Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/y0NhIWgTEJUn3OyUdcDPuX30xHU.roa
File: y0NhIWgTEJUn3OyUdcDPuX30xHU.roa (raw, json)
Hash identifier: RhHl7+/yQQJ2O2zcuVJ2Qb8j0j9FdT6wy4ZLGMABh6o=
Subject key identifier: CB:43:61:21:68:13:10:95:27:DC:EC:94:75:C0:CF:B9:7D:F4:C4:75
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B493BF92FF17BBE6DCAC60EE99E64
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/y0NhIWgTEJUn3OyUdcDPuX30xHU.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63800
IP address blocks: 2a12:f8c2:7f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:49:3b:f9:2f:f1:7b:be:6d:ca:c6:0e:e9:9e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb4361216813109527dcec9475c0cfb97df4c475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:85:8b:08:eb:da:44:4b:69:aa:af:59:71:
26:65:3c:50:f2:ba:b6:5a:0d:3b:a8:24:ab:45:1e:
04:d0:e7:b3:d0:fa:a6:94:2c:55:ee:43:82:cb:de:
56:e2:1b:73:28:3f:fe:4f:a2:5b:d1:b5:36:eb:e6:
ce:80:e2:10:f6:64:1a:4d:ae:df:61:34:3c:fc:8c:
62:38:71:c1:66:2d:c8:bb:fe:78:0b:c6:1c:1e:40:
94:9f:d7:3f:94:de:5f:26:20:02:fd:22:e0:8f:c9:
51:85:fb:c6:e3:d5:8e:24:55:d4:2f:74:b1:f4:87:
0a:dd:9e:a3:28:e3:c2:de:51:2a:6d:7b:56:26:5f:
91:ca:b9:b1:f5:db:63:13:be:bd:68:b8:fc:2c:28:
68:63:f0:64:82:60:fe:2a:1a:54:64:68:11:39:b0:
67:79:86:65:07:44:af:4a:f5:24:e3:81:44:45:9c:
d2:7d:04:70:56:8e:87:c1:65:9e:96:cb:8f:7f:52:
61:37:08:90:07:c6:30:89:9e:b9:e9:e0:d1:25:83:
56:58:8b:1e:4c:5e:b0:46:01:33:b5:4b:45:d4:94:
f4:36:c9:3a:80:7a:15:6a:8f:66:90:78:e9:a2:bd:
1e:3c:2b:d8:a7:3c:81:5c:c7:2e:f9:85:ff:76:32:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:61:21:68:13:10:95:27:DC:EC:94:75:C0:CF:B9:7D:F4:C4:75
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/y0NhIWgTEJUn3OyUdcDPuX30xHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:7f7::/48
Signature Algorithm: sha256WithRSAEncryption
5b:1b:d3:21:ef:0d:40:2b:e8:30:42:46:e4:07:9b:a2:c8:ef:
a8:1b:03:52:4e:b5:cd:2f:b6:07:01:c4:33:cf:94:ac:ba:d8:
15:a9:73:24:bf:fc:f6:07:76:d5:3a:54:ed:1e:37:54:c5:f6:
b4:8d:14:26:f2:6c:3b:a8:29:b0:3d:b0:2e:0e:05:51:c7:ff:
83:e6:2a:b5:ad:6f:28:98:f2:54:db:07:44:ef:ad:3c:de:35:
2c:22:89:41:c0:e3:94:dd:34:f3:5b:fe:a3:2a:f7:56:da:45:
fc:75:20:19:e7:8e:10:9d:b7:3b:df:19:44:b5:c9:03:0b:7b:
c1:8b:e3:43:48:34:bc:50:6c:b5:1a:a3:05:60:b0:c5:7a:7d:
5f:a6:2c:3f:2d:f3:30:f6:05:93:1a:94:0c:86:1e:61:27:22:
b4:58:17:83:be:9c:e0:b8:5e:7c:5d:a1:1b:00:84:1e:6d:12:
b8:71:a9:ef:9b:35:18:50:a5:45:cf:41:8e:7f:c1:72:e8:84:
0b:6b:6f:b3:bb:cc:bd:a7:16:63:e9:54:00:72:76:28:5f:1b:
98:e3:43:ce:fb:04:ab:84:14:c1:b9:4f:89:b3:21:6e:e6:c8:
4b:2a:43:97:50:bd:f4:c7:ff:97:af:3b:a4:04:d7:d9:d9:55:
4e:79:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:48:23 2025 by rpki-client