Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/yw6X4fanN8KY91uH96jddlevGXo.roa
File: yw6X4fanN8KY91uH96jddlevGXo.roa (raw, json)
Hash identifier: kgMdFQOHRL6TCI+SfQlFblY28F8TUhxl1fkSEaUx52Y=
Subject key identifier: CB:0E:97:E1:F6:A7:37:C2:98:F7:5B:87:F7:A8:DD:76:57:AF:19:7A
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 0194236A159DC9F96B2655A936B3B4C40737
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/yw6X4fanN8KY91uH96jddlevGXo.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 2a13:9400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:15:9d:c9:f9:6b:26:55:a9:36:b3:b4:c4:07:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb0e97e1f6a737c298f75b87f7a8dd7657af197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:e5:30:f1:30:5b:81:0a:35:a9:07:13:9c:
65:95:9a:d6:1f:b7:6e:59:dc:43:97:bd:f8:b6:99:
58:1f:d3:1e:9b:98:79:9b:e6:22:e9:6f:14:0f:9b:
c0:fe:5a:11:05:ff:47:3f:6a:91:0c:74:68:b8:f0:
40:4a:6e:f6:56:fd:0d:4a:d5:f5:c2:49:62:e3:10:
98:f1:57:19:64:86:31:23:60:fb:0c:fb:64:18:da:
98:bf:85:2f:83:74:16:41:65:e1:39:3d:52:ea:29:
9a:8a:f4:d4:a6:2c:e4:5a:01:4c:1f:e4:67:21:ec:
80:66:92:b0:39:ae:78:a3:cd:00:3e:70:5f:ce:b6:
a7:a8:28:72:49:f1:99:f2:fe:a6:6b:0b:b9:e8:5c:
71:23:19:1c:d9:28:49:08:4c:80:82:08:4c:fb:61:
2f:1e:e3:96:45:dc:7f:8b:bd:37:c2:32:dc:2a:3e:
17:22:4f:48:c9:84:2a:b6:3b:90:42:a4:27:84:ce:
e3:d0:3a:fe:7c:c0:f2:2e:09:e6:77:66:dc:93:6e:
3e:e1:a9:10:29:03:cb:5b:be:e4:bd:93:9e:e6:2b:
df:28:7d:1b:96:c7:1a:13:f4:11:5f:cc:8b:5b:ca:
75:cf:0b:d6:11:34:10:11:fa:99:84:7d:52:99:c2:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:97:E1:F6:A7:37:C2:98:F7:5B:87:F7:A8:DD:76:57:AF:19:7A
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/yw6X4fanN8KY91uH96jddlevGXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9400::/32
Signature Algorithm: sha256WithRSAEncryption
0f:2c:e9:3f:4c:13:00:ee:f9:f2:cf:06:d1:80:9c:c2:9a:8d:
88:12:dd:9f:59:81:e1:f7:eb:f3:86:5f:f2:3a:59:c9:da:35:
5d:3a:37:77:92:22:e4:e0:69:91:0d:b2:ed:73:7a:c4:30:8a:
9c:78:58:ba:e9:0b:60:7b:ab:64:a0:fa:97:a9:62:25:26:f2:
dd:aa:4b:09:61:68:90:52:2c:a6:94:e2:df:a8:0c:ee:68:f5:
6a:e2:f3:fd:37:b6:2b:bc:a4:7f:e2:d6:6b:dd:2a:43:76:48:
c9:65:08:68:e4:c7:02:93:f5:07:d8:a6:03:a0:a5:84:f3:f2:
d9:70:ba:13:12:dd:c0:f8:6e:b7:61:e4:88:c1:79:cc:73:ec:
56:df:59:fd:18:ea:cf:5d:42:fc:fa:3f:7f:57:a3:d8:79:ce:
ad:ed:fa:6e:17:44:fd:12:cc:01:8b:f2:ba:f8:80:e2:23:e9:
21:ab:a2:01:e3:35:dd:2d:90:8d:1d:4c:7b:79:28:51:0c:96:
12:b5:d9:de:b2:d7:67:4f:dd:10:43:8b:cd:95:65:5e:7d:a4:
8f:8c:1e:4d:12:68:19:dd:e5:d4:d4:f9:fc:0f:b8:9c:9d:a6:
2f:f7:81:76:f3:b4:9a:7d:32:4b:9e:e4:a7:5d:c7:7f:80:c8:
47:8c:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:30 2025 by rpki-client