Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/_Ya9SawdjIbplJ2DDMKFuiItpWw.roa
File: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (raw, json)
Hash identifier: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=
Subject key identifier: FD:86:BD:49:AC:1D:8C:86:E9:94:9D:83:0C:C2:85:BA:22:2D:A5:6C
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 01942521CA944A61DBD67FF14D16AE602352
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/_Ya9SawdjIbplJ2DDMKFuiItpWw.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198902
IP address blocks: 2001:678:f7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ca:94:4a:61:db:d6:7f:f1:4d:16:ae:60:23:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd86bd49ac1d8c86e9949d830cc285ba222da56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:31:23:54:35:31:4c:7e:53:fd:84:88:3d:
c2:34:95:8e:b7:39:ce:a4:20:8a:a8:64:40:aa:b6:
0d:c0:97:0a:bd:5a:37:84:4c:29:ce:bb:a4:d4:b4:
f2:6a:94:e4:2b:a7:f7:f2:49:34:7d:d2:1c:bb:40:
3d:76:f8:f9:71:61:7f:30:c4:98:0f:3f:3f:7d:79:
0f:d6:f2:78:fc:7d:0a:76:91:ff:bf:6c:42:fe:47:
0d:de:ed:64:f0:a9:bf:43:ad:50:bf:7a:b3:e9:db:
dd:1b:45:c1:9e:25:c0:7b:cc:53:3e:c8:45:0b:c1:
60:25:69:3f:80:45:9b:e4:a9:d2:53:04:0b:12:da:
52:49:a0:9c:d6:39:ff:f7:f5:8f:98:25:2d:e2:ad:
5e:f4:dc:ec:9b:90:d8:a5:71:09:d4:73:bb:53:55:
43:14:14:e1:aa:7b:b4:fd:e2:55:dd:c1:b6:a2:11:
80:0d:a4:be:3f:f4:5d:bd:75:90:ab:f7:53:9b:39:
33:35:0a:4c:67:43:1a:2d:c2:87:22:8d:93:76:e4:
c6:24:b8:07:1d:96:41:81:12:3c:32:ae:e9:67:b1:
72:1d:90:44:ab:65:6a:fe:76:d3:94:94:f5:e1:90:
dc:ff:80:18:d6:9c:48:e0:22:3d:98:10:9a:30:3d:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:BD:49:AC:1D:8C:86:E9:94:9D:83:0C:C2:85:BA:22:2D:A5:6C
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/_Ya9SawdjIbplJ2DDMKFuiItpWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f7c::/48
Signature Algorithm: sha256WithRSAEncryption
c4:4a:72:74:51:1a:ea:dd:de:97:01:b3:7b:dc:c5:2d:b1:e6:
85:d0:ab:8c:0e:c8:3f:46:f6:4d:45:c2:46:55:3d:18:00:95:
c2:52:aa:96:33:6e:11:91:ef:aa:e1:cb:20:94:bc:b6:b0:b0:
93:83:c6:a7:a9:6c:61:c4:ae:78:3c:3c:35:86:d4:15:9e:8f:
7e:9d:88:d3:04:4f:84:8f:67:6f:36:f7:a5:9c:68:90:b4:d6:
61:3e:59:44:1f:52:4c:f4:16:50:4d:67:6c:bb:9e:e9:b9:ad:
f0:f6:95:65:3e:14:28:db:9b:1c:93:e8:81:60:12:e7:98:a2:
02:70:8b:72:10:64:fc:e3:33:c0:2a:a0:1c:6c:ef:a1:5c:d1:
37:82:02:e4:49:77:4b:6e:a7:2e:55:4d:e4:9f:f8:17:a1:1c:
e9:24:5a:aa:61:0d:a4:3e:c1:d4:7b:c4:48:4b:b6:63:c3:78:
31:6b:5f:9a:5e:3f:b9:76:ae:c3:87:d5:3a:35:79:0f:d9:c6:
db:c3:9c:3b:b2:20:fc:0c:7d:20:fb:de:e4:a6:b6:a3:3c:2b:
28:92:b7:47:75:01:81:82:0e:e7:52:50:b8:83:54:38:dd:de:
e0:94:30:66:58:93:99:69:66:96:ed:dc:66:da:4f:85:c5:92:
c6:46:63:25
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIcqUSmHb1n/xTRauYCNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTYyYmJmMDI0NmNkYTIyODBhMjkzNDMyYWU2ZjBiZDY4
MjYxMzEwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg2YmQ0OWFjMWQ4Yzg2ZTk5NDlkODMwY2MyODViYTIyMmRhNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhQxI1Q1MUx+U/2EiD3CNJWOtznO
pCCKqGRAqrYNwJcKvVo3hEwpzruk1LTyapTkK6f38kk0fdIcu0A9dvj5cWF/MMSY
Dz8/fXkP1vJ4/H0KdpH/v2xC/kcN3u1k8Km/Q61Qv3qz6dvdG0XBniXAe8xTPshF
C8FgJWk/gEWb5KnSUwQLEtpSSaCc1jn/9/WPmCUt4q1e9Nzsm5DYpXEJ1HO7U1VD
FBThqnu0/eJV3cG2ohGADaS+P/RdvXWQq/dTmzkzNQpMZ0MaLcKHIo2TduTGJLgH
HZZBgRI8Mq7pZ7FyHZBEq2Vq/nbTlJT14ZDc/4AY1pxI4CI9mBCaMD2WxwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP2GvUmsHYyG6ZSdgwzChboiLaVsMB8GA1UdIwQY
MBaAFCMWK78CRs2iKAopNDKubwvWgmExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAt
ODVjMzA1ZjlmZTZmLzEvX1lhOVNhd2RqSWJwbEoyRERNS0Z1aUl0cFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yZjk2ODktYTkxNS00MTI3LWE0NzAtODVjMzA1ZjlmZTZm
LzEvSXhZcnZ3Skd6YUlvQ2lrME1xNXZDOWFDWVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA98
MA0GCSqGSIb3DQEBCwUAA4IBAQDESnJ0URrq3d6XAbN73MUtseaF0KuMDsg/RvZN
RcJGVT0YAJXCUqqWM24Rke+q4csglLy2sLCTg8anqWxhxK54PDw1htQVno9+nYjT
BE+Ej2dvNvelnGiQtNZhPllEH1JM9BZQTWdsu57pua3w9pVlPhQo25sck+iBYBLn
mKICcItyEGT84zPAKqAcbO+hXNE3ggLkSXdLbqcuVU3kn/gXoRzpJFqqYQ2kPsHU
e8RIS7Zjw3gxa1+aXj+5dq7Dh9U6NXkP2cbbw5w7siD8DH0g+97kprajPCsokrdH
dQGBgg7nUlC4g1Q43d7glDBmWJOZaWaW7dxm2k+FxZLGRmMl
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:52 2025 by rpki-client