Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/y4UTVrbv13sP5rGkuwiRwwFMthg.roa
File: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (raw, json)
Hash identifier: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=
Subject key identifier: CB:85:13:56:B6:EF:D7:7B:0F:E6:B1:A4:BB:08:91:C3:01:4C:B6:18
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194266C2B35F462B522AE509C280A1B0C76
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/y4UTVrbv13sP5rGkuwiRwwFMthg.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209419
IP address blocks: 2a0d:2d41::/32 maxlen: 48
2a0e:c6c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2b:35:f4:62:b5:22:ae:50:9c:28:0a:1b:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb851356b6efd77b0fe6b1a4bb0891c3014cb618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:3d:9f:48:43:d4:d2:90:93:f2:a6:fc:0f:
30:72:e1:26:ed:39:27:83:5d:ee:47:24:36:5d:e5:
62:f1:9e:27:7a:0f:8e:3e:d9:2c:9a:3b:c1:5f:9d:
b9:7a:df:e4:fa:32:73:17:11:04:54:91:fa:78:09:
fd:48:f7:47:e2:a8:4e:e5:99:44:76:38:da:de:17:
58:60:69:20:42:35:7b:d9:c6:67:92:04:c8:89:8e:
1d:74:7b:c9:9a:3d:fc:e4:60:e4:70:57:05:d3:08:
2d:27:9e:ba:aa:4f:31:d0:d4:ef:da:8e:3c:ce:a2:
78:86:63:7e:54:98:37:e5:14:cd:4e:fd:2a:27:88:
36:66:a0:f4:a8:41:29:59:2c:3a:ae:84:6a:95:2e:
a8:dd:42:4e:8c:96:dc:34:e1:41:04:dd:d9:88:dc:
fc:ba:3e:3d:cf:8b:e0:01:d0:3a:dc:da:81:62:1d:
43:71:c5:62:6b:7d:34:f9:9c:ee:82:8f:8a:7d:2e:
29:a7:99:8f:82:be:6e:24:21:17:d0:89:f6:b6:db:
4b:a0:76:e3:e0:39:d3:8d:c4:5a:74:ac:86:33:5a:
cb:4b:fc:55:44:4c:cf:69:1b:ce:05:28:6a:62:73:
2b:60:5d:d3:3e:93:1a:31:34:bc:0f:e7:d7:7e:c2:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:13:56:B6:EF:D7:7B:0F:E6:B1:A4:BB:08:91:C3:01:4C:B6:18
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/y4UTVrbv13sP5rGkuwiRwwFMthg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2d41::/32
2a0e:c6c1::/32
Signature Algorithm: sha256WithRSAEncryption
ad:1c:16:45:cb:53:0a:44:75:9e:be:e8:1e:ce:f4:5d:d9:0e:
98:db:3f:ec:39:3e:cc:d7:d9:b6:1d:e4:ca:a5:83:11:4d:0e:
fa:6c:8e:7c:f2:8c:21:32:90:89:0a:4b:2e:89:ba:d0:c3:86:
0f:09:35:4f:f8:bd:ba:e5:ae:2b:91:f5:da:e2:5f:89:15:c9:
6b:5c:57:5d:64:66:af:6f:08:6c:1e:2b:bd:0c:ea:9d:f4:67:
c4:48:19:ac:98:21:cf:c4:5c:77:87:20:d5:dd:18:27:7d:d2:
f3:0f:2c:43:a9:af:30:e4:b4:3e:57:b5:b7:fa:03:64:32:76:
7f:29:5b:0b:00:ff:c6:39:16:1d:f9:a1:c9:6a:bc:9d:2e:1f:
6f:62:81:41:e6:5b:08:6f:b3:c2:75:96:0b:c8:e6:66:c8:50:
ee:ff:25:f5:d2:0e:60:93:10:8e:27:02:8f:aa:ca:bf:a6:35:
da:7f:fa:65:12:c0:7f:ad:f9:4a:07:aa:7c:87:16:fc:6e:8b:
8c:78:7c:53:58:78:c3:58:d0:ba:ff:43:d0:92:4c:48:f0:63:
9e:59:fa:9c:91:83:a2:0f:13:61:02:81:db:81:4d:d5:29:50:
d4:e0:49:ff:1f:84:e5:88:d2:a6:86:0f:42:ae:2c:29:4a:d8:
94:70:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:00 2025 by rpki-client