Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YP9XeTn8yt5quL-kSrX1zNTcHU0.roa
File: YP9XeTn8yt5quL-kSrX1zNTcHU0.roa (raw, json)
Hash identifier: LIw8pwwfEot3UCBGI7U7ckjFAfxPCBbKusmJgTBdwO8=
Subject key identifier: 60:FF:57:79:39:FC:CA:DE:6A:B8:BF:A4:4A:B5:F5:CC:D4:DC:1D:4D
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204A0AE3D69C1F1B5F8F2086D17FF8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YP9XeTn8yt5quL-kSrX1zNTcHU0.roa
Signing time: Wed 01 Jan 2025 13:48:48 +0000
ROA not before: Wed 01 Jan 2025 13:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213045
IP address blocks: 2a0e:8f02:2000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4a:0a:e3:d6:9c:1f:1b:5f:8f:20:86:d1:7f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ff577939fccade6ab8bfa44ab5f5ccd4dc1d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:4e:68:56:7d:3c:02:47:03:5e:85:49:f1:
04:00:56:8c:e6:f1:5e:69:4b:e1:ee:01:50:9c:f3:
f7:83:1e:d3:2e:5c:df:c5:c4:43:9e:e9:4d:33:a3:
8d:67:52:a4:7a:f4:c3:04:31:1f:67:6f:a9:0d:d0:
8c:73:5e:c6:c4:2a:ce:7c:44:08:8e:e6:b9:2e:bd:
0c:04:5b:ba:3f:dd:1a:f7:28:6c:d4:7c:80:59:64:
df:cb:39:35:7e:6b:34:ac:28:6f:f2:91:81:ca:05:
09:66:d6:17:27:aa:ab:19:50:55:18:e8:22:bf:01:
dd:ce:49:cd:bc:6b:12:2a:d4:5a:70:c2:40:86:1c:
0b:71:a2:47:fd:74:df:93:a8:e3:71:55:49:ff:dc:
57:f5:23:0b:42:8d:40:56:04:69:a1:2c:3e:d8:b0:
f3:6c:ee:57:47:9f:42:0b:f1:24:18:a8:16:75:91:
32:95:85:a7:de:33:86:48:4a:39:c9:8f:eb:de:2a:
65:47:d3:a2:39:b8:9c:c9:c1:97:b8:32:d5:6b:1a:
78:09:ad:a1:24:1a:fe:3e:cb:65:67:a7:7e:eb:68:
c7:62:d9:3b:08:3e:1c:eb:32:04:d7:8d:cc:b2:6b:
ee:f8:b7:74:0b:87:28:10:dd:36:6e:60:71:5e:d6:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:57:79:39:FC:CA:DE:6A:B8:BF:A4:4A:B5:F5:CC:D4:DC:1D:4D
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YP9XeTn8yt5quL-kSrX1zNTcHU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2000::/44
Signature Algorithm: sha256WithRSAEncryption
a7:56:62:f3:50:bc:09:f4:db:0d:3c:b7:a6:0d:b0:e9:f5:67:
6e:ba:e2:d2:85:2a:36:b0:4f:c5:ee:80:e2:a7:05:c7:8d:f7:
4e:74:a2:0a:c7:93:f2:49:97:d1:83:34:86:0c:2c:c5:da:df:
83:39:45:1f:88:95:a3:30:ae:aa:78:14:41:9d:c9:69:7f:2d:
2f:44:2d:d4:eb:1b:b1:95:87:a7:f2:24:f1:72:4c:13:2d:09:
49:d2:cc:75:45:16:75:00:93:a4:71:04:0f:cb:f9:0c:f6:83:
95:9f:b8:23:32:15:34:f6:45:a7:9b:e4:67:f0:a9:06:2c:85:
af:c1:22:b5:e8:af:76:fa:d1:1b:48:9a:75:0e:77:12:c0:60:
bf:47:38:93:0c:8b:86:8f:36:8d:da:ef:af:3d:65:82:6c:39:
f7:12:65:86:8c:13:51:88:50:7a:f0:14:21:8f:19:12:e4:03:
c6:cd:c8:d5:c8:ea:5a:c1:34:2b:d8:0b:ff:38:ad:e1:84:69:
36:55:d5:83:4a:7d:be:f6:6b:48:59:6f:03:99:2a:06:3e:c8:
df:06:e6:09:3d:74:aa:c5:18:0b:a6:d7:cc:a6:af:29:88:b4:
53:04:c9:ad:ec:7a:1b:82:d8:e2:57:6e:65:01:f5:f9:2f:99:
d1:28:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:39:16 2025 by rpki-client