Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/YwkCEWbwJ225LWbP8H_2Q6PLp80.roa
File: YwkCEWbwJ225LWbP8H_2Q6PLp80.roa (raw, json)
Hash identifier: 4d+E8unGkiSBWdRIACd4R3dIZQzZ+7NypB01nHV20XU=
Subject key identifier: 63:09:02:11:66:F0:27:6D:B9:2D:66:CF:F0:7F:F6:43:A3:CB:A7:CD
Certificate issuer: /CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
Certificate serial: 039D9B22
Authority key identifier: CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/YwkCEWbwJ225LWbP8H_2Q6PLp80.roa
Signing time: Sat 01 Jan 2022 15:06:24 +0000
ROA not before: Sat 01 Jan 2022 15:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205920
IP address blocks: 2a10:a500::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60660514 (0x39d9b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce789bb014cd3c8bd5f119fc04654b01c0b25217
Validity
Not Before: Jan 1 15:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6309021166f0276db92d66cff07ff643a3cba7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:11:93:c9:55:ca:5b:09:15:3d:4b:1c:74:
d0:ea:ca:88:3e:7a:7d:25:0c:50:96:f2:e6:63:a7:
14:ed:64:73:a8:eb:b6:14:80:07:bd:5a:69:4b:be:
ca:b4:dc:b5:3f:3e:f0:ea:6f:f3:8c:bd:b9:f6:04:
0a:75:2e:24:50:4e:0f:fb:dc:f9:07:54:c7:c5:6e:
19:de:b3:39:77:ef:22:83:06:9f:c0:5e:37:7c:27:
53:7e:11:88:10:90:6c:37:5b:4e:b0:8f:b3:7a:30:
95:ca:a5:bc:65:d5:8b:80:a2:f8:04:47:00:5a:83:
c4:fd:82:7a:65:f1:cd:ab:af:43:bf:f9:f6:e0:18:
80:65:cf:41:f6:61:cc:68:f1:68:ad:9f:ca:ab:38:
ef:50:57:92:51:80:d9:f0:c4:60:10:5c:93:26:f4:
8b:08:2c:c1:65:c6:83:da:c9:19:f9:b0:1f:fd:76:
e1:3f:14:21:6a:94:d3:51:7c:9b:c6:c5:4c:69:b1:
a8:e1:d1:c3:e6:ea:c4:aa:52:06:35:02:56:3c:33:
26:64:79:e8:d0:74:a5:66:2a:7b:ff:5f:d4:00:24:
a2:e6:11:36:6c:b3:75:7e:2a:b9:dd:61:3e:b3:29:
56:98:41:f6:5d:68:df:c9:ae:bb:2f:aa:a1:ed:d4:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:02:11:66:F0:27:6D:B9:2D:66:CF:F0:7F:F6:43:A3:CB:A7:CD
X509v3 Authority Key Identifier:
keyid:CE:78:9B:B0:14:CD:3C:8B:D5:F1:19:FC:04:65:4B:01:C0:B2:52:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znibsBTNPIvV8Rn8BGVLAcCyUhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/YwkCEWbwJ225LWbP8H_2Q6PLp80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ac9add-7487-46e4-87d7-66f15f9cd211/1/znibsBTNPIvV8Rn8BGVLAcCyUhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a500::/32
Signature Algorithm: sha256WithRSAEncryption
7b:0e:52:1b:1f:76:44:a4:a1:f9:70:03:12:ee:66:ed:8e:70:
5d:6b:99:2c:60:12:3a:ca:ac:bf:ae:61:56:31:71:a8:dc:8b:
e3:2e:40:15:8c:86:2c:69:4c:e0:90:95:df:5a:7b:d3:fa:ad:
5f:15:52:78:9e:1c:f8:28:c6:09:89:6c:cf:c2:92:26:aa:2b:
2f:c7:b4:08:3d:02:d5:d4:47:01:57:86:41:67:e2:19:5e:5a:
1e:2f:2e:89:5a:cd:56:9e:b1:7e:b4:60:67:42:ca:a3:ad:c9:
98:e0:83:7b:19:bf:a2:ea:e4:c7:6f:65:26:3a:23:51:e3:7d:
1c:fa:83:2b:e3:d1:f8:62:69:f1:eb:29:0b:55:df:79:92:5e:
96:97:59:ba:6f:23:40:17:79:76:bc:fa:69:9e:c4:8f:68:e7:
e1:3d:61:17:cd:af:11:25:e0:f0:a4:9c:23:5a:74:30:a0:5e:
c0:56:2a:3a:f6:ee:ce:7f:03:ac:5b:63:3d:bf:04:73:29:ce:
af:d8:20:59:ba:e1:64:ad:94:f3:4f:f1:be:c0:2e:15:3e:52:
b9:27:87:10:ad:48:74:41:06:7d:fe:bd:15:4c:46:ab:49:6c:
d2:1f:05:89:85:93:7e:bf:0b:70:07:5e:17:64:68:d0:ac:47:
0c:57:7e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:54 2025 by rpki-client