Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/YK_aUPQtgAjjUBJq7WhDbslbCWM.roa
File: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (raw, json)
Hash identifier: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=
Subject key identifier: 60:AF:DA:50:F4:2D:80:08:E3:50:12:6A:ED:68:43:6E:C9:5B:09:63
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 0194258F66770C63CC3818CF844ADE3EEAF1
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/YK_aUPQtgAjjUBJq7WhDbslbCWM.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216394
IP address blocks: 2a01:f905::/32 maxlen: 32
2a01:f905:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:66:77:0c:63:cc:38:18:cf:84:4a:de:3e:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60afda50f42d8008e350126aed68436ec95b0963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:84:cd:f9:75:2a:6e:59:d0:69:47:6b:05:
17:5f:b5:1a:a6:c5:b3:9f:54:23:c9:00:c6:f3:41:
73:ac:07:47:fb:8b:4f:c5:a1:23:38:51:0d:29:0b:
90:d9:06:da:b9:5f:1f:96:af:7c:69:31:d8:33:8d:
39:4e:c7:b3:9b:77:52:32:f1:fe:9a:72:48:36:13:
c9:be:5c:02:93:9b:00:6e:75:f8:05:e4:cd:56:3b:
b7:6e:4a:d0:39:99:81:ab:27:cf:d0:5b:7c:b6:e8:
09:e4:15:5a:2e:bf:c5:8f:5f:be:46:11:df:40:df:
20:9c:e2:5e:34:70:15:0a:e4:30:3d:17:6a:28:1b:
e2:81:26:91:b7:95:a3:21:ba:1e:57:0e:12:12:64:
3c:22:7b:cb:70:77:d2:ff:ca:ce:25:d2:95:0b:2d:
e9:fc:5d:a3:77:1e:df:de:68:91:8c:79:01:b4:62:
28:83:01:3a:bc:e3:f0:ea:8a:92:5a:80:ec:6a:cb:
73:91:f8:61:ec:95:04:5a:68:67:bb:ae:31:fc:b1:
85:09:1b:ae:fe:18:37:65:a3:21:dc:78:e4:2f:55:
83:fd:9c:5d:1f:39:42:b6:aa:1e:3c:9e:54:0f:57:
04:61:d7:e7:2f:a9:6c:0b:68:2e:90:c9:1b:f8:f4:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AF:DA:50:F4:2D:80:08:E3:50:12:6A:ED:68:43:6E:C9:5B:09:63
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/YK_aUPQtgAjjUBJq7WhDbslbCWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f905::/32
Signature Algorithm: sha256WithRSAEncryption
57:38:9e:c1:de:ce:b9:d1:d3:aa:18:43:ee:36:52:6d:2b:58:
67:17:a1:e6:f4:56:dd:b5:b8:f5:d7:0e:f9:e2:0c:12:ad:b2:
16:85:f1:28:1a:94:aa:a8:23:da:f6:58:e4:ac:61:a1:05:6e:
fb:87:68:ce:be:dc:df:89:31:ac:17:3b:c4:a6:c8:fc:96:b4:
78:33:e4:17:a3:8e:9e:4c:d4:eb:15:89:ea:94:1f:9b:25:ee:
33:f3:5e:70:7b:cb:f7:ad:fd:73:f0:43:b2:10:a9:ef:d6:5a:
07:64:1c:ad:32:f3:a2:4f:33:a6:b9:ea:bf:bf:c0:8f:94:05:
09:67:51:54:b5:dc:d0:09:8c:8b:57:ac:36:24:3f:05:50:31:
43:7b:fe:7a:ca:36:a2:e0:6b:a9:06:e6:6b:58:bb:88:c8:78:
8b:29:f4:b1:ec:de:ed:64:10:a5:fc:e7:16:7f:71:a9:3d:12:
e0:90:8a:18:8e:23:81:3f:8f:27:34:0f:75:75:2b:c2:9a:25:
44:86:8c:19:5e:0d:90:2e:c8:c3:9b:07:23:4f:92:6c:34:31:
0c:cd:42:3f:14:fd:cb:0b:90:d5:57:22:d5:b1:30:88:0c:b6:
ec:80:9f:a4:4f:1f:96:d6:21:92:15:e4:f8:64:36:74:37:83:
c0:d6:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:53 2025 by rpki-client