Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa
File: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (raw, json)
Hash identifier: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=
Subject key identifier: 62:99:2F:D0:3C:F7:31:3D:18:C7:5A:F3:44:F9:6A:37:CC:9B:86:28
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019427485FB74A8AD8F036990698EBDC8123
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12750
IP address blocks: 212.80.96.0/19 maxlen: 19
2a01:7480::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5f:b7:4a:8a:d8:f0:36:99:06:98:eb:dc:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62992fd03cf7313d18c75af344f96a37cc9b8628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:c2:d0:0c:f6:8e:d6:3c:d8:dc:5a:f3:0e:
1e:d1:50:d2:c4:e6:ee:4a:80:f1:9a:ba:05:92:6b:
c6:6f:87:72:47:7c:34:d2:0e:0d:00:e0:cd:98:9a:
3a:8f:0b:64:0f:9d:1c:84:d0:d5:7c:0a:b0:b4:e1:
5b:21:06:f2:24:94:b7:b3:88:f3:10:19:01:6a:c2:
c1:dd:02:86:ae:d2:6c:6f:70:19:72:30:2c:b2:14:
ce:fc:ec:c9:6c:70:5e:f0:07:a0:89:f2:d3:16:f8:
89:ac:29:98:cb:65:64:e3:df:aa:0a:06:ea:47:e6:
e1:60:f1:1a:39:a2:8a:37:81:be:16:b5:0e:90:6a:
f6:dc:af:03:c5:66:43:c5:8e:c0:a7:5d:a6:5c:84:
92:fb:ee:7f:9c:e7:ed:2e:1c:df:6e:95:1c:a2:60:
65:72:49:aa:95:a6:d5:cb:36:00:78:cb:dc:b3:a8:
a7:32:ee:f3:f1:6c:5c:d9:a0:c4:87:30:c9:12:8b:
e1:df:09:dc:5d:fb:67:0a:66:17:39:7a:a9:29:d3:
de:b1:62:f0:3c:60:94:78:96:f5:39:76:44:58:a9:
ce:59:b8:fd:bc:67:aa:de:8b:d9:d9:1b:b0:fe:e2:
51:ca:6d:7f:82:4e:f4:66:72:56:99:e3:74:1c:f2:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:2F:D0:3C:F7:31:3D:18:C7:5A:F3:44:F9:6A:37:CC:9B:86:28
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.96.0/19
IPv6:
2a01:7480::/32
Signature Algorithm: sha256WithRSAEncryption
2b:b0:76:7d:d1:b2:89:f3:d0:9a:1d:79:8c:da:50:12:7e:8c:
4b:4c:e1:76:5e:b5:dc:1a:31:8b:6d:ee:b5:11:82:42:a3:58:
ab:29:47:40:4a:12:82:5b:41:f0:e1:d9:ab:8b:19:1e:6f:80:
5c:bc:ec:f8:2a:f4:4e:f9:5d:20:1e:2a:8c:c2:cf:dc:ee:3a:
64:06:41:f3:24:d1:f5:13:64:51:44:5b:be:13:3d:1c:79:5e:
c5:8a:d8:22:13:62:02:b7:b2:56:94:74:8d:2a:c5:60:2b:9e:
c7:69:20:9f:ce:b3:0d:ba:5e:86:3f:32:6c:67:0c:59:29:76:
de:8f:ec:2d:82:df:a2:d6:52:af:07:6b:1a:9f:ac:da:cb:88:
04:9c:d0:f0:f2:f9:56:72:de:e5:c6:c7:c8:b5:ad:7d:95:9f:
2c:39:cc:85:fb:da:33:ce:22:54:b2:7c:aa:2d:6d:ea:82:33:
2d:16:7b:57:dd:24:5c:9c:44:47:89:1e:ba:fb:ab:f0:d7:f3:
42:6a:cf:74:e2:95:f5:e4:18:30:83:c2:c5:e4:9e:1c:b2:6a:
87:88:ca:17:94:89:25:e0:ae:1c:a5:39:07:09:87:4c:2c:48:
eb:cd:83:06:89:4f:e4:d7:25:5e:2a:44:16:45:07:67:c1:9d:
b5:24:06:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnSF+3SorY8DaZBpjr3IEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzc3ZWQ5ZmExMWVjMTk5NTU1NTk3NjJkZTA0N2E1YTZl
YjE0YTgwHhcNMjUwMTAyMTM1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjk5MmZkMDNjZjczMTNkMThjNzVhZjM0NGY5NmEzN2NjOWI4NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpXC0Az2jtY82Nxa8w4e0VDSxObu
SoDxmroFkmvGb4dyR3w00g4NAODNmJo6jwtkD50chNDVfAqwtOFbIQbyJJS3s4jz
EBkBasLB3QKGrtJsb3AZcjAsshTO/OzJbHBe8AegifLTFviJrCmYy2Vk49+qCgbq
R+bhYPEaOaKKN4G+FrUOkGr23K8DxWZDxY7Ap12mXISS++5/nOftLhzfbpUcomBl
ckmqlabVyzYAeMvcs6inMu7z8Wxc2aDEhzDJEovh3wncXftnCmYXOXqpKdPesWLw
PGCUeJb1OXZEWKnOWbj9vGeq3ovZ2Ruw/uJRym1/gk70ZnJWmeN0HPIRKwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGKZL9A89zE9GMda80T5ajfMm4YoMB8GA1UdIwQY
MBaAFO43ftn6EewZlVVZdi3gR6Wm6xSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMt
OWU3MWNiZDQyMTdiLzEvWXBrdjBEejNNVDBZeDFyelJQbHFOOHliaGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMtOWU3MWNiZDQyMTdi
LzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1FBgMA0E
AgACMAcDBQAqAXSAMA0GCSqGSIb3DQEBCwUAA4IBAQArsHZ90bKJ89CaHXmM2lAS
foxLTOF2XrXcGjGLbe61EYJCo1irKUdAShKCW0Hw4dmrixkeb4BcvOz4KvRO+V0g
HiqMws/c7jpkBkHzJNH1E2RRRFu+Ez0ceV7FitgiE2ICt7JWlHSNKsVgK57HaSCf
zrMNul6GPzJsZwxZKXbej+wtgt+i1lKvB2san6zay4gEnNDw8vlWct7lxsfIta19
lZ8sOcyF+9ozziJUsnyqLW3qgjMtFntX3SRcnERHiR66+6vw1/NCas904pX15Bgw
g8LF5J4csmqHiMoXlIkl4K4cpTkHCYdMLEjrzYMGiU/k1yVeKkQWRQdnwZ21JAYJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:13:56 2025 by rpki-client