Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/YXKQNXnY1_8dHe_27ws2JVab6Jw.roa
File: YXKQNXnY1_8dHe_27ws2JVab6Jw.roa (raw, json)
Hash identifier: GtVdk+E5DQGXinWHrvBzHOzByXo2wwkbIeYrfaP+/O8=
Subject key identifier: 61:72:90:35:79:D8:D7:FF:1D:1D:EF:F6:EF:0B:36:25:56:9B:E8:9C
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0195AD59FA35B735D87526548045EB17783A
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/YXKQNXnY1_8dHe_27ws2JVab6Jw.roa
Signing time: Wed 19 Mar 2025 07:41:49 +0000
ROA not before: Wed 19 Mar 2025 07:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:59:fa:35:b7:35:d8:75:26:54:80:45:eb:17:78:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Mar 19 07:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6172903579d8d7ff1d1deff6ef0b3625569be89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:5c:fc:06:5f:7a:dc:95:d2:8c:83:ad:73:
d3:cf:aa:16:1f:fc:6e:fb:5e:ab:13:55:bd:77:4d:
1d:58:46:cc:02:3e:2c:16:83:c8:5a:51:a4:57:1b:
e4:e1:fb:6b:64:4a:b6:91:58:c5:cc:3a:b9:a8:28:
fb:ea:34:5a:96:32:f1:ac:28:9b:43:b3:3e:cd:ef:
9d:23:48:30:75:15:7b:8e:8d:fc:b4:d0:a0:07:ae:
0b:07:e3:89:ba:97:82:29:3f:37:c7:4d:91:df:77:
50:69:16:6d:3d:26:b1:bc:c9:ab:2d:b0:a0:b2:d9:
67:f6:ad:ec:b5:89:e1:07:b1:ae:33:25:06:02:15:
31:af:92:a3:f9:3a:ac:31:a6:c9:40:62:ec:45:5e:
8c:9e:9f:4d:f0:1c:43:e9:b5:1d:d0:0f:45:20:ac:
42:89:08:73:ad:6c:8c:bc:38:55:2c:c9:60:12:57:
2d:f2:aa:3b:78:d7:48:d8:86:5e:7a:fd:a7:8e:23:
b8:78:a8:bc:96:ac:06:2c:51:bf:d6:88:40:8f:38:
81:f8:8e:df:4d:8f:7b:01:87:51:9a:f2:57:64:38:
a7:c2:3a:fd:73:ee:19:be:b7:74:8c:8b:18:68:af:
f9:18:88:3b:9f:a1:a1:8c:a6:2c:f8:1c:76:c0:1a:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:72:90:35:79:D8:D7:FF:1D:1D:EF:F6:EF:0B:36:25:56:9B:E8:9C
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/YXKQNXnY1_8dHe_27ws2JVab6Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4580::/32
Signature Algorithm: sha256WithRSAEncryption
36:6f:08:ad:c6:2e:6b:49:6b:e1:86:7c:c2:26:ea:fa:c8:04:
ac:b6:c8:4b:45:25:7e:2e:9b:02:c3:7f:76:d6:60:d9:59:a1:
1e:cc:df:59:85:27:ae:4f:7a:34:07:a3:a2:89:0a:66:ae:ab:
fd:fd:c2:99:9c:40:7e:c3:75:25:80:b6:93:28:e8:bd:ac:16:
9e:0b:50:79:87:4a:2e:79:ed:d1:e9:c0:47:cf:58:1f:8e:e0:
04:b4:cf:14:44:c2:99:cb:41:65:1d:53:91:0f:75:07:0e:f6:
35:62:c8:36:eb:e7:61:c7:51:f2:6c:c2:a8:a4:ea:25:d1:ed:
ad:72:6c:68:91:52:77:d0:9c:84:6c:e1:e1:3b:b4:1f:db:5e:
b6:16:23:3a:f8:0f:57:6f:1b:9c:da:15:37:c4:90:48:f5:11:
bd:bf:64:e6:39:8f:82:9a:80:3e:d4:a7:7a:31:13:a7:7a:e2:
5d:75:4b:99:9e:ea:b6:74:af:ff:ce:bc:aa:af:c3:ce:0c:cc:
57:56:22:88:66:17:40:be:29:40:f1:6b:a7:6f:05:0f:7e:40:
57:65:8f:78:76:22:59:6e:56:1b:6f:95:5a:cd:1e:41:f6:36:
0f:d7:de:97:21:23:09:d4:b1:03:c6:a2:16:48:a2:bb:45:5c:
d7:cb:7d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:38:04 2025 by rpki-client