Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YV4yMswmB24lfNhR0J58TxKxUuc.roa
File: YV4yMswmB24lfNhR0J58TxKxUuc.roa (raw, json)
Hash identifier: OtObMbLV4jQuboLw26FahV/WYUwKBWYviCPQRKZEpjg=
Subject key identifier: 61:5E:32:32:CC:26:07:6E:25:7C:D8:51:D0:9E:7C:4F:12:B1:52:E7
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA89D69BC9F2AF4D62F5A4A56003F8
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YV4yMswmB24lfNhR0J58TxKxUuc.roa
Signing time: Wed 01 Jan 2025 03:48:20 +0000
ROA not before: Wed 01 Jan 2025 03:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206499
IP address blocks: 2a0c:b642::/36 maxlen: 48
2a0c:b642:a00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:89:d6:9b:c9:f2:af:4d:62:f5:a4:a5:60:03:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=615e3232cc26076e257cd851d09e7c4f12b152e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:bd:05:f5:2b:bd:88:58:7a:8b:c1:27:a4:
e5:93:7d:40:4f:80:fe:e0:fd:23:48:61:75:03:d4:
f1:05:9f:a6:cc:78:c6:6d:32:4d:d6:df:f7:26:87:
ad:cf:a8:bf:96:ed:8a:50:80:ff:fa:50:9f:a9:5a:
5f:4f:08:4b:2f:21:3c:00:ed:9f:1e:22:78:6d:5e:
e3:de:9d:a6:1e:cd:9e:b1:91:88:8b:ac:0d:3a:a9:
db:be:de:84:09:f4:9d:1b:08:11:0d:4f:65:f0:33:
21:4f:df:2b:4d:9a:13:d1:19:b1:57:50:35:e2:57:
cb:e2:f0:85:51:b0:8a:45:19:0c:0d:08:c7:51:20:
fc:c4:58:ff:9d:e6:0f:79:39:e8:7a:7d:54:f2:82:
58:34:e7:87:55:04:3e:d2:e9:71:e0:4c:c0:64:00:
cc:98:a1:f5:74:fd:20:2c:d9:ac:b8:d3:b2:53:87:
ff:bd:db:96:4a:0e:65:23:98:aa:9d:63:f6:68:8c:
14:93:a3:29:1e:2c:e9:84:58:94:a7:32:40:63:75:
bd:23:a4:a5:82:31:b1:64:02:5c:04:66:2d:47:79:
af:14:7a:e6:e1:a4:a6:a1:dc:0f:12:f7:70:e4:91:
85:28:1f:ee:c7:cd:99:24:e2:a0:13:01:12:61:72:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:32:32:CC:26:07:6E:25:7C:D8:51:D0:9E:7C:4F:12:B1:52:E7
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/YV4yMswmB24lfNhR0J58TxKxUuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642::/36
Signature Algorithm: sha256WithRSAEncryption
23:9d:f3:cc:56:e5:84:09:05:da:b3:a4:65:9a:94:10:76:41:
16:de:39:ae:0a:64:4c:47:0e:a3:bd:54:b5:43:a4:44:96:47:
68:e6:b4:53:6c:ca:c6:4c:54:be:31:6e:2b:74:6f:d0:aa:f4:
8e:e2:19:01:0e:48:c0:71:bf:d8:c5:29:e7:ed:96:03:2f:ed:
bc:20:60:70:12:76:16:79:82:34:8e:ee:ed:5d:1b:32:c3:f0:
26:d2:9f:1f:c9:df:d2:37:2d:1a:30:22:a6:c4:c1:92:7e:03:
40:76:58:fe:f6:da:e8:41:9f:86:03:72:42:a4:53:14:fa:c3:
43:aa:23:62:0d:46:b2:eb:cf:e3:f4:a8:f1:8b:fa:ed:23:bd:
41:36:8b:68:4b:a8:67:5c:82:96:9f:5a:56:62:7a:b1:d3:b5:
25:ae:ab:cd:40:ae:f9:c2:35:d0:80:5d:e2:75:c3:1d:c8:d0:
6a:da:d2:95:65:ca:d0:b8:8b:21:33:f9:4e:e2:64:ca:6a:bf:
e6:b6:2b:86:90:8a:86:63:4d:36:b2:4d:a5:17:9d:21:31:3d:
82:a1:72:3a:4b:74:93:99:57:aa:53:8a:d6:31:7a:9f:64:ae:
9c:f9:c1:ff:0d:da:fa:ac:79:b9:03:ca:c4:15:48:a6:b7:cf:
2d:db:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:11:44 2025 by rpki-client