Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YOJL1fQyflQkFsOTO-j0DSxgJvY.roa
File: YOJL1fQyflQkFsOTO-j0DSxgJvY.roa (raw, json)
Hash identifier: UDaNV6AjNEhV4xKszEJHA3D9vp6L2/X8ENqwLQeMgv4=
Subject key identifier: 60:E2:4B:D5:F4:32:7E:54:24:16:C3:93:3B:E8:F4:0D:2C:60:26:F6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521CDA4F63C8EE70551A0FAB70C78C0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YOJL1fQyflQkFsOTO-j0DSxgJvY.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39526
IP address blocks: 2a10:2f01:380::/42 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cd:a4:f6:3c:8e:e7:05:51:a0:fa:b7:0c:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60e24bd5f4327e542416c3933be8f40d2c6026f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:e7:f3:67:dc:3b:3e:53:9a:a3:fb:bc:0b:
5c:e3:54:ab:ef:23:9f:1b:c7:99:f2:82:0e:85:e0:
a3:5b:8f:f0:2a:da:33:7e:ae:b2:d2:37:b5:35:0b:
fb:51:df:f5:ea:0c:18:19:b7:45:cb:27:69:38:24:
e3:62:85:30:0a:58:05:14:d3:1e:13:1b:93:f3:5a:
b0:94:0d:ae:10:3c:5a:62:31:1d:73:42:6c:f5:a6:
98:08:b4:86:1b:e0:12:c5:1e:5f:5f:b1:9d:97:00:
9f:fa:cd:a1:b2:23:7d:0b:d3:28:a9:88:4c:27:d7:
01:95:86:45:aa:af:1f:8e:1c:5a:fc:61:2d:0b:eb:
f3:00:cb:61:ba:a9:bd:73:3e:9a:78:fb:5a:a2:83:
f4:ce:c2:e9:aa:79:da:a4:d0:bc:3f:a1:89:bd:dd:
20:79:3b:f4:1d:aa:72:cb:06:81:f9:70:40:33:09:
da:57:b3:3e:00:e5:63:71:03:06:59:06:0c:10:00:
79:2e:dc:a6:d5:58:1f:64:37:4a:72:81:c9:71:3d:
ee:22:c2:95:7c:71:5c:21:98:10:a4:1f:01:d8:12:
fd:cb:e3:85:b4:3f:4b:10:e8:05:f8:98:ce:51:e2:
a8:5f:f9:94:77:71:5f:34:aa:31:6d:fe:c0:17:b8:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:4B:D5:F4:32:7E:54:24:16:C3:93:3B:E8:F4:0D:2C:60:26:F6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YOJL1fQyflQkFsOTO-j0DSxgJvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:380::/42
Signature Algorithm: sha256WithRSAEncryption
19:97:89:31:76:57:5b:37:25:81:c7:27:b1:73:0b:93:a7:05:
13:b6:f9:0d:5e:8d:33:d7:ba:6e:fa:e7:5e:18:00:2f:40:2f:
e6:48:60:17:ae:13:ca:c5:f3:80:6a:7b:34:4b:e1:98:50:da:
8b:b7:2f:e7:e9:ec:b4:72:4c:71:f0:60:7d:af:4b:25:43:ff:
e9:c6:70:68:2f:0e:66:f5:7d:a0:08:32:f7:ef:d9:a9:3b:fa:
ba:a1:03:ab:4c:75:98:84:01:11:52:31:d3:8f:f2:43:a9:ee:
2c:16:28:8c:06:ab:cf:82:3d:d3:15:78:9c:87:07:3d:25:09:
ab:b5:47:f6:ff:08:bf:19:79:3a:06:8d:89:87:66:c2:1d:a2:
cf:5d:e1:c6:ef:0a:db:45:1e:c5:fd:6d:93:11:77:45:10:11:
2f:da:4c:b7:33:ea:d2:f0:9f:0c:7b:25:75:be:5d:52:ec:5e:
f8:f7:89:d2:52:e9:e6:b1:7f:26:3f:a5:fc:3c:10:b5:5e:a2:
52:c7:0f:98:f9:57:a7:cd:23:51:98:74:bd:95:02:ff:e4:67:
7a:c0:d5:20:f5:5b:32:4e:e9:d4:dc:b0:70:12:aa:32:34:d5:
ac:9c:37:46:3d:f8:38:a5:ea:37:74:eb:97:f2:27:4f:b4:ea:
fd:c2:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:01:06 2025 by rpki-client