Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/KyVL-9XFkcZZyKMwn59WWV6XQSM.roa
File: KyVL-9XFkcZZyKMwn59WWV6XQSM.roa (raw, json)
Hash identifier: wSwMVL5H4+0ZRUN/L8wrAZgaka5LyTRI+0e0rMAq68E=
Subject key identifier: 2B:25:4B:FB:D5:C5:91:C6:59:C8:A3:30:9F:9F:56:59:5E:97:41:23
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 042C2FF5
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/KyVL-9XFkcZZyKMwn59WWV6XQSM.roa
Signing time: Tue 29 Mar 2022 15:52:02 +0000
ROA not before: Tue 29 Mar 2022 15:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210021
IP address blocks: 2a0c:9c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70004725 (0x42c2ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Mar 29 15:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b254bfbd5c591c659c8a3309f9f56595e974123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:1f:c1:b7:91:8f:9d:d9:6e:c2:17:8d:0b:
23:cd:85:5f:17:7f:21:04:8c:25:54:e0:10:04:19:
8f:41:0b:eb:d1:1d:33:86:40:d8:d1:53:3d:a0:39:
21:17:59:a1:10:64:65:28:c7:0c:24:de:8c:8f:3d:
b3:d4:66:55:f7:ad:a0:db:32:12:b4:15:e5:40:53:
ac:7e:7b:c5:08:6a:ac:f2:8f:ed:5d:23:16:c5:c9:
21:d3:38:3f:44:69:b9:79:76:32:51:df:28:b2:84:
81:ff:dd:99:b4:2a:cf:38:a5:e5:48:d2:7a:8b:6d:
a7:85:46:e3:2c:06:cd:60:f0:41:e3:18:69:51:fc:
52:ff:55:0c:6b:a5:85:9f:f9:8b:d0:db:16:8c:b0:
27:91:cf:cc:a3:e7:6e:7d:c6:67:5e:3a:07:46:65:
93:e7:40:5f:9d:6d:e2:62:d1:7b:38:2b:dc:6b:86:
ef:e7:8e:be:7e:c8:8a:da:5f:e9:09:82:ea:ff:fb:
d8:22:0c:18:ca:cc:8f:d2:13:0d:ef:e9:06:e0:b2:
1a:e4:7d:c4:9f:e8:74:56:c4:2c:19:3c:26:a5:bd:
6f:80:b6:64:1b:ce:3a:6e:49:a5:e5:53:78:f7:7b:
72:78:05:ce:92:58:c9:18:93:f5:71:c2:e5:3d:47:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:4B:FB:D5:C5:91:C6:59:C8:A3:30:9F:9F:56:59:5E:97:41:23
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/KyVL-9XFkcZZyKMwn59WWV6XQSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9c0::/48
Signature Algorithm: sha256WithRSAEncryption
57:36:c1:79:5a:93:c2:dc:b6:c7:07:b9:03:26:7d:19:10:5e:
f7:f4:23:e5:45:cb:52:61:df:91:e9:9a:de:4c:93:52:f7:60:
7e:f8:24:23:20:5e:ad:3d:a9:9e:a0:76:ed:ae:d6:90:98:21:
d1:e0:f7:dd:f8:1e:a3:ba:b0:a9:fd:12:61:1e:8c:2d:9f:a0:
c2:4e:a0:cf:93:af:28:0a:8d:5b:5f:a3:bd:85:fc:0e:3b:e3:
25:12:cb:2c:f3:f5:d3:d5:19:fd:7f:88:d4:20:32:e0:e5:95:
9a:6d:bb:b8:20:b8:4e:2d:7a:df:3e:c5:d5:5b:98:ef:a3:8a:
24:37:b6:39:5c:49:99:5c:8c:f9:45:3f:38:97:e1:84:08:d5:
98:b5:30:c9:08:17:42:4d:8a:0c:a7:09:4e:2a:e3:42:1c:83:
04:8d:2c:5f:5a:06:a7:a1:db:77:16:b9:ee:9c:d4:ae:14:d9:
26:53:4e:69:a2:8f:76:05:9d:0a:a1:74:87:39:56:1c:d9:d2:
d9:5d:77:ae:6f:c1:3f:ce:d5:ae:9a:58:b9:a3:b8:73:98:cb:
40:34:c7:e8:92:6f:7c:7e:cb:dc:42:45:71:03:3e:a0:b0:c6:
9a:d5:cb:ef:ae:85:25:57:a6:11:a7:05:3d:91:43:cc:cb:35:
90:86:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:31 2025 by rpki-client