Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/YrAeAFhLNx8gHxk1hOeHVbqia5o.roa
File: YrAeAFhLNx8gHxk1hOeHVbqia5o.roa (raw, json)
Hash identifier: vBC0rOWAC9ogcucd6YksOwxjVt0odH5CG/jy3mKbw1E=
Subject key identifier: 62:B0:1E:00:58:4B:37:1F:20:1F:19:35:84:E7:87:55:BA:A2:6B:9A
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 01939304DE3980FB2569E7B69355CE8848D1
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/YrAeAFhLNx8gHxk1hOeHVbqia5o.roa
Signing time: Wed 04 Dec 2024 18:53:09 +0000
ROA not before: Wed 04 Dec 2024 18:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0a:f580::/32 maxlen: 32
2a0a:f581::/32 maxlen: 32
2a0a:f583::/32 maxlen: 32
2a0a:f587::/32 maxlen: 32
2a0e:fb40::/32 maxlen: 32
2a0e:fb43::/32 maxlen: 32
2a0e:fb44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:93:04:de:39:80:fb:25:69:e7:b6:93:55:ce:88:48:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Dec 4 18:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62b01e00584b371f201f193584e78755baa26b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:c0:fc:7f:45:4f:c6:3e:bf:d0:b1:aa:70:
70:6f:6b:05:7e:69:2d:82:1a:fc:30:33:a2:1f:41:
99:61:c3:85:7f:51:d5:5d:f4:cd:c8:8f:3e:37:92:
0b:0f:d2:7e:88:12:70:3e:58:5e:14:fa:f3:d5:e1:
3d:9f:b8:75:a5:df:c7:f4:c5:c2:76:e7:50:96:b4:
28:de:8c:ba:f4:bd:b4:68:73:10:db:10:ff:b3:91:
d0:c0:c3:3b:71:4e:c3:f2:98:dd:62:8c:45:f2:f2:
0f:dc:c6:23:3b:43:7c:74:b0:73:2d:30:83:89:a0:
ff:47:78:a8:af:45:21:f7:0b:7d:96:d3:26:db:48:
7f:d4:f0:8a:d6:58:98:82:c7:39:5f:4d:81:e6:bd:
b7:c5:d3:eb:19:ef:1d:15:93:be:3f:91:02:04:12:
7d:bc:6d:b8:7f:09:67:9f:a9:a9:ae:d1:d0:f0:f7:
d1:65:41:04:79:6e:7a:96:7e:9b:62:f7:ef:6b:4c:
1b:3c:a8:e3:b8:2e:e1:9e:0f:12:68:2b:ea:62:8f:
bd:5c:94:a2:12:53:8c:e9:f5:2d:5f:9d:11:b5:3c:
18:ba:6b:93:9a:56:01:26:97:a7:73:81:58:69:58:
b3:bf:8e:c2:ca:57:30:38:12:c5:99:15:c3:07:b9:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B0:1E:00:58:4B:37:1F:20:1F:19:35:84:E7:87:55:BA:A2:6B:9A
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/YrAeAFhLNx8gHxk1hOeHVbqia5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f580::/31
2a0a:f583::/32
2a0a:f587::/32
2a0e:fb40::/32
2a0e:fb43::-2a0e:fb44:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:34:ca:31:0f:b7:67:84:09:5e:ec:02:a4:94:86:9c:1c:e8:
b8:df:53:2a:12:58:74:9c:6c:7a:9d:9f:75:4b:e4:b7:5a:1e:
33:76:22:67:3a:08:2c:34:56:2a:90:0f:aa:88:60:fd:3c:40:
33:a9:f6:53:2d:0f:6f:39:21:dd:78:45:cb:a1:fc:f9:f6:6d:
3b:3a:f5:3b:b5:b4:38:e1:dd:ab:7b:c4:a6:9c:28:e8:a1:e3:
08:6c:08:23:f4:68:85:de:1b:fc:92:b5:e6:72:ad:d3:f4:90:
b6:a0:62:52:ab:39:17:63:92:e0:78:64:6a:0c:e5:ca:cd:05:
da:34:c7:f7:10:76:87:f0:ba:d7:f8:ee:dc:5e:74:31:8a:39:
fc:f6:1a:82:19:c0:1f:e6:39:15:a6:dd:da:2c:f3:d3:26:6e:
dc:7b:f0:2c:87:5a:7f:82:a7:5e:27:9e:c2:f0:31:fa:7a:33:
71:84:ce:26:60:63:30:1f:53:c6:fe:21:55:92:20:36:d9:c9:
b4:41:31:cf:10:38:cc:b6:ae:21:9d:5d:0a:c7:2b:94:fd:94:
6f:4d:89:bf:1a:5c:1c:38:46:a0:ba:1a:c6:a2:3b:a6:8b:30:
8e:18:6e:3c:a0:8d:80:72:52:a6:49:13:f3:84:33:a0:61:38:
71:96:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:52 2025 by rpki-client