Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YJqr4ZuzJ1QtEGUzuzhULzM1Wio.roa
File: YJqr4ZuzJ1QtEGUzuzhULzM1Wio.roa (raw, json)
Hash identifier: jiqX+xJRS0wxHsixx8mBbqZ5ZZ0hTyP0ROPVK295Za8=
Subject key identifier: 60:9A:AB:E1:9B:B3:27:54:2D:10:65:33:BB:38:54:2F:33:35:5A:2A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01951056DCE0BC03696E9215A6F0A02B4B27
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YJqr4ZuzJ1QtEGUzuzhULzM1Wio.roa
Signing time: Sun 16 Feb 2025 19:58:02 +0000
ROA not before: Sun 16 Feb 2025 19:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394380
IP address blocks: 2a13:bb40::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:56:dc:e0:bc:03:69:6e:92:15:a6:f0:a0:2b:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 16 19:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=609aabe19bb327542d106533bb38542f33355a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:84:51:68:28:4f:e1:7a:1d:5a:ab:f0:c4:
f3:37:bb:ca:54:73:cd:34:6f:63:30:11:22:38:17:
c3:7f:10:bc:b3:2e:01:e5:6f:60:1f:a9:54:01:98:
9e:07:c4:8c:ba:98:32:d1:61:58:47:ec:6f:bc:8a:
48:e1:ea:e5:bb:31:7c:4d:91:0f:0f:dc:95:bd:fa:
79:eb:f2:33:0f:02:7a:eb:e7:2d:c1:61:c9:35:79:
8a:51:dc:51:17:9a:96:ba:b4:35:2f:62:e5:2f:12:
4c:b6:ad:cb:65:41:21:0b:71:59:be:c8:2b:9f:71:
68:7d:41:72:cf:e9:0d:55:ff:96:c4:93:0f:4e:0d:
cb:a2:53:5f:8b:f5:16:9f:c1:8d:f0:9e:96:38:c5:
9a:ef:2f:6c:15:75:75:a6:91:3a:3e:68:24:3d:1f:
e3:81:d5:dc:a6:32:c7:20:a0:e7:a6:f5:13:b8:e8:
7d:e9:7d:78:9a:bd:d5:04:e7:0b:a3:8d:36:ab:46:
3e:08:7a:5c:23:04:72:42:ad:8c:f5:26:52:e7:7f:
99:ba:e4:69:dd:63:86:31:d7:cd:90:b0:ee:a1:96:
66:3c:a4:2d:0b:d7:81:57:95:10:51:91:69:d8:c8:
0c:77:74:7f:da:31:47:43:4b:fc:19:69:ae:70:f8:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:AB:E1:9B:B3:27:54:2D:10:65:33:BB:38:54:2F:33:35:5A:2A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/YJqr4ZuzJ1QtEGUzuzhULzM1Wio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb40::/29
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
9b:5e:50:0f:e6:d3:6a:59:22:f1:97:8a:37:9e:37:2b:3d:d2:
71:bb:74:25:72:c9:52:fd:3f:a9:31:b9:5a:f0:a1:74:9c:50:
62:b3:b8:96:8f:6f:48:86:f2:55:70:38:dd:ae:c1:39:89:d2:
e8:ba:2c:cc:fe:95:d3:c9:8c:4d:60:fd:da:7e:dc:27:0e:07:
e0:34:38:08:31:4f:7c:86:74:0e:14:ae:ed:8c:07:d0:b0:16:
23:99:76:47:df:a2:e3:06:ed:88:fd:75:e9:b9:42:19:57:0d:
aa:88:71:01:0b:cb:97:ee:1a:e2:4c:a2:e5:0a:c8:da:79:b9:
94:78:b5:95:93:4b:eb:7a:d8:04:8f:ec:65:40:c7:51:42:32:
86:8d:fe:94:2a:19:23:2f:75:21:16:d2:e8:db:02:5a:1b:87:
89:e1:b9:c1:82:fc:ac:11:19:c5:e8:56:e4:3d:35:eb:46:0c:
15:d6:64:0d:57:c8:0b:e3:4f:5f:dc:1c:34:64:b0:65:0e:25:
4f:31:d7:37:e5:62:b5:b3:54:3b:4b:8b:73:a7:6e:b9:60:99:
31:87:c6:de:22:5c:94:57:b6:99:06:64:ec:49:5f:4f:6e:ba:
5d:2e:37:e8:f6:15:ca:1d:c7:ee:9d:b5:24:df:18:cb:1b:f4:
4d:74:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:13:01 2025 by rpki-client