Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/YWatj6dDYX-fiuw6ePziaU4C0TQ.roa
File: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (raw, json)
Hash identifier: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=
Subject key identifier: 61:66:AD:8F:A7:43:61:7F:9F:8A:EC:3A:78:FC:E2:69:4E:02:D1:34
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B650C929044A2A259D28682C4E142E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/YWatj6dDYX-fiuw6ePziaU4C0TQ.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397515
IP address blocks: 2a01:488:bb06::/48 maxlen: 48
2a01:488:bb07::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:50:c9:29:04:4a:2a:25:9d:28:68:2c:4e:14:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6166ad8fa743617f9f8aec3a78fce2694e02d134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:69:d0:85:36:ed:1a:b1:a8:95:9d:fd:96:38:
d6:c8:e8:71:26:da:dc:de:e7:a3:e1:67:7e:a3:d2:
88:46:b8:ad:de:5d:b2:cc:db:36:b1:10:c4:cb:cb:
a9:42:a9:b6:21:ac:76:28:5a:9c:28:02:cf:21:24:
f3:88:13:a3:ed:8d:1a:c0:0c:9d:30:9a:a6:3e:d7:
d4:ee:1c:77:66:17:4e:9b:b7:3a:4c:10:3c:c0:a8:
63:8b:02:99:a0:99:6f:e0:58:01:2e:66:2b:5c:9b:
58:55:ed:46:53:fd:ff:10:e3:3f:cc:e1:ab:50:82:
b5:80:e6:9d:38:9e:fc:e4:f3:46:1b:a4:74:36:29:
ed:f5:d7:2b:78:d9:cb:45:e8:87:93:8c:a7:f2:74:
9d:52:50:63:c5:f7:d9:eb:bb:c2:2a:3c:a6:3b:d6:
4c:7d:48:16:de:85:b0:1c:38:86:60:5f:b8:61:64:
02:31:26:10:36:dc:5d:56:3c:0d:67:96:73:5f:ce:
f9:9b:78:37:ae:39:ec:cd:3b:40:88:6f:30:53:e7:
a2:08:53:04:4f:b1:ef:53:6a:97:44:b5:f1:5f:1f:
8d:9a:87:ee:23:d6:e2:13:99:e9:23:e8:77:8f:e7:
fc:98:2b:39:a9:7d:11:a8:89:cd:f5:9c:b9:ce:d6:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:AD:8F:A7:43:61:7F:9F:8A:EC:3A:78:FC:E2:69:4E:02:D1:34
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/YWatj6dDYX-fiuw6ePziaU4C0TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb06::/47
Signature Algorithm: sha256WithRSAEncryption
5b:81:7d:f2:c7:fe:9c:98:28:b2:a2:84:b0:a7:23:e3:fc:46:
b4:41:33:93:5b:79:5b:07:5b:c8:1b:34:c1:fc:73:9f:ea:35:
1a:14:5e:bb:e1:1d:e2:db:60:7c:8c:ef:20:c9:60:0e:48:38:
58:95:91:36:f3:b3:ae:30:02:0c:aa:d9:09:9c:57:d1:35:11:
7e:6c:11:2e:11:6e:e6:13:d7:6b:19:b6:f1:fa:22:d6:29:3a:
e9:4b:53:df:23:5a:80:af:b2:ee:2f:af:fc:d8:7a:cb:f9:d3:
a1:ae:6d:c5:67:78:f6:3a:95:07:36:d6:a1:1a:4f:1b:52:ab:
25:29:2e:b2:96:a6:e7:b3:58:b9:0d:1a:bb:e2:9d:74:58:82:
66:93:bc:45:0f:65:b2:20:28:ca:32:60:e9:83:b5:05:0a:47:
4a:23:fd:4a:eb:36:d6:9b:57:c2:13:cb:79:3b:be:b6:28:e0:
64:c0:07:a1:af:0a:55:87:5d:e0:84:e1:2c:66:0b:c1:b0:ba:
ae:7d:16:1a:df:ae:ac:b0:41:fe:20:77:ea:2f:4c:d0:a5:79:
92:fb:fe:fe:33:18:36:90:9e:8e:01:da:74:43:7e:71:66:3d:
14:83:0e:ec:ec:64:82:f6:ed:e5:f9:08:e0:cc:4d:af:90:c5:
6b:ed:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:37 2025 by rpki-client