Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y2rKf4N4_ODY8560T5xQOMSnzI4.roa
File: Y2rKf4N4_ODY8560T5xQOMSnzI4.roa (raw, json)
Hash identifier: ddDUV+aLEj0uUpZGSpyG4RH5+fMEHvG61c6a0c4YdCw=
Subject key identifier: 63:6A:CA:7F:83:78:FC:E0:D8:F3:9E:B4:4F:9C:50:38:C4:A7:CC:8E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC8973384B204D785D10D77E7A4B8
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y2rKf4N4_ODY8560T5xQOMSnzI4.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138631
IP address blocks: 2a0e:aa06:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c8:97:33:84:b2:04:d7:85:d1:0d:77:e7:a4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=636aca7f8378fce0d8f39eb44f9c5038c4a7cc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:bc:82:f0:41:0e:9a:6f:f4:a9:f0:c2:2f:
26:0e:b9:42:67:43:a9:ab:a6:f8:78:1c:35:7a:9c:
5f:2a:d3:31:f3:f1:cc:51:10:55:5d:2e:07:90:ed:
ae:39:a1:90:9c:79:88:0e:66:2a:e4:ba:98:a3:89:
83:7b:bb:16:8c:f8:53:90:b4:6c:62:0f:dc:be:b7:
42:fc:93:59:ef:01:2a:3c:54:65:12:ad:e1:52:0f:
69:03:fb:e6:f9:5a:d6:19:cb:d1:84:14:29:6c:1f:
b8:23:4d:13:d2:50:0c:d7:fd:9c:ce:f3:06:5b:20:
0b:52:68:61:55:ef:6d:16:61:c8:7c:3c:cf:6e:71:
a4:b1:69:07:a3:5a:7f:87:07:30:f8:31:46:01:89:
f5:8b:a4:6d:eb:cc:44:e9:bb:78:96:34:c4:4b:1a:
0c:a9:2a:f0:f0:4b:4e:47:a0:73:f8:b5:f7:08:c6:
20:be:02:d7:6b:47:cc:83:cd:1f:9a:00:bc:53:d2:
61:9a:3b:71:35:f2:e0:3d:08:ad:37:db:36:5e:97:
83:f6:c1:30:52:24:d8:36:3e:b4:a3:40:f0:6e:7c:
3c:63:59:69:c3:94:85:a3:bb:10:55:9f:2e:12:fe:
77:17:5a:91:96:44:1e:19:8c:de:9c:9a:d6:49:4c:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6A:CA:7F:83:78:FC:E0:D8:F3:9E:B4:4F:9C:50:38:C4:A7:CC:8E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y2rKf4N4_ODY8560T5xQOMSnzI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:100::/40
Signature Algorithm: sha256WithRSAEncryption
35:e0:c8:2c:93:b8:a2:47:0d:51:5d:ab:7b:70:36:99:36:3b:
7b:e1:8d:8b:38:9f:4b:68:1e:93:19:e2:aa:b1:03:1b:08:5e:
88:75:47:f1:7e:f2:76:90:a7:81:6c:fe:72:27:9c:de:72:bd:
54:78:cd:7f:ed:b1:76:66:69:d3:70:51:4a:7b:8b:30:26:26:
9a:0f:8c:8b:c8:7e:dc:8b:dc:57:a9:28:6a:4f:92:60:5b:61:
3d:02:55:2e:e8:0a:36:ad:0e:8d:1a:90:da:15:85:a3:73:c0:
4e:65:a3:0a:21:c2:61:da:fe:6f:3b:e8:a2:1b:e4:63:67:e1:
82:04:cd:f0:c0:41:8a:f1:a0:f8:91:f9:5a:10:bd:4c:45:44:
5b:21:67:4b:0e:f3:80:09:8b:f3:42:92:ae:3c:f7:5e:86:49:
30:f6:23:93:46:7c:56:7a:e1:14:9a:09:be:c5:91:97:a7:26:
4e:1d:75:97:cd:6e:33:c4:34:d9:98:af:7a:5a:f1:8f:70:be:
e3:db:22:78:0f:12:0e:c3:85:bf:04:48:4d:a4:5f:82:e5:16:
8f:41:dc:5e:a9:ba:93:b5:1b:72:24:4f:d8:e9:66:72:8b:96:
8d:85:5d:e7:d2:1e:e7:27:c0:c9:6e:4f:6b:50:98:3a:1a:53:
f8:62:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:31:29 2025 by rpki-client