Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/ydG33gjsDAOMifL-LMV8iBUmj5I.roa
File: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (raw, json)
Hash identifier: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=
Subject key identifier: C9:D1:B7:DE:08:EC:0C:03:8C:89:F2:FE:2C:C5:7C:88:15:26:8F:92
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 01942444C114F78F254555F8E2BD3DCBD444
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/ydG33gjsDAOMifL-LMV8iBUmj5I.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25117
IP address blocks: 2a04:cec0:1300::/41 maxlen: 48
2a04:cec0:1380::/41 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c1:14:f7:8f:25:45:55:f8:e2:bd:3d:cb:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9d1b7de08ec0c038c89f2fe2cc57c8815268f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:17:7a:7f:27:a9:07:dc:42:51:89:12:37:
fb:e9:00:b2:e9:0a:60:ef:83:7a:e4:8b:8f:7b:a1:
80:b3:b1:0a:bc:58:5a:cf:ca:21:98:29:2b:e0:26:
2d:00:f6:4f:ec:1d:e1:e5:a9:1d:3b:d2:67:b4:55:
b8:0d:b7:9b:d4:25:e5:bc:2a:4e:0b:78:f3:4c:ff:
23:a5:49:b1:4d:86:b2:35:5f:75:d3:88:4d:7f:72:
56:70:fe:e9:13:70:55:f0:f7:c6:2f:8b:1b:30:25:
26:6f:8e:6b:8d:66:47:41:08:5e:fb:ae:5d:22:db:
33:52:51:dd:4f:f1:86:4d:34:03:b8:55:03:b2:49:
be:ae:64:4c:3c:4c:c8:64:0c:be:c6:8f:8c:a2:ba:
ee:ed:f4:75:e0:56:28:56:04:13:7b:a6:78:d9:0d:
84:4b:be:e0:6b:2c:91:f6:e6:8a:e7:bb:30:0a:31:
bf:6d:af:5e:9d:9a:99:42:ac:73:f9:47:07:a6:0b:
5d:ac:b6:1b:aa:bf:e9:c7:d1:73:23:fc:fd:41:e3:
10:68:99:6d:8a:a6:5a:fc:e8:a3:86:4d:7e:49:84:
51:a8:35:25:9d:28:0c:d1:b1:55:19:dd:6d:a2:26:
7a:52:cd:c2:da:62:90:90:f6:12:95:ed:23:4a:bd:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D1:B7:DE:08:EC:0C:03:8C:89:F2:FE:2C:C5:7C:88:15:26:8F:92
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/ydG33gjsDAOMifL-LMV8iBUmj5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:cec0:1300::/40
Signature Algorithm: sha256WithRSAEncryption
52:b8:a0:79:d1:5b:41:a3:a7:9c:aa:95:be:e4:22:58:cc:8c:
b1:ab:75:a3:3b:52:c4:dd:89:e3:2d:21:57:37:9c:6a:3e:aa:
6a:cd:e0:27:97:8f:dc:bb:97:68:5e:06:1a:9c:0e:5b:4d:72:
79:c6:a0:5e:05:e9:e6:26:6e:70:a8:88:a6:97:e9:13:09:0d:
13:aa:c4:77:0c:5c:91:d9:9c:6c:98:3b:0e:f4:23:97:5d:4e:
c3:a3:66:18:c3:5d:67:bc:f6:f2:6e:7f:c8:15:f5:0a:c4:5e:
78:b0:5c:c0:c5:7a:ac:4d:2a:04:56:55:20:2e:94:1a:12:a3:
f5:65:0f:77:50:30:44:41:56:13:08:1f:dd:4e:19:d3:37:5c:
30:4f:20:40:f9:61:7d:bf:bb:a3:39:e5:c7:2c:36:5f:57:c3:
dc:cb:f8:ae:6e:f1:3b:0b:a5:a1:ec:1a:5c:66:bd:bf:68:71:
79:ba:24:79:71:da:03:52:fd:ce:97:49:6a:70:ea:38:ae:40:
74:39:21:7b:57:50:f3:a7:cb:e4:18:f4:7a:d0:0f:93:a1:cb:
6b:df:bf:ce:21:58:2d:03:aa:b8:27:ef:06:bc:cd:76:0f:b7:
1c:3a:19:c4:a2:bf:6c:54:72:29:29:54:72:33:57:fb:a6:80:
f6:bc:11:b5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQkRMEU948lRVX44r09y9REMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjUwMTAxMjM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWQxYjdkZTA4ZWMwYzAzOGM4OWYyZmUyY2M1N2M4ODE1MjY4ZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5oXen8nqQfcQlGJEjf76QCy6Qpg
74N65IuPe6GAs7EKvFhaz8ohmCkr4CYtAPZP7B3h5akdO9JntFW4Dbeb1CXlvCpO
C3jzTP8jpUmxTYayNV9104hNf3JWcP7pE3BV8PfGL4sbMCUmb45rjWZHQQhe+65d
ItszUlHdT/GGTTQDuFUDskm+rmRMPEzIZAy+xo+Morru7fR14FYoVgQTe6Z42Q2E
S77gayyR9uaK57swCjG/ba9enZqZQqxz+UcHpgtdrLYbqr/px9FzI/z9QeMQaJlt
iqZa/Oijhk1+SYRRqDUlnSgM0bFVGd1toiZ6Us3C2mKQkPYSle0jSr0PuwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMnRt94I7AwDjIny/izFfIgVJo+SMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEveWRHMzNnanNEQU9NaWZMLUxNVjhpQlVtajVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgTOwBMw
DQYJKoZIhvcNAQELBQADggEBAFK4oHnRW0Gjp5yqlb7kIljMjLGrdaM7UsTdieMt
IVc3nGo+qmrN4CeXj9y7l2heBhqcDltNcnnGoF4F6eYmbnCoiKaX6RMJDROqxHcM
XJHZnGyYOw70I5ddTsOjZhjDXWe89vJuf8gV9QrEXniwXMDFeqxNKgRWVSAulBoS
o/VlD3dQMERBVhMIH91OGdM3XDBPIED5YX2/u6M55ccsNl9Xw9zL+K5u8TsLpaHs
Glxmvb9ocXm6JHlx2gNS/c6XSWpw6jiuQHQ5IXtXUPOny+QY9HrQD5Ohy2vfv84h
WC0Dqrgn7wa8zXYPtxw6GcSiv2xUcikpVHIzV/umgPa8EbU=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:08 2025 by rpki-client