Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/YfK2aOb88mXpBxncnyZwMMazaP0.roa
File: YfK2aOb88mXpBxncnyZwMMazaP0.roa (raw, json)
Hash identifier: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=
Subject key identifier: 61:F2:B6:68:E6:FC:F2:65:E9:07:19:DC:9F:26:70:30:C6:B3:68:FD
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019425FC15326AAA2116A7408B38B3C81A4D
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/YfK2aOb88mXpBxncnyZwMMazaP0.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 2a02:1140:113::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:15:32:6a:aa:21:16:a7:40:8b:38:b3:c8:1a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61f2b668e6fcf265e90719dc9f267030c6b368fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:78:c8:7a:d4:6f:f9:e5:24:82:f3:2e:ed:
60:95:64:da:83:ae:ce:31:0f:e6:ac:a8:17:31:08:
8f:b5:3e:1d:52:f9:44:6d:a3:ab:1b:f7:26:f1:c7:
a7:37:59:0f:1b:2e:72:66:4b:e6:18:b9:01:66:9b:
64:17:de:d8:3b:83:92:ca:29:d3:07:c9:93:fe:5a:
2b:ea:95:35:dc:0a:17:8b:c1:5b:ba:dd:c9:87:34:
23:2e:42:9a:4e:b9:7e:d7:24:6e:fa:b4:10:b8:44:
3d:a3:be:d7:2d:02:1f:2d:12:d0:22:a1:8e:cb:77:
71:97:63:36:c7:7c:64:d7:a6:ea:a1:71:0f:28:2a:
6b:6c:07:77:ba:2a:d2:6c:e0:5f:78:3e:f1:32:8d:
b3:1a:bc:ee:6c:69:b8:9f:d5:b1:39:0b:e9:06:db:
be:f1:80:23:dc:83:5b:d6:42:fb:bd:ca:50:0a:9b:
32:ee:4f:c6:0c:c8:8d:7e:66:f2:30:bd:f2:54:f5:
c3:b6:1c:3b:85:b0:90:38:73:91:26:69:a1:6a:dc:
d8:6a:52:ae:4d:7e:69:18:f3:f5:e7:04:cc:1d:bb:
7c:df:a7:4d:23:1d:ef:f1:9c:e6:c5:a8:7c:da:fb:
ad:dc:cf:72:05:81:6e:87:09:dc:c8:92:7d:61:10:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F2:B6:68:E6:FC:F2:65:E9:07:19:DC:9F:26:70:30:C6:B3:68:FD
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/YfK2aOb88mXpBxncnyZwMMazaP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1140:113::/48
Signature Algorithm: sha256WithRSAEncryption
53:b1:cd:15:aa:6f:59:c0:f9:46:e5:74:30:07:88:31:33:c6:
47:10:7d:1c:59:58:ee:ea:50:38:f7:64:ad:6b:4d:93:13:54:
8e:be:ad:5e:23:ce:ae:55:94:d3:ad:ba:b6:62:f4:c6:70:ee:
5a:56:3c:d3:5b:25:cc:66:ee:1f:d2:c7:b1:2a:c9:d9:c5:da:
ac:b0:5c:3e:28:06:b8:c7:1d:a7:29:0f:44:eb:7d:68:e0:dc:
8a:58:c2:90:1e:0e:1b:0d:8d:5a:0b:63:e1:7f:5d:ef:19:5f:
b8:be:67:c9:e0:b7:17:4d:24:c5:95:fb:72:31:c0:73:72:7d:
4e:6b:8a:5a:5f:33:14:e6:b1:79:75:a1:b3:28:0e:8e:0a:92:
bb:35:5e:a7:d1:b2:ea:8c:76:7e:6c:1e:57:0c:11:69:2f:51:
00:35:75:8d:f4:1d:dc:7e:c2:43:a5:1c:62:53:6e:67:d8:f7:
3b:23:74:13:5e:32:09:d9:f9:d1:2d:05:01:e9:6e:27:83:94:
14:a1:ac:53:d5:d3:61:9a:01:6e:6e:56:aa:50:ec:62:fb:2a:
57:b6:8a:77:a9:ce:93:14:3f:e6:25:ac:17:c8:32:97:31:6b:
15:da:73:83:ab:c9:60:37:fd:a3:b2:a0:e4:14:4d:75:06:d6:
14:68:97:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:27:21 2025 by rpki-client