Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/yaeOkPk5PAc3CyptDZFnR-9_TDc.roa
File: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (raw, json)
Hash identifier: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=
Subject key identifier: C9:A7:8E:90:F9:39:3C:07:37:0B:2A:6D:0D:91:67:47:EF:7F:4C:37
Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial: 019421B1E498A01B804A2261B0828C5AC2FD
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/yaeOkPk5PAc3CyptDZFnR-9_TDc.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49852
IP address blocks: 2001:678:6ac::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e4:98:a0:1b:80:4a:22:61:b0:82:8c:5a:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a78e90f9393c07370b2a6d0d916747ef7f4c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:6f:00:f6:29:eb:6e:19:c5:b0:06:66:b6:
c5:ef:7b:92:70:a0:1f:68:e8:9d:89:4f:ea:72:e3:
6b:c1:cc:09:64:e9:7f:81:dd:41:bd:ea:42:90:84:
c5:23:e4:ad:67:94:b6:df:dd:e6:0e:04:76:23:76:
e7:2e:9e:85:22:5d:7c:7b:15:52:23:ec:f9:8d:45:
b2:39:9d:22:ec:41:1c:11:60:86:24:af:f4:73:3a:
7a:6b:8f:2e:13:2d:0c:4f:e9:09:0e:4b:21:40:ef:
15:58:94:eb:d3:6e:99:9e:1b:da:ce:aa:bf:ad:e3:
a2:ac:dc:60:74:c5:9f:42:f4:16:30:a2:d6:df:01:
2e:97:46:df:67:73:16:ad:c0:16:6f:11:67:22:01:
8b:73:c1:f3:b9:53:69:e1:32:6d:be:fb:bb:00:a3:
5a:89:0f:0b:48:33:35:f5:df:3a:78:4b:4c:2a:a5:
17:a2:a3:31:bf:57:86:36:90:dd:54:55:3d:56:8a:
c6:5a:7e:3f:d9:89:90:4a:55:20:f8:48:14:33:ad:
f3:c4:26:4a:d5:26:dd:f0:f5:42:1a:a8:df:9a:b4:
8a:b9:52:e7:2c:fd:ae:69:50:7a:84:d2:ae:5e:fc:
b9:10:7b:f4:bb:78:e6:76:0d:33:f8:80:9b:75:af:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:8E:90:F9:39:3C:07:37:0B:2A:6D:0D:91:67:47:EF:7F:4C:37
X509v3 Authority Key Identifier:
keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/yaeOkPk5PAc3CyptDZFnR-9_TDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:6ac::/48
Signature Algorithm: sha256WithRSAEncryption
01:82:68:fc:c0:15:3b:b3:04:78:c3:07:fc:f5:dd:66:bb:5c:
c1:3e:91:e6:14:68:80:1f:90:f7:fb:f2:9b:26:fa:bf:aa:27:
ad:ea:43:eb:9b:c3:3f:81:1f:72:73:7d:94:2a:6b:b3:fe:fd:
a5:52:fe:9c:fb:2b:f9:aa:b4:27:30:9d:48:aa:3e:8b:3d:92:
f5:40:67:2c:73:29:f9:b9:fe:c5:5a:26:42:6b:a4:14:f7:4e:
5f:9a:37:b4:d0:73:1a:47:20:88:69:15:bd:f0:75:af:cd:21:
37:02:92:cf:6b:43:85:4b:39:39:ab:fe:96:d6:c5:b9:8b:cf:
4b:1f:ec:c3:de:e0:97:97:7b:ea:2f:32:fc:d7:c6:21:48:9d:
ac:10:86:20:f6:40:31:01:d7:83:d3:1d:6f:65:e3:a1:77:9c:
bd:34:7e:86:73:a1:d3:bd:15:16:21:50:f4:1a:27:1d:ea:3f:
df:49:fb:fd:1c:8a:86:87:a7:b2:8b:78:a7:68:3c:3e:85:23:
2b:4f:a3:e8:13:66:3d:bf:b1:d1:cb:74:ee:fc:25:10:06:f7:
67:08:e7:ac:33:2d:d2:ed:75:bf:5e:3b:dd:4b:1c:48:88:f9:
05:a3:8b:b3:47:41:49:1d:b5:b6:5d:c9:c3:c4:47:56:0a:6c:
f7:6f:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:31 2025 by rpki-client