Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YzCInTVY8NFKdHRFcgUXVnUB8hU.roa
File: YzCInTVY8NFKdHRFcgUXVnUB8hU.roa (raw, json)
Hash identifier: Hkb04hBz4DoBTmrTGEvADou9gCvDzOdZ3CNR9WiHJ4k=
Subject key identifier: 63:30:88:9D:35:58:F0:D1:4A:74:74:45:72:05:17:56:75:01:F2:15
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252224B64D37D67F69C5DF75B36B991E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YzCInTVY8NFKdHRFcgUXVnUB8hU.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207111
IP address blocks: 2a0e:b107:1900::/48 maxlen: 48
2a0e:b107:1901::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:24:b6:4d:37:d6:7f:69:c5:df:75:b3:6b:99:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6330889d3558f0d14a747445720517567501f215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:a0:a3:78:c3:cc:43:32:ce:f4:a9:d9:ba:
d9:63:cc:12:de:d4:ca:f1:eb:c7:3e:13:aa:71:99:
03:1c:a6:11:a9:4e:e0:26:27:a2:6f:9a:4e:a7:c7:
e6:9a:ed:6b:fd:ff:58:be:fc:4b:d4:30:ad:ba:93:
63:6c:f5:4a:c7:c8:36:6a:3c:94:87:b3:f0:ee:97:
3a:53:d4:ca:29:dc:92:9d:fb:ac:3f:2e:a2:eb:fc:
e1:cf:08:dc:d4:95:f6:e2:ba:60:52:84:45:9c:02:
b4:d0:25:b8:33:99:a5:3f:a4:76:21:ba:aa:ec:6c:
03:2c:0c:f6:23:35:a9:83:23:51:d8:cd:da:42:53:
c0:dc:b2:6a:fd:8e:c3:ac:ed:2e:69:b0:ca:78:df:
3b:78:4c:2f:c2:b5:73:f1:8b:22:f3:02:c5:2a:ae:
10:6b:19:42:1b:4a:ec:5c:f6:3a:86:37:58:91:ee:
76:de:10:69:6d:bd:78:c2:14:ef:13:59:a6:58:3c:
3b:e1:9d:f5:6a:e8:4a:b5:d2:83:ec:f9:df:6f:53:
e8:b5:39:2e:df:11:87:7e:f6:e0:5f:9e:29:e5:cf:
2b:50:d7:87:e2:31:ff:50:cb:81:bf:39:23:8a:e1:
e5:36:4a:fb:c3:7c:3a:bf:cf:00:2f:10:51:78:63:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:88:9D:35:58:F0:D1:4A:74:74:45:72:05:17:56:75:01:F2:15
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YzCInTVY8NFKdHRFcgUXVnUB8hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1900::/47
Signature Algorithm: sha256WithRSAEncryption
75:f8:45:c2:4d:05:37:e7:77:bd:80:f8:f7:65:bd:27:65:a3:
36:5f:d5:26:fd:24:b3:cb:3e:a9:98:66:1e:ee:3b:b7:0b:cc:
44:9c:a0:d8:83:47:6b:23:5b:83:7d:69:ad:08:f0:dd:d9:1d:
af:cb:0a:02:e5:cd:69:aa:45:bf:7b:1e:10:11:ea:a4:5c:b0:
60:a8:41:09:61:54:76:02:9d:dc:53:9e:82:fe:de:d3:34:b4:
6e:d9:2a:d3:6a:b4:3e:fb:a9:5e:4f:83:87:18:a5:1c:5f:7e:
82:93:93:e1:74:ff:25:f6:89:5a:4e:8e:3f:93:4b:29:f2:6f:
73:9b:d9:48:48:f1:82:c1:e9:0a:50:63:08:f6:4c:67:1e:b5:
21:77:bd:06:1c:7b:bd:04:24:b2:76:4b:2c:6d:cc:61:be:f6:
cc:47:45:4f:be:ac:ae:73:bf:67:00:9a:93:f8:70:63:bf:0a:
30:53:a3:0f:98:ce:f5:6d:94:1b:0f:d1:06:51:22:0e:c4:ce:
d9:86:91:31:9d:ab:5e:69:84:ec:da:69:5e:18:7b:07:88:a8:
f0:f6:9a:83:33:0c:81:78:28:ec:09:47:d9:8d:a0:78:c2:0a:
fe:77:16:3f:d7:f6:36:3b:2c:57:b3:a8:b5:0d:b2:68:da:3a:
b2:7f:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:03 2025 by rpki-client