42:83:c3:26:34:6b:f3:66:12:4f:5a:d7:c3:f0:b6:15:6c:
af:cb:b0:f6:a4:f4:c5:39:62:bc:fe:7b:09:df:c0:aa:d7:7c:
70:03:df:7f:e5:e8:69:41:ec:81:3c:89:53:24:f0:51:53:38:
a3:7e:fe:86:c6:3c:82:38:56:af:91:b0:1c:81:01:49:65:fd:
70:a5:47:0f:db:c2:33:57:64:2e:cb:a7:c0:dc:c0:e8:25:eb:
58:70:79:7d:7b:f1:15:89:db:17:78:5b:d2:9f:e2:fa:06:8d:
6d:78:7d:bb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQoJx2zHasMTMRJF304cjoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjUwMTAyMTc1MzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODk0MzZjYTQxNjRkMDhkNTMzMTQwMjlkMjkzZWQ4Njk5MGFjNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx2scYoWW796UyBQMYx002bW/Z/W
xoDEV2+QTcmdEw2Uih7VxropaGAsvLG1gc0ZtHfuZTJXb0hS6NKsZqirDM4ih6aO
UNvc+8HfWpt3VqVqBzX16lek9l+0KMFhYfbgDCzExgedTO5GSLZMDv6W7Xst9pnQ
Oig2HgCTtCE2sQhMfYvsYiF4SegJF1HVrH4UKNmH6IDh5+WMiBrUtssw6bNArDvD
RvDptckZhJIhmPyCXRvhoeMVelyTqT6JJMG5pl45IYsNMSQEzwdd+sYT25KmP5gH
e/uhe5CweSnpOVojl/gJF1+Iqjwus0namfLIctQyOXMnGyksHrnmbf4y4QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMiUNspBZNCNUzFAKdKT7YaZCsRzMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEveUpRMnlrRmswSTFUTVVBcDBwUHRocGtLeEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5Gwwgw
DQYJKoZIhvcNAQELBQADggEBAE2MZByqGKGhnT81q14+ZmpuXb3So6Gmbc6rNJJN
s7/X3jL3hXgQ19atT4+Ra5ratBjWQ57QxvK7EMSEjO4n9fmTY8+Mi+VPuEFlbcLp
HEqFAlRNnLDtKUuay+FliD70juq0XDGqmVDo1SxdZ5siGVWmfNnhcdklm9D9wank
G/qF3EVBo4kRhD2EFV9P7dqs3VxCg8MmNGvzZhJPWtfD8LYVbK/LsPak9MU5Yrz+
ewnfwKrXfHAD33/l6GlB7IE8iVMk8FFTOKN+/obGPII4Vq+RsByBAUll/XClRw/b
wjNXZC7Lp8DcwOgl61hweX178RWJ2xd4W9Kf4voGjW14fbs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:25 2025 by rpki-client