Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YnSGCO_e0BtzzyQOiYqpONnVOQ4.roa
File: YnSGCO_e0BtzzyQOiYqpONnVOQ4.roa (raw, json)
Hash identifier: l6GZ4B9i1pP2eA+laSqLOVRjmFxbxXKPw8UnnMiUArg=
Subject key identifier: 62:74:86:08:EF:DE:D0:1B:73:CF:24:0E:89:8A:A9:38:D9:D5:39:0E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482391D1B67B919B9404BA5CFAA230
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YnSGCO_e0BtzzyQOiYqpONnVOQ4.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55286
IP address blocks: 2a0e:f201::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:23:91:d1:b6:7b:91:9b:94:04:ba:5c:fa:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62748608efded01b73cf240e898aa938d9d5390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:c1:cf:72:41:91:bf:48:e4:56:78:5d:93:
e3:c9:43:7e:49:38:f8:d8:54:60:c1:2d:b1:f0:9f:
7e:35:35:a4:58:98:21:09:b1:59:45:17:e3:7b:9c:
cb:59:b0:cc:52:d0:86:ad:0c:74:66:34:26:1b:33:
49:98:52:88:aa:5b:35:70:97:92:05:bf:4f:d6:98:
23:6b:a8:b9:38:0a:27:3c:a1:ed:ea:1c:e6:8a:7c:
52:bc:a2:bb:1a:7c:13:36:e6:fe:e2:38:03:64:aa:
33:f9:90:fb:ed:8c:fa:e3:fa:a7:78:20:09:1d:87:
cd:5a:7c:61:d4:2c:57:3f:72:94:4b:6f:75:36:d7:
82:e6:0f:25:72:01:2c:37:c8:7e:cd:b6:49:20:99:
d7:19:00:39:e2:aa:38:35:53:99:de:5f:a9:8d:1e:
17:42:c8:15:1d:29:f4:e0:ae:d3:08:a0:97:fd:cc:
17:6f:e4:2a:f9:6c:5f:61:30:98:84:aa:6f:69:87:
64:65:d0:5c:d3:5d:d4:f5:ef:3e:30:4d:67:53:4b:
b1:f6:2c:f0:b5:6f:55:3a:8c:2a:c1:f7:c8:5f:83:
bd:c7:14:60:46:f9:2d:18:10:cd:15:06:76:a5:33:
b3:34:40:1e:47:e6:43:e6:a8:a6:06:3b:5e:fe:f2:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:86:08:EF:DE:D0:1B:73:CF:24:0E:89:8A:A9:38:D9:D5:39:0E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YnSGCO_e0BtzzyQOiYqpONnVOQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f201::/32
Signature Algorithm: sha256WithRSAEncryption
cb:ad:f1:fd:b4:62:1c:1c:6c:57:9e:50:c5:b3:3c:09:66:7f:
db:0f:0b:21:a2:e5:74:78:05:84:15:f1:c0:14:9d:10:33:4a:
eb:f7:52:e6:f8:94:9e:86:40:55:c3:80:5c:8c:7d:17:8e:91:
25:40:3e:1f:ac:25:da:78:fe:48:eb:10:b9:b9:31:ae:8b:47:
2f:21:0a:7d:27:0b:b0:b4:5b:e6:8a:ec:79:50:79:7d:1e:78:
f2:c8:fb:12:88:5c:72:22:25:a1:53:71:d2:d6:1e:f0:5b:65:
cf:a1:e0:bc:9d:3a:c4:4b:5e:1f:1c:b0:ae:b8:aa:3c:40:ea:
34:3d:6f:72:e9:1a:04:cb:fc:1c:3a:18:4f:41:ea:92:32:33:
6e:54:ea:5a:61:55:be:b6:f2:4b:71:48:83:c0:a6:ba:a6:5e:
dd:30:ff:a1:6d:ea:9e:d8:7c:95:98:7d:e6:ed:21:cc:01:74:
8c:db:31:ab:52:32:27:50:80:b1:94:b8:4e:ad:2c:49:33:44:
ce:a5:32:fe:3c:3a:97:ea:dd:d8:ec:e8:8f:1c:30:41:75:6d:
5b:0d:da:d0:3b:ba:1d:54:46:f3:8e:bd:08:bc:c2:e9:46:e1:
2b:bf:b3:11:73:0e:bb:82:da:9b:ea:d0:1d:5f:ea:00:00:bf:
cf:53:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:41:52 2025 by rpki-client