Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ytdjfPsdhh7NgWUO2orz4R0usJA.roa
File: ytdjfPsdhh7NgWUO2orz4R0usJA.roa (raw, json)
Hash identifier: ol4WYKgSXF1oXMJRYGiEbX+zKfSWPElKELWxAU+NSAA=
Subject key identifier: CA:D7:63:7C:FB:1D:86:1E:CD:81:65:0E:DA:8A:F3:E1:1D:2E:B0:90
Certificate issuer: /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial: 09E853A1
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ytdjfPsdhh7NgWUO2orz4R0usJA.roa
Signing time: Sat 01 Jan 2022 09:59:04 +0000
ROA not before: Sat 01 Jan 2022 09:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207343
IP address blocks: 2a09:be40:1132::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166220705 (0x9e853a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Validity
Not Before: Jan 1 09:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cad7637cfb1d861ecd81650eda8af3e11d2eb090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:9e:8b:50:43:b7:52:25:3d:2a:6a:c4:24:
c7:cf:9a:1e:f1:b5:22:9d:f5:89:20:70:1a:fa:d4:
df:07:ba:8c:b1:e4:2b:cd:1f:65:c2:35:94:37:67:
d1:7a:24:dd:9a:86:77:ad:0e:64:7d:d6:dd:78:f3:
93:8d:27:bd:c2:b5:c3:23:ec:25:4e:b8:39:61:5f:
03:9b:ed:5b:f8:28:b7:24:ff:5c:6d:7b:f3:1f:33:
cb:1d:9d:b8:6a:98:3a:c7:6b:15:4a:09:b6:a7:03:
22:b4:6c:5d:cd:ed:85:1a:ad:9a:b1:51:23:2d:b9:
b0:c5:af:2e:79:13:28:94:b2:0e:d9:e6:14:92:55:
d9:4c:03:6e:41:04:e3:67:23:e0:a8:c7:83:ef:90:
7d:98:bb:9e:30:6f:7a:f0:8a:9d:29:e9:24:f6:85:
4b:2f:08:76:2b:40:db:7a:3d:2f:84:fb:ae:a2:97:
37:f1:d1:10:ae:9e:01:77:ad:34:27:68:b5:02:4f:
81:e6:48:c1:b9:3b:c5:33:54:ab:a1:e4:2f:c0:a0:
45:14:20:ec:85:bc:d4:1e:48:b9:50:17:e2:a2:c8:
9d:0a:50:7d:83:86:6f:02:51:0f:09:f5:6c:f6:fb:
87:67:cf:62:ad:0a:cc:a8:11:d9:c6:4d:e1:6d:33:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:63:7C:FB:1D:86:1E:CD:81:65:0E:DA:8A:F3:E1:1D:2E:B0:90
X509v3 Authority Key Identifier:
keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ytdjfPsdhh7NgWUO2orz4R0usJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be40:1132::/48
Signature Algorithm: sha256WithRSAEncryption
5c:74:e9:e6:b4:03:4f:b3:68:02:bb:55:1c:7b:9b:9d:2a:c3:
6f:e2:8f:ec:d0:89:63:07:cb:ec:6a:8d:5a:15:f8:d0:ba:20:
9b:6a:8f:46:fd:7d:df:e9:20:69:e3:c0:a3:9e:e9:4d:12:67:
c7:7d:38:45:54:7f:3d:9f:d4:c3:bd:89:65:ba:4d:8c:2d:60:
4f:3b:8d:13:66:48:5d:e5:34:54:83:c4:db:be:04:86:8a:7a:
d1:84:95:08:27:53:26:d3:5c:f5:f3:87:da:5e:0c:a7:d6:3f:
01:5f:f4:c9:e4:ac:f3:ba:cd:8a:9e:02:c1:7e:e5:ff:c3:18:
6a:ff:8f:e9:e4:14:2b:49:33:6f:e2:19:16:f5:4c:31:fc:95:
7f:37:d5:9d:73:8f:6d:92:7a:32:d8:81:ef:0d:5c:2f:ac:c2:
5d:96:35:ca:fb:7b:8e:72:c7:7a:59:72:b4:90:1d:26:e5:1d:
66:19:d8:a2:35:77:1d:dd:01:b8:80:29:49:31:7a:d1:85:e0:
55:6c:0c:ac:27:fe:62:8c:89:73:6e:a3:db:e0:c5:3f:46:e2:
63:5c:a0:c7:72:ff:8f:58:b0:db:9d:27:ab:9b:dd:ad:70:d4:
b4:d9:51:2d:0b:7a:95:83:df:6f:c5:02:78:32:8e:34:3c:21:
ff:9b:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:24 2025 by rpki-client