Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/YyBxeqrqZnbMVWvNPGuJEhSJ6tc.roa
File: YyBxeqrqZnbMVWvNPGuJEhSJ6tc.roa (raw, json)
Hash identifier: +a+wpfnGbFw1MMOx7iCPa6kL+tOt/k8ymgsbVMZjRJg=
Subject key identifier: 63:20:71:7A:AA:EA:66:76:CC:55:6B:CD:3C:6B:89:12:14:89:EA:D7
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB78819CE9C2C6EBCF1D6410DB9EC9
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/YyBxeqrqZnbMVWvNPGuJEhSJ6tc.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 2a0d:3c46::/32 maxlen: 32
2a0f:3101::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:78:81:9c:e9:c2:c6:eb:cf:1d:64:10:db:9e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6320717aaaea6676cc556bcd3c6b89121489ead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:e2:4d:c7:12:ae:a4:d7:4a:8d:b5:7a:a7:
ca:f8:dd:30:65:29:cf:32:ec:b4:74:4c:cd:76:e9:
1a:79:f7:dc:ce:ff:d7:96:6c:17:ee:2d:72:c3:08:
e7:21:e7:95:fb:2d:9b:1a:38:2c:a9:c1:87:f7:77:
4a:aa:ad:83:75:a7:17:1b:0b:4b:2d:a4:b6:ec:8e:
5a:84:56:aa:62:4e:99:81:d4:08:94:cc:7e:e4:f5:
70:b5:5c:12:bb:89:df:c8:83:82:e9:1a:53:85:ef:
e9:61:d2:ba:fb:9a:64:08:b8:83:7f:ad:b5:3b:21:
9a:bf:3b:a4:87:1d:25:b7:bf:da:3b:8a:d8:ba:4a:
60:55:5e:35:b3:d7:05:4a:6b:16:fc:07:e6:dd:38:
2d:36:3c:ee:3b:57:08:2d:5b:15:00:fc:59:8f:6f:
ca:6b:f0:b9:5c:45:0b:85:58:fe:c2:49:f8:be:43:
43:56:f1:ba:06:63:01:c2:8d:23:c6:be:e1:aa:f0:
f8:64:36:4d:7a:4c:84:b0:2d:08:59:2b:1b:64:01:
2b:6b:86:4b:3d:d8:f1:4f:3f:9f:a5:8d:9a:16:53:
59:d3:af:2c:79:a4:14:bf:af:6b:bf:b9:75:bc:60:
5b:15:8f:b3:cf:52:2f:92:1f:c4:b7:f1:35:92:e6:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:20:71:7A:AA:EA:66:76:CC:55:6B:CD:3C:6B:89:12:14:89:EA:D7
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/YyBxeqrqZnbMVWvNPGuJEhSJ6tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3c46::/32
2a0f:3101::/32
Signature Algorithm: sha256WithRSAEncryption
0a:9b:ce:8b:10:43:01:63:5c:1a:26:93:5a:b3:dd:b2:80:31:
50:4c:c0:74:9f:d0:13:ad:a2:4e:1e:c4:48:27:28:99:ff:56:
f8:a0:35:26:c5:1c:f6:9e:a7:54:7e:d3:47:87:3c:eb:26:77:
16:32:93:f1:aa:67:55:db:d4:6e:f8:d4:c0:08:bd:8d:6f:25:
15:88:68:4c:af:e4:99:fb:41:49:30:68:47:7b:64:ac:ca:84:
38:a5:f7:57:e9:86:2a:c5:78:38:77:4a:89:00:e0:64:92:30:
17:13:a2:77:25:43:44:98:91:3a:76:af:90:07:7a:46:06:ba:
16:bf:22:00:ee:a6:3b:50:0b:3a:14:a9:ea:8f:51:e1:38:b8:
ce:e2:0c:cf:33:8b:7c:cf:6f:9f:6c:72:7a:b5:c3:a1:ef:ec:
2d:40:41:7f:3b:91:ac:a7:46:16:77:f0:9e:8d:f5:9a:38:ca:
c4:7e:af:a9:89:a0:8c:e7:15:57:08:66:9b:ce:9e:93:2b:e2:
3d:91:22:cc:c7:a0:4c:5e:ad:50:a6:c5:fe:14:6b:84:58:86:
59:c0:30:fe:79:1f:91:b3:19:35:8e:75:7f:cf:39:c8:0c:0e:
55:a4:6b:c7:1a:26:90:5f:e4:61:40:19:70:76:a7:a1:24:21:
f7:d9:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:27:04 2025 by rpki-client