Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ypXlfhctXRuh3kroz5spyxLpo_Y.roa
File: ypXlfhctXRuh3kroz5spyxLpo_Y.roa (raw, json)
Hash identifier: AwZgr7nPsHmNsbAl0i40z0/JNpb+om3Q25ogEzrSeQI=
Subject key identifier: CA:95:E5:7E:17:2D:5D:1B:A1:DE:4A:E8:CF:9B:29:CB:12:E9:A3:F6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0193C0503738C1A567C05A2B391483FB7D73
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ypXlfhctXRuh3kroz5spyxLpo_Y.roa
Signing time: Fri 13 Dec 2024 13:58:22 +0000
ROA not before: Fri 13 Dec 2024 13:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210546
IP address blocks: 2a0c:b641:540::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:50:37:38:c1:a5:67:c0:5a:2b:39:14:83:fb:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Dec 13 13:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca95e57e172d5d1ba1de4ae8cf9b29cb12e9a3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:48:18:82:73:ff:bb:f3:fc:c6:ad:c8:56:
ed:ce:a1:5c:5a:79:aa:2f:3c:7e:99:7b:36:66:ee:
8f:eb:db:07:c7:83:1f:1a:3a:05:13:18:f4:1e:0d:
6c:12:e8:da:ef:5c:43:19:76:6e:14:4f:f6:a9:21:
90:8c:d5:10:99:23:3c:c7:bb:48:d8:fd:30:d6:64:
e6:81:cf:d5:81:de:30:08:82:f0:5a:b0:0a:a7:d2:
8b:02:45:2e:e2:e2:0a:b1:31:6a:89:05:b4:95:2e:
2a:a1:71:80:df:f7:45:4a:44:dc:fd:58:96:4b:e9:
22:bc:65:32:60:1c:04:58:54:1b:d2:5b:43:5d:26:
a7:9b:94:bb:10:0f:c9:92:a5:53:77:32:54:da:5d:
c9:2f:cb:d7:e9:35:e0:09:91:9d:a0:1d:44:f8:ed:
39:d7:7c:f5:a3:76:0b:86:c7:c7:c9:3f:9e:db:f4:
bf:3c:7d:6f:8d:34:c7:4d:c0:b4:e0:d5:0b:17:88:
46:c6:72:81:d5:49:0d:bf:1b:f2:3a:d9:6c:53:43:
50:69:bd:cb:e5:50:7a:35:16:df:ec:c4:a9:0a:af:
00:03:86:03:b4:df:83:9e:2a:8a:81:a5:c9:bb:f8:
84:6c:cb:52:3b:b7:9f:38:8f:d2:1d:8b:94:fd:25:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:E5:7E:17:2D:5D:1B:A1:DE:4A:E8:CF:9B:29:CB:12:E9:A3:F6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ypXlfhctXRuh3kroz5spyxLpo_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:540::/44
Signature Algorithm: sha256WithRSAEncryption
71:70:5e:b0:43:72:34:2d:51:0e:09:80:32:b6:97:fa:01:48:
33:3b:f9:17:34:3b:2c:46:51:cf:be:07:9b:90:2b:09:a3:86:
64:f1:c4:64:9d:5b:16:26:ad:0a:c4:b0:44:c7:e4:ab:41:74:
1e:42:d0:3e:aa:22:96:bf:32:77:98:1c:b1:c1:59:74:10:29:
d2:7e:06:7f:74:4d:b4:e2:62:d9:9c:6a:5c:f8:05:f6:47:d3:
96:78:cc:d4:a7:f3:a2:32:29:82:43:54:86:0c:66:54:52:f8:
80:6b:ac:d3:87:15:9b:89:c4:d7:1a:43:9e:ce:6a:c6:f7:67:
1a:69:e7:a9:dc:0b:40:a8:fe:fc:0c:7c:05:b1:7b:a6:c9:2a:
77:02:dc:bb:be:46:0c:ec:06:5d:dd:09:73:53:37:d5:1c:16:
e5:cd:ce:b7:fb:a6:bc:40:e9:27:fe:a6:01:81:dd:35:a5:1b:
aa:fd:05:bd:7c:bb:dd:0b:b8:5f:47:47:aa:30:8a:17:58:8a:
4a:de:8d:41:af:b3:3f:f4:2a:fa:34:c3:b8:d5:3f:ff:08:1b:
c7:f2:57:f8:28:90:ad:31:50:26:74:a6:16:1c:1b:86:d0:62:
88:a6:7f:13:e3:ba:be:3c:ba:79:88:1f:98:02:44:37:28:86:
29:7d:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:46 2025 by rpki-client