Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YAV_-vr08j84Mkb9u-OwgEWYmak.roa
File: YAV_-vr08j84Mkb9u-OwgEWYmak.roa (raw, json)
Hash identifier: 8wBrGNdbps+EVt1m06vfILRLzObSyKfm3BiKClXT2og=
Subject key identifier: 60:05:7F:FA:FA:F4:F2:3F:38:32:46:FD:BB:E3:B0:80:45:98:99:A9
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FC02DC7CB8E0EA4A19881BD3EC3874
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YAV_-vr08j84Mkb9u-OwgEWYmak.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:02:dc:7c:b8:e0:ea:4a:19:88:1b:d3:ec:38:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60057ffafaf4f23f383246fdbbe3b080459899a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:19:f9:8d:56:d9:36:ac:75:55:11:3f:49:39:
60:58:7b:95:6f:93:ea:a8:52:3c:e7:1a:68:f1:59:
15:c5:2c:a3:7a:b1:2a:4a:fc:c8:cb:28:43:ee:27:
97:9b:9e:68:c2:8e:04:d2:ad:b6:f1:e1:8e:45:77:
01:7c:15:a2:cb:62:86:88:51:b5:ac:f2:63:a0:25:
8f:95:e8:be:cb:5f:54:13:25:22:e3:c0:0d:59:0e:
81:a5:8a:a9:76:7f:8c:38:19:66:85:ba:61:7b:df:
e1:84:80:b6:63:46:0a:de:fe:a9:49:36:a3:73:92:
db:ce:c2:32:a6:68:a7:9f:cf:a5:5f:87:bc:14:fe:
c4:fd:2d:ac:d4:9d:66:fb:44:a4:7e:07:e4:78:58:
0f:93:4c:e7:8a:69:e7:a9:27:c9:3d:0a:20:ef:43:
e2:d6:d6:86:12:f2:c0:07:1f:ad:8b:a0:80:ec:69:
ec:85:42:10:2e:4b:f5:8e:ba:03:ed:4a:f0:c8:d5:
85:7c:ae:27:4b:c4:e6:4d:aa:17:be:63:b1:27:32:
5a:53:17:2a:ff:6b:92:7e:cd:36:af:94:9c:52:ac:
ab:57:8f:ff:b2:ee:70:90:98:6e:79:d5:74:ff:3c:
37:13:a6:18:ca:be:c1:38:20:bc:38:67:4a:2b:4c:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:05:7F:FA:FA:F4:F2:3F:38:32:46:FD:BB:E3:B0:80:45:98:99:A9
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YAV_-vr08j84Mkb9u-OwgEWYmak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a90::/48
Signature Algorithm: sha256WithRSAEncryption
af:72:8d:1a:22:7c:e1:f0:19:b4:c8:a4:34:8c:04:6d:23:07:
3f:48:e7:65:d0:1d:76:51:35:93:38:53:8c:8a:3b:59:27:06:
d7:76:f8:c8:2f:d7:09:1d:ca:33:b7:c4:8c:70:46:cc:58:56:
64:fd:57:d8:7c:3a:fc:33:f9:a2:8a:ef:9a:8c:1b:04:32:1e:
c4:fa:e8:e5:c6:f4:69:3e:4b:2b:b8:b8:65:9c:62:e0:ee:70:
9c:81:fa:c8:06:36:91:64:de:91:72:8a:79:c5:fd:0a:4a:d2:
6b:e5:b7:8a:a0:cb:8c:be:d8:db:a5:f8:29:0c:41:a2:3f:c3:
19:e6:24:66:e2:6e:c7:02:ab:1f:e0:ab:a3:67:e6:29:aa:20:
7f:0b:48:e7:68:9f:74:9d:e1:93:98:25:41:30:8b:48:92:ef:
0e:f4:b7:d5:36:6d:80:b2:d0:aa:fd:9e:24:2e:73:e9:72:84:
4d:2c:0f:07:94:7d:14:56:18:eb:ae:7b:38:09:6b:82:97:84:
3d:4d:6d:1d:9e:e0:ce:e2:94:a8:93:e0:b9:c9:8b:6f:d9:16:
da:ad:57:af:0d:ce:c9:f2:f5:40:ce:81:6e:94:6b:d1:08:4f:
e2:82:47:1d:46:4d:46:22:75:21:9d:26:ef:40:0d:aa:9a:10:
82:83:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:23 2025 by rpki-client