Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/YoqdurND-upgcXWxAcpQuefPm64.roa
File: YoqdurND-upgcXWxAcpQuefPm64.roa (raw, json)
Hash identifier: /491Mi9Fi+bDxakeWh2wlNUupkb90wEk7U//uUYJllE=
Subject key identifier: 62:8A:9D:BA:B3:43:FA:EA:60:71:75:B1:01:CA:50:B9:E7:CF:9B:AE
Certificate issuer: /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial: 019423D6B937B12B4C99542F08BDEF36794E
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/YoqdurND-upgcXWxAcpQuefPm64.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2027
IP address blocks: 2a0b:cbc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b9:37:b1:2b:4c:99:54:2f:08:bd:ef:36:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=628a9dbab343faea607175b101ca50b9e7cf9bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:fe:3b:13:69:e4:7d:fb:45:41:f1:da:ae:
aa:53:37:2a:fe:b2:d8:47:4d:36:60:ee:e1:8a:e4:
91:f6:e8:54:f6:34:50:5a:79:c2:3a:c1:d3:0b:9b:
60:87:04:6e:be:7f:ed:a8:f7:4a:9f:3c:88:4e:cb:
33:c2:0d:0f:38:28:20:95:b7:15:36:51:97:d1:c5:
e1:e7:3b:79:9c:81:da:a1:2d:c5:9e:c1:d5:e9:7d:
39:cc:1c:d3:18:08:17:0f:67:f8:51:bc:86:c4:b9:
5d:99:03:4a:1c:5c:34:27:4f:ef:2a:17:e3:f8:ee:
5b:ba:e4:d8:22:85:fc:1b:8e:07:55:56:f7:e7:c1:
fe:98:c6:9f:e7:9b:84:11:69:fa:d6:d6:fa:5c:74:
ef:c7:ff:04:2d:11:07:b4:31:f7:0c:dc:38:21:6c:
5b:45:68:79:68:84:38:6a:2b:7f:6d:88:94:17:0c:
11:0b:d2:20:91:4a:db:16:7f:81:19:ed:87:f0:53:
96:9e:17:c9:ac:8e:d5:47:4d:ab:bb:80:da:7e:de:
3d:10:8e:78:37:1f:09:3a:1d:5c:8d:2f:1f:c1:64:
6d:00:d0:bc:58:02:ed:fd:88:26:59:37:a4:39:34:
f4:63:71:1a:36:eb:65:c4:3f:f8:9b:74:b1:59:b5:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:9D:BA:B3:43:FA:EA:60:71:75:B1:01:CA:50:B9:E7:CF:9B:AE
X509v3 Authority Key Identifier:
keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/YoqdurND-upgcXWxAcpQuefPm64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
34:d8:c3:8a:b4:ed:49:4e:31:f4:27:b7:69:84:80:62:84:8a:
51:f2:42:19:0f:7e:a1:78:53:80:17:ca:4d:ae:e7:01:21:d7:
98:d5:e4:5c:fb:8c:7b:5f:68:00:ea:53:80:c5:ce:cd:e8:99:
b7:5c:39:18:ed:67:65:37:a3:e2:7b:44:21:44:15:d1:4f:8b:
e3:05:36:c7:82:d1:ed:8f:f9:07:96:7c:f8:ad:3e:e3:f3:c7:
20:f4:56:9a:5a:e5:bd:91:92:4e:bf:23:83:1a:ae:86:79:43:
9d:32:b7:92:ab:12:86:c9:76:7d:ef:4d:6f:63:33:f2:a3:a8:
85:b0:07:39:4f:a0:7e:71:01:53:85:cb:86:ef:77:3d:dc:40:
f0:65:cb:5b:a7:dd:c7:97:04:5a:51:3d:e5:c9:df:ec:14:5a:
53:ed:36:c0:7c:33:80:96:9f:91:49:44:a1:f2:e2:da:06:ba:
4b:fd:27:83:98:92:12:e8:57:06:c1:d4:80:7d:9e:95:c4:b7:
1a:13:63:d9:1a:17:2f:c0:e6:c9:c9:f3:19:3d:2d:94:b1:be:
2f:74:39:bd:48:45:e5:60:4b:ad:af:44:a9:e5:f1:23:10:ef:
ec:ad:9d:b0:03:d1:ee:4a:0c:a0:a8:2a:ca:07:f2:5d:32:19:
1f:54:af:0b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1rk3sStMmVQvCL3vNnlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjI1MDViNDg4NTgxYzJlY2Q3NTgyYTM0ZWNlNTI2MzJl
M2VmOTYwHhcNMjUwMTAxMjE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjhhOWRiYWIzNDNmYWVhNjA3MTc1YjEwMWNhNTBiOWU3Y2Y5YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzev+OxNp5H37RUHx2q6qUzcq/rLY
R002YO7hiuSR9uhU9jRQWnnCOsHTC5tghwRuvn/tqPdKnzyITsszwg0POCgglbcV
NlGX0cXh5zt5nIHaoS3FnsHV6X05zBzTGAgXD2f4UbyGxLldmQNKHFw0J0/vKhfj
+O5buuTYIoX8G44HVVb358H+mMaf55uEEWn61tb6XHTvx/8ELREHtDH3DNw4IWxb
RWh5aIQ4ait/bYiUFwwRC9IgkUrbFn+BGe2H8FOWnhfJrI7VR02ru4Daft49EI54
Nx8JOh1cjS8fwWRtANC8WALt/YgmWTekOTT0Y3EaNutlxD/4m3SxWbVRAwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGKKnbqzQ/rqYHF1sQHKULnnz5uuMB8GA1UdIwQY
MBaAFFJiUFtIhYHC7NdYKjTs5SYy4++WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1KUVcwaUZnY0xzMTFncU5PemxKakxqNzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmJhYTItNGEyNy00ZjNjLWI5ZmMt
ZmIwMTQzNmE2OTVmLzEvWW9xZHVyTkQtdXBnY1hXeEFjcFF1ZWZQbTY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kZmJhYTItNGEyNy00ZjNjLWI5ZmMtZmIwMTQzNmE2OTVm
LzEvVW1KUVcwaUZnY0xzMTFncU5PemxKakxqNzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgvLwDAN
BgkqhkiG9w0BAQsFAAOCAQEANNjDirTtSU4x9Ce3aYSAYoSKUfJCGQ9+oXhTgBfK
Ta7nASHXmNXkXPuMe19oAOpTgMXOzeiZt1w5GO1nZTej4ntEIUQV0U+L4wU2x4LR
7Y/5B5Z8+K0+4/PHIPRWmlrlvZGSTr8jgxquhnlDnTK3kqsShsl2fe9Nb2Mz8qOo
hbAHOU+gfnEBU4XLhu93PdxA8GXLW6fdx5cEWlE95cnf7BRaU+02wHwzgJafkUlE
ofLi2ga6S/0ng5iSEuhXBsHUgH2elcS3GhNj2RoXL8DmycnzGT0tlLG+L3Q5vUhF
5WBLra9EqeXxIxDv7K2dsAPR7koMoKgqygfyXTIZH1SvCw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:02 2025 by rpki-client