Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/y5aXUBKmtNndMqsBfDwB9q7N1JM.roa
File: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (raw, json)
Hash identifier: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=
Subject key identifier: CB:96:97:50:12:A6:B4:D9:DD:32:AB:01:7C:3C:01:F6:AE:CD:D4:93
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019426D9B9229CE3A68147D7C3FF315489EA
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/y5aXUBKmtNndMqsBfDwB9q7N1JM.roa
Signing time: Thu 02 Jan 2025 11:49:50 +0000
ROA not before: Thu 02 Jan 2025 11:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 192.12.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b9:22:9c:e3:a6:81:47:d7:c3:ff:31:54:89:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Jan 2 11:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb96975012a6b4d9dd32ab017c3c01f6aecdd493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:5f:76:82:d9:99:28:d3:03:64:5d:a7:83:
d9:85:9a:0e:d7:0f:0b:81:69:75:01:04:31:c8:39:
db:3a:45:f2:03:b4:bd:64:7c:8b:0c:08:1a:96:e1:
14:5e:70:b6:37:60:62:27:bf:3b:58:aa:70:23:71:
f0:22:68:8c:9b:7c:91:37:4c:52:c8:0d:77:61:5b:
44:c3:b5:a9:1b:be:b1:2a:97:b3:f1:fd:b7:6e:0a:
c0:cd:63:40:1a:da:ce:ff:78:d9:01:12:34:e6:83:
5b:9b:ed:52:ec:b9:41:65:1c:04:5b:19:e7:ec:f1:
25:f9:98:d6:c6:88:30:2f:78:cc:19:23:81:5c:9d:
e1:ef:82:91:5d:a3:7b:0d:ca:f1:36:8e:c4:62:bd:
8e:d8:2c:88:f9:b8:86:a6:3f:5d:49:35:7c:5b:5c:
af:e0:54:80:2d:41:c9:90:56:7e:cd:f0:1e:67:e1:
30:de:d2:b6:b7:89:5a:de:9d:d2:09:51:a0:87:6f:
a1:fa:b8:50:f7:af:df:12:7f:f6:75:a5:a8:fd:f0:
f3:96:e7:c7:c1:da:76:88:a3:76:0e:0a:60:5f:26:
31:fc:ea:0a:2b:4a:0f:d5:9a:fa:93:ac:df:64:de:
b6:9a:e0:94:96:5e:1a:09:aa:ae:63:aa:9e:23:3a:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:96:97:50:12:A6:B4:D9:DD:32:AB:01:7C:3C:01:F6:AE:CD:D4:93
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/y5aXUBKmtNndMqsBfDwB9q7N1JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:20:ba:07:76:a7:e9:f1:f1:4a:5c:50:17:43:7d:c0:c4:82:
e8:16:e4:4a:4c:e3:9e:94:4d:c7:68:ad:47:ea:3c:3b:21:cd:
56:3a:6b:95:2b:b5:a2:18:f3:9f:f4:62:25:32:72:bf:98:09:
24:5e:63:ac:9c:98:cd:7d:7f:4c:8a:8a:f7:3a:67:5c:fa:70:
c1:8e:b3:1f:b2:3b:67:e2:50:06:e3:46:49:9f:50:56:67:a9:
1d:fc:44:55:81:29:f8:7a:11:ea:5a:20:b6:ee:fb:e1:31:01:
a5:f7:ba:bc:6c:d4:4b:c7:f3:6d:e7:5e:17:27:a5:9a:b2:67:
17:8a:6b:a2:aa:5e:41:f8:da:7e:49:81:cf:af:54:72:85:48:
d2:cd:30:a1:ac:c6:4b:a2:9a:1b:88:7f:2f:14:c5:bf:84:67:
43:65:e6:8f:4b:dc:2f:49:15:8b:46:a3:28:b8:62:e3:7f:cb:
31:a1:d9:21:c3:22:dc:cf:da:cc:e9:2b:6c:93:4c:7c:1a:70:
4c:8f:a9:bc:d6:b1:8e:69:2d:7d:3b:e9:5c:fe:c6:e7:2e:b0:
29:86:9a:78:a8:96:4a:20:85:aa:1c:39:c3:cc:f3:b0:25:ae:
af:c0:04:e7:20:b0:01:d5:96:fd:28:53:d4:3e:10:f7:22:0d:
eb:03:f1:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2bkinOOmgUfXw/8xVInqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjFiMTI2ZGFjMGFhMGI3Nzk0ODY0MDBlZGU3MjU0YjI1
ZWVhYTYwHhcNMjUwMTAyMTE0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjk2OTc1MDEyYTZiNGQ5ZGQzMmFiMDE3YzNjMDFmNmFlY2RkNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDpfdoLZmSjTA2Rdp4PZhZoO1w8L
gWl1AQQxyDnbOkXyA7S9ZHyLDAgaluEUXnC2N2BiJ787WKpwI3HwImiMm3yRN0xS
yA13YVtEw7WpG76xKpez8f23bgrAzWNAGtrO/3jZARI05oNbm+1S7LlBZRwEWxnn
7PEl+ZjWxogwL3jMGSOBXJ3h74KRXaN7DcrxNo7EYr2O2CyI+biGpj9dSTV8W1yv
4FSALUHJkFZ+zfAeZ+Ew3tK2t4la3p3SCVGgh2+h+rhQ96/fEn/2daWo/fDzlufH
wdp2iKN2DgpgXyYx/OoKK0oP1Zr6k6zfZN62muCUll4aCaquY6qeIzpRhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMuWl1ASprTZ3TKrAXw8AfauzdSTMB8GA1UdIwQY
MBaAFLCxsSbawKoLd5SGQA7eclSyXuqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMt
ZmY4MjRiNDE1NjkzLzEveTVhWFVCS210Tm5kTXFzQmZEd0I5cTdOMUpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YTQ3NmEtMzQ1NS00ZTNhLThjMzMtZmY4MjRiNDE1Njkz
LzEvc0xHeEp0ckFxZ3QzbElaQUR0NXlWTEplNnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxRMA0G
CSqGSIb3DQEBCwUAA4IBAQBvILoHdqfp8fFKXFAXQ33AxILoFuRKTOOelE3HaK1H
6jw7Ic1WOmuVK7WiGPOf9GIlMnK/mAkkXmOsnJjNfX9Mior3Omdc+nDBjrMfsjtn
4lAG40ZJn1BWZ6kd/ERVgSn4ehHqWiC27vvhMQGl97q8bNRLx/Nt514XJ6WasmcX
imuiql5B+Np+SYHPr1RyhUjSzTChrMZLopobiH8vFMW/hGdDZeaPS9wvSRWLRqMo
uGLjf8sxodkhwyLcz9rM6Stsk0x8GnBMj6m81rGOaS19O+lc/sbnLrAphpp4qJZK
IIWqHDnDzPOwJa6vwATnILAB1Zb9KFPUPhD3Ig3rA/Fq
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:23 2025 by rpki-client