Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ydbrje3UPVm8R15QS_gI4G8JkZ8.roa
File: ydbrje3UPVm8R15QS_gI4G8JkZ8.roa (raw, json)
Hash identifier: 9YZIlSpD5UZTI51LVS8V+r0vUFmlrJTcDfEwmIT9Rlo=
Subject key identifier: C9:D6:EB:8D:ED:D4:3D:59:BC:47:5E:50:4B:F8:08:E0:6F:09:91:9F
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 0194266B680B63C529600F1FFA4AD9AACEA0
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ydbrje3UPVm8R15QS_gI4G8JkZ8.roa
Signing time: Thu 02 Jan 2025 09:49:20 +0000
ROA not before: Thu 02 Jan 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208633
IP address blocks: 2a0e:1dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:68:0b:63:c5:29:60:0f:1f:fa:4a:d9:aa:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9d6eb8dedd43d59bc475e504bf808e06f09919f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:da:3a:3c:64:b5:52:0e:cb:be:54:52:83:
6a:83:4f:44:f7:e5:12:5f:7a:75:5c:47:52:59:63:
e5:df:55:aa:a0:6a:28:60:0d:fe:7a:ff:47:ce:2c:
73:3d:6e:83:a3:d7:3a:b8:4e:85:0f:d1:e6:0c:4d:
79:af:cd:b1:9b:44:d0:31:2a:10:d8:52:21:7b:3b:
ad:c9:5a:2b:58:10:81:2c:29:ac:fb:b1:9e:36:8f:
48:97:7f:8b:f5:ac:7b:6a:b7:ce:80:c8:a7:5a:10:
62:51:90:92:aa:fe:58:4b:2e:16:b1:ce:7d:f0:cb:
f8:fc:c7:36:27:40:55:4a:c4:6b:d5:67:3d:37:f9:
4c:4a:b3:fc:5d:13:bf:df:14:fc:95:e7:f6:fd:41:
71:14:2a:3a:c4:e7:c6:5f:0c:28:83:3f:1e:4a:b9:
5e:83:7b:7d:b7:21:91:85:35:9e:12:ae:c4:2d:99:
dd:6e:4f:b0:45:1e:c1:de:4d:11:c4:2f:11:ae:b9:
23:64:4b:d4:8c:8f:88:ee:a7:64:e2:d6:d0:6e:34:
a5:df:ed:eb:5d:c0:74:59:f1:d3:37:97:8d:bb:82:
d6:df:20:5a:57:92:c3:c1:7e:79:d0:54:a8:c8:93:
4a:5c:81:3a:88:ed:10:eb:d8:0d:19:40:45:be:f1:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:EB:8D:ED:D4:3D:59:BC:47:5E:50:4B:F8:08:E0:6F:09:91:9F
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ydbrje3UPVm8R15QS_gI4G8JkZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:a4:3e:88:e1:9b:0e:30:a1:b4:e9:36:5d:d7:32:d7:4a:0b:
18:21:6b:33:0c:9c:54:60:9a:7d:d8:b4:f4:b6:90:68:c6:8c:
e8:3c:d9:1c:cb:9a:d0:e0:8c:25:a2:50:88:62:70:bf:75:7f:
ac:f7:5e:c7:60:3f:bc:dc:02:9a:7d:10:35:cd:86:f4:f8:50:
99:1f:93:ca:1f:aa:85:ee:91:f6:46:87:73:e2:cd:c1:10:5c:
f3:60:2c:36:6a:1f:ca:f0:1f:1a:c6:04:96:65:a4:db:51:f4:
c5:b8:02:66:08:ab:a0:7a:62:60:5e:94:e1:71:81:61:1e:53:
59:74:8e:bc:c7:58:b2:0f:b3:a1:18:35:8e:9f:65:6c:2e:87:
4e:8a:81:52:25:b1:a1:2f:26:47:b5:08:41:53:68:28:08:f4:
99:11:5b:e7:c0:53:ab:3c:6c:41:d0:56:1f:61:f2:67:5c:db:
b3:04:d5:9d:41:db:46:82:fa:dc:32:04:56:17:77:9a:ae:05:
e5:56:fa:7d:3f:53:4d:c0:be:53:11:d5:ac:9b:ed:9a:54:b6:
48:a0:59:99:b1:51:a1:c3:0d:38:80:92:0c:7b:d6:63:46:79:
be:cf:3a:bc:25:a5:e4:9a:0d:91:79:c2:ef:7f:d2:47:9a:c5:
0c:9a:57:f5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma2gLY8UpYA8f+krZqs6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YWQwNzRhZmFjZTkxYWMzZmRkMGEzZWJkNjBmYWRiYzE2
ZGU0ZmMwHhcNMjUwMTAyMDk0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWQ2ZWI4ZGVkZDQzZDU5YmM0NzVlNTA0YmY4MDhlMDZmMDk5MTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YzaOjxktVIOy75UUoNqg09E9+US
X3p1XEdSWWPl31WqoGooYA3+ev9HzixzPW6Do9c6uE6FD9HmDE15r82xm0TQMSoQ
2FIhezutyVorWBCBLCms+7GeNo9Il3+L9ax7arfOgMinWhBiUZCSqv5YSy4Wsc59
8Mv4/Mc2J0BVSsRr1Wc9N/lMSrP8XRO/3xT8lef2/UFxFCo6xOfGXwwogz8eSrle
g3t9tyGRhTWeEq7ELZndbk+wRR7B3k0RxC8RrrkjZEvUjI+I7qdk4tbQbjSl3+3r
XcB0WfHTN5eNu4LW3yBaV5LDwX550FSoyJNKXIE6iO0Q69gNGUBFvvHdYwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMnW643t1D1ZvEdeUEv4COBvCZGfMB8GA1UdIwQY
MBaAFHmtB0r6zpGsP90KPr1g+tvBbeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEt
MGEyZTkzMzZkNmQwLzEveWRicmplM1VQVm04UjE1UVNfZ0k0RzhKa1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZjZkZTgtOWUyOS00Y2IzLWFhNGEtMGEyZTkzMzZkNmQw
LzEvZWEwSFN2ck9rYXdfM1FvLXZXRDYyOEZ0NVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg4dwDAN
BgkqhkiG9w0BAQsFAAOCAQEAWaQ+iOGbDjChtOk2Xdcy10oLGCFrMwycVGCafdi0
9LaQaMaM6DzZHMua0OCMJaJQiGJwv3V/rPdex2A/vNwCmn0QNc2G9PhQmR+Tyh+q
he6R9kaHc+LNwRBc82AsNmofyvAfGsYElmWk21H0xbgCZgiroHpiYF6U4XGBYR5T
WXSOvMdYsg+zoRg1jp9lbC6HToqBUiWxoS8mR7UIQVNoKAj0mRFb58BTqzxsQdBW
H2HyZ1zbswTVnUHbRoL63DIEVhd3mq4F5Vb6fT9TTcC+UxHVrJvtmlS2SKBZmbFR
ocMNOICSDHvWY0Z5vs86vCWl5JoNkXnC73/SR5rFDJpX9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:14 2025 by rpki-client