Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa
File: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (raw, json)
Hash identifier: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=
Subject key identifier: 63:97:37:AA:41:42:A6:FD:37:F8:80:8D:72:E0:17:74:78:12:DD:C6
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA02CD8167AE2E53027B11DDE36381
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa
Signing time: Thu 02 Jan 2025 11:50:09 +0000
ROA not before: Thu 02 Jan 2025 11:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60729
IP address blocks: 2a03:f85:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:02:cd:81:67:ae:2e:53:02:7b:11:dd:e3:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=639737aa4142a6fd37f8808d72e017747812ddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:e4:ce:c5:50:d1:99:e6:5f:56:ec:bb:e2:
9b:65:6c:67:19:5c:45:15:12:98:13:ce:67:74:2a:
a1:df:12:50:8f:ba:4f:f8:0b:43:70:89:e9:9c:b4:
eb:58:21:9a:a3:05:d7:1b:58:10:59:f4:fb:35:57:
90:80:d9:79:17:a9:3c:9b:61:6d:de:f4:49:d2:3d:
83:2a:4c:8c:48:1f:6c:29:0f:f8:89:70:da:07:4d:
87:7b:b5:f1:70:2a:c3:ef:48:05:5d:a7:9e:9b:99:
7c:68:05:cd:6c:66:b2:5d:f0:ec:f2:fb:57:ef:1d:
d0:d9:f5:05:68:fd:f3:4f:cc:25:7f:3b:19:de:41:
90:aa:d5:4a:e4:d1:0f:05:e9:72:3e:8e:e6:5b:b7:
c8:44:0b:de:15:e9:51:b2:17:6d:92:13:21:2e:42:
ad:70:33:1f:7a:17:9a:ad:5b:39:08:e6:ed:b6:ff:
a7:ba:d4:00:fb:69:0f:5c:1c:6b:de:a6:58:73:8c:
37:d0:ca:42:59:de:6e:15:64:71:68:92:f8:e0:02:
67:a7:28:1b:16:3b:11:87:28:de:9d:b0:5c:72:ed:
4e:51:13:bf:31:f2:b9:ce:30:4d:ef:02:76:8d:39:
33:62:88:07:3b:65:44:28:28:67:1e:42:56:4d:34:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:97:37:AA:41:42:A6:FD:37:F8:80:8D:72:E0:17:74:78:12:DD:C6
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:8::/48
Signature Algorithm: sha256WithRSAEncryption
3f:22:35:08:a3:d9:67:0d:4c:ed:39:45:32:cc:ca:4a:82:07:
22:c1:98:0f:f0:45:d4:20:f0:b5:45:54:e5:e0:54:db:3c:e2:
22:05:4b:82:3b:e8:fb:17:a0:4c:d7:35:fd:5e:36:07:c4:f3:
05:27:38:27:fd:6e:63:b8:ec:0e:55:74:16:57:24:b1:73:bf:
49:2e:6f:7a:51:2d:e1:cc:bb:30:06:7c:7f:90:b6:d2:bb:a7:
b8:f2:58:99:34:86:7d:66:55:70:a2:8b:20:58:4f:39:56:b9:
e5:6a:df:af:24:b6:ff:3f:1d:29:59:d2:de:c0:cf:42:ab:76:
27:ba:9d:d3:1e:f9:1d:5d:8e:28:77:5c:32:96:52:3a:84:e4:
4c:3c:56:6b:de:00:70:da:be:1a:81:8d:8c:b0:6c:e0:15:3a:
ec:bc:fe:f8:e7:1e:0a:b8:92:f5:b2:a4:96:6f:64:35:37:b1:
9a:97:ea:fe:25:c3:f0:b7:ce:df:d9:66:ea:3e:af:86:b8:10:
29:46:42:e7:17:e6:35:71:e6:6d:71:1e:47:16:38:6e:66:58:
a9:ac:1a:9d:c9:e6:0c:a9:cf:ad:e6:94:33:ae:5c:c2:47:b3:
ce:0c:02:63:4b:37:0a:7d:37:92:cb:4a:51:fb:84:09:98:7e:
49:a5:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:06 2025 by rpki-client