Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y9hnjGH0jHc77PUPLn3caxAUFik.roa
File: y9hnjGH0jHc77PUPLn3caxAUFik.roa (raw, json)
Hash identifier: JRkHGNyB4hFsb1LSwEtC22SFefRPVqfJEafpxyThRVs=
Subject key identifier: CB:D8:67:8C:61:F4:8C:77:3B:EC:F5:0F:2E:7D:DC:6B:10:14:16:29
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252266EF70D76B73343306172CD99CBC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y9hnjGH0jHc77PUPLn3caxAUFik.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212767
IP address blocks: 2a0e:b107:cc8::/48 maxlen: 48
2a10:2f00:14a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:66:ef:70:d7:6b:73:34:33:06:17:2c:d9:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbd8678c61f48c773becf50f2e7ddc6b10141629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:3f:1b:a7:7e:db:bc:b2:64:b9:39:1b:34:
89:f5:d1:81:23:a9:5c:66:ce:e7:4f:5f:c4:a2:68:
05:76:2d:79:16:c7:fc:21:4f:86:63:78:1d:4e:50:
4c:5c:1f:44:ee:53:5f:c9:11:19:b3:0d:60:a9:d5:
d0:39:84:32:7c:05:e1:04:0a:a1:6a:d0:1b:e7:72:
95:e8:69:53:d9:92:6e:78:21:66:fc:0b:1d:a3:54:
0b:15:7b:f8:14:86:1b:27:36:f0:59:ba:96:c7:c4:
9a:59:a1:77:76:4e:d7:de:0f:a2:c2:42:fb:34:b9:
e8:e9:79:03:0e:76:ef:2c:19:1b:6f:32:b3:7a:70:
8b:66:9b:4e:ce:57:75:cf:a5:a4:83:aa:f7:7a:9a:
c1:a7:ab:75:3e:30:4b:48:b7:07:5a:3e:6e:a3:f0:
36:00:65:60:a5:44:f3:ce:1a:bc:43:92:83:df:54:
4b:f8:c4:e9:05:8b:d9:d8:e9:2e:9f:e9:03:3c:50:
41:55:04:23:9d:5f:ad:de:50:83:f4:a7:36:3a:74:
a7:78:fa:29:2b:b8:7e:43:b8:d8:09:fc:71:6a:74:
ea:0f:d4:32:b8:46:eb:06:a1:74:ce:3e:f5:c9:72:
3b:41:5e:5c:4f:41:14:68:7d:95:d2:4c:56:2c:52:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:67:8C:61:F4:8C:77:3B:EC:F5:0F:2E:7D:DC:6B:10:14:16:29
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y9hnjGH0jHc77PUPLn3caxAUFik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:cc8::/48
2a10:2f00:14a::/48
Signature Algorithm: sha256WithRSAEncryption
08:2b:de:4f:58:51:50:d9:2d:94:78:bd:03:d1:0c:56:17:0f:
fd:e2:c1:7f:09:9e:56:84:81:8f:72:a1:8c:35:cd:f9:9a:f8:
e3:22:43:3c:86:9e:fa:6c:2e:24:25:b3:50:26:0a:6f:d0:c4:
b2:d8:68:ad:a7:36:5c:aa:bc:85:de:46:2c:78:26:a7:47:d1:
dd:97:88:bc:2b:33:15:5d:1a:99:55:ea:d6:a0:1f:0e:44:27:
e9:bb:b9:e9:e0:b4:06:03:f4:fb:88:1a:ce:ea:dd:f5:1a:80:
01:93:4c:2c:8c:9a:d8:cf:9d:76:08:46:36:3d:ad:98:2c:f1:
9e:eb:ce:81:24:11:41:7b:20:ef:27:3b:8f:1d:b2:2d:6c:9c:
e6:7f:72:08:35:1e:1a:80:f3:bf:6b:8c:89:e9:c5:1d:e1:6e:
f2:01:99:52:54:bc:6d:cd:0a:00:fa:9f:8c:42:47:1d:6b:69:
58:3f:87:68:25:78:dd:85:5d:2d:b3:65:fd:93:61:f1:80:61:
17:1c:55:c6:b4:8c:55:b1:f4:c7:e7:72:cc:7d:0e:4e:2b:4d:
05:51:10:66:d7:af:90:a4:5a:d3:20:b6:17:6f:09:5f:e4:b4:
0d:6a:6d:79:44:e9:db:f1:b4:f2:0f:e8:10:57:1d:c3:d9:bf:
2a:04:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:25 2025 by rpki-client