Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yFpRNE7i2WgIEYIxLG3zIPDlln4.roa
File: yFpRNE7i2WgIEYIxLG3zIPDlln4.roa (raw, json)
Hash identifier: EcmQ8q+hiWbGTCWLghgtLjIqAazmZXfm+rBefsdhxis=
Subject key identifier: C8:5A:51:34:4E:E2:D9:68:08:11:82:31:2C:6D:F3:20:F0:E5:96:7E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BD4E238C36371D9E6F229B50B42AA3195
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yFpRNE7i2WgIEYIxLG3zIPDlln4.roa
Signing time: Wed 15 Nov 2023 21:27:57 +0000
ROA not before: Wed 15 Nov 2023 21:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 2a0f:e900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:e2:38:c3:63:71:d9:e6:f2:29:b5:0b:42:aa:31:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 15 21:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c85a51344ee2d968081182312c6df320f0e5967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:3e:e5:e8:75:3e:c6:63:a4:0f:14:9f:b7:
5f:e2:6d:ee:8e:9c:67:21:db:b9:39:90:8a:73:02:
1e:27:f5:0c:96:3b:f8:be:ef:b7:f4:b9:a3:65:81:
66:a4:e9:1d:dd:79:5e:8c:6f:67:05:ab:df:20:a1:
7f:34:aa:27:b4:58:44:4f:65:f6:3a:b5:db:f0:7d:
2f:8b:88:4e:47:14:51:8d:fa:ac:b3:97:eb:a6:bb:
5e:d6:85:ca:8c:c6:74:91:78:d1:0e:bb:ad:f3:49:
87:08:79:f7:dc:6d:c2:99:dc:2e:ce:1c:43:36:8e:
3e:b6:be:fe:46:b5:65:bf:81:74:66:01:0f:91:4c:
fe:7d:16:50:8c:40:c9:7d:fc:db:4e:4a:ad:93:1a:
34:b3:d8:d7:8d:b3:25:2d:c0:c6:57:86:46:e9:3e:
4d:6a:55:c5:ce:e6:33:6a:f0:1f:bf:20:c2:c5:fe:
95:9b:55:8b:56:7e:f7:16:30:44:bd:3b:bb:fd:53:
40:16:cf:fc:55:61:d1:9a:da:7b:98:0f:9e:09:fb:
90:b1:7a:d7:9b:ad:0c:b7:7e:fe:7f:fa:e5:83:be:
ba:86:9a:31:2a:bb:43:62:07:a2:14:76:4b:af:82:
7e:aa:9e:26:75:68:d6:f1:7c:5b:ce:7f:92:44:ea:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5A:51:34:4E:E2:D9:68:08:11:82:31:2C:6D:F3:20:F0:E5:96:7E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yFpRNE7i2WgIEYIxLG3zIPDlln4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e900::/29
Signature Algorithm: sha256WithRSAEncryption
95:86:7d:b1:3c:95:8c:ca:17:34:b3:80:fa:3c:2a:f1:a8:2c:
3a:63:a1:5f:ca:89:f3:2e:56:60:b8:18:91:ec:40:d7:74:47:
48:5f:6b:24:b3:03:af:71:21:6a:3e:a8:c8:f0:7a:13:de:b9:
e1:b7:a5:07:c5:cd:48:79:d5:78:41:f2:fa:13:3b:63:db:f9:
77:ef:08:b3:fb:1c:00:ec:2e:b8:be:17:33:1b:09:ae:e7:56:
2a:3a:c8:ce:33:13:95:38:8e:d8:b3:88:fd:08:16:94:d2:04:
0e:50:3c:af:76:ed:10:fb:8a:e1:ff:a1:70:8a:ca:3f:07:1b:
92:77:99:91:65:d4:95:af:6f:d9:31:e3:66:e3:ca:de:e4:ea:
2b:6d:a8:9b:01:4f:3e:fd:bd:46:09:67:55:8e:1a:c7:2d:62:
ca:ad:a1:5a:e0:d4:51:79:60:39:87:29:e0:3a:f9:56:f9:af:
87:11:93:8b:dc:15:66:44:e1:4a:53:46:a1:bc:51:8f:13:f2:
55:74:4b:a1:be:b1:6a:a1:fb:8a:6d:e8:ea:ef:70:11:67:fd:
a2:29:86:85:ee:2e:32:5d:cd:11:28:22:e7:22:75:34:14:a4:
f6:34:f5:83:48:7d:73:f6:8f:65:07:2b:91:36:e6:f9:7d:a0:
8a:b2:8a:0c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYvU4jjDY3HZ5vIptQtCqjGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMxMTE1MjEyNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODVhNTEzNDRlZTJkOTY4MDgxMTgyMzEyYzZkZjMyMGYwZTU5NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF8+5eh1PsZjpA8Un7df4m3ujpxn
Idu5OZCKcwIeJ/UMljv4vu+39LmjZYFmpOkd3XlejG9nBavfIKF/NKontFhET2X2
OrXb8H0vi4hORxRRjfqss5frprte1oXKjMZ0kXjRDrut80mHCHn33G3CmdwuzhxD
No4+tr7+RrVlv4F0ZgEPkUz+fRZQjEDJffzbTkqtkxo0s9jXjbMlLcDGV4ZG6T5N
alXFzuYzavAfvyDCxf6Vm1WLVn73FjBEvTu7/VNAFs/8VWHRmtp7mA+eCfuQsXrX
m60Mt37+f/rlg766hpoxKrtDYgeiFHZLr4J+qp4mdWjW8Xxbzn+SROrzBwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMhaUTRO4tloCBGCMSxt8yDw5ZZ+MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEveUZwUk5FN2kyV2dJRVlJeExHM3pJUERsbG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/pADAN
BgkqhkiG9w0BAQsFAAOCAQEAlYZ9sTyVjMoXNLOA+jwq8agsOmOhX8qJ8y5WYLgY
kexA13RHSF9rJLMDr3Ehaj6oyPB6E9654belB8XNSHnVeEHy+hM7Y9v5d+8Is/sc
AOwuuL4XMxsJrudWKjrIzjMTlTiO2LOI/QgWlNIEDlA8r3btEPuK4f+hcIrKPwcb
kneZkWXUla9v2THjZuPK3uTqK22omwFPPv29RglnVY4axy1iyq2hWuDUUXlgOYcp
4Dr5VvmvhxGTi9wVZkThSlNGobxRjxPyVXRLob6xaqH7im3o6u9wEWf9oimGhe4u
Ml3NESgi5yJ1NBSk9jT1g0h9c/aPZQcrkTbm+X2girKKDA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:03 2025 by rpki-client