Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa
File: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (raw, json)
Hash identifier: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=
Subject key identifier: 91:80:4D:56:53:F8:22:47:8E:B3:46:D3:88:55:7C:C1:CE:4B:31:0B
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 019422FC367D4A2E57FBC95DBF1DA439033D
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206810
IP address blocks: 2a0c:70c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:36:7d:4a:2e:57:fb:c9:5d:bf:1d:a4:39:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91804d5653f822478eb346d388557cc1ce4b310b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:c6:79:f0:f5:3a:2e:63:12:a1:79:fd:32:
96:de:4a:78:b7:a2:8d:8a:7d:c4:8c:0e:22:e1:ea:
30:49:35:7b:87:d4:01:45:09:c2:50:2b:09:3f:ef:
07:4c:9f:7e:9c:ef:ef:3d:65:48:24:d0:9d:8c:15:
4d:82:d0:7e:f8:64:f4:e9:7a:db:84:d2:58:03:db:
ef:e6:c9:0a:0d:78:79:41:28:ec:64:61:59:29:96:
d1:50:73:9e:19:79:48:d2:fe:fc:1b:79:4c:69:29:
b7:b5:61:3b:42:3d:c5:2a:64:ec:f6:2d:23:dd:0a:
ac:b3:84:c8:3b:fc:42:e9:01:fa:1d:1b:8a:13:0d:
23:ba:8c:fd:eb:e6:33:86:f8:67:08:3e:30:1b:d9:
8b:7d:b1:cf:73:d8:cc:ba:c7:cb:ef:7c:3f:9c:15:
3e:57:d8:83:ff:7b:7c:39:28:bb:2e:ed:41:ad:72:
a1:3d:e2:df:ee:72:c0:79:ce:24:76:36:9e:fd:22:
ee:ae:c3:48:1f:8f:70:be:4c:29:2d:89:48:84:a0:
b5:8e:5f:bd:80:14:fc:49:8e:aa:c7:33:6b:65:6e:
b8:b1:6f:d6:f3:f0:65:25:f6:93:9f:79:27:0a:9c:
8e:eb:3c:4f:f7:93:86:95:b7:6f:a5:75:ef:04:c1:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:4D:56:53:F8:22:47:8E:B3:46:D3:88:55:7C:C1:CE:4B:31:0B
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:70c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2a:0b:72:53:c4:d7:db:2f:41:8f:83:d4:7c:e0:00:e6:d1:
f1:a3:67:8f:26:4c:90:f1:e6:3b:1e:36:8e:21:16:f1:03:2e:
c1:20:cd:40:04:6c:d8:cd:28:ee:b8:a0:d1:53:06:20:1d:ca:
a9:40:2e:6d:ee:18:99:1e:11:9d:e5:20:7c:df:9d:ae:7f:36:
79:15:74:97:a4:cb:5e:71:de:9f:9d:8c:12:c3:67:a4:01:ce:
6c:c0:ba:d4:0b:72:2e:11:06:a0:e3:bb:ab:4d:f1:cf:c9:99:
c7:c4:0f:7e:57:28:53:78:02:82:15:40:26:ec:8c:68:e5:89:
b4:f2:78:6a:12:7e:47:5f:75:32:03:34:b0:bf:43:f1:68:b7:
d7:7f:67:6a:24:59:bd:fe:63:01:b4:93:e8:e1:32:94:f2:e2:
59:0b:e2:69:d0:69:c2:9f:91:cf:58:9c:70:0f:37:95:2b:12:
ff:6b:8e:24:5a:7e:98:9c:12:96:98:7e:bb:9a:93:db:26:d0:
4d:4f:7d:8d:a3:84:41:2b:87:b7:59:79:5b:47:2d:b8:30:bf:
81:b3:37:17:a0:55:2c:34:1a:98:8b:97:b3:a3:bf:16:4a:c5:
44:45:ba:4b:08:65:0e:85:81:09:ee:cc:ac:0d:1f:1c:78:fe:
cb:f0:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:00 2025 by rpki-client