Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Y5k3mN0zyW8x_zePGFK2ncy_V8M.roa
File: Y5k3mN0zyW8x_zePGFK2ncy_V8M.roa (raw, json)
Hash identifier: 2cNdJkWmKHOmWYLKgKWyJSd30pIxpBmjtz6lLjbhFn8=
Subject key identifier: 63:99:37:98:DD:33:C9:6F:31:FF:37:8F:18:52:B6:9D:CC:BF:57:C3
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D98C3B8C1B04EEAFD9ED9E451D2FF8
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Y5k3mN0zyW8x_zePGFK2ncy_V8M.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214590
IP address blocks: 2a03:5840:11d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:3b:8c:1b:04:ee:af:d9:ed:9e:45:1d:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63993798dd33c96f31ff378f1852b69dccbf57c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:a4:83:7e:86:8c:a8:a0:9d:60:f1:cc:ed:
da:ea:84:a5:8b:36:cb:5e:01:ac:4f:57:6f:12:b3:
ba:52:76:11:51:75:a2:c1:6a:86:a7:cc:e1:bc:20:
1e:fc:18:00:cf:ef:1f:66:e4:a5:26:76:68:18:f1:
3d:a0:e0:75:b7:22:a9:64:92:fb:8e:8b:d2:6a:04:
d2:ae:9d:38:8b:3b:f6:33:57:40:3a:65:8a:cc:c5:
84:7f:59:91:29:f0:d1:d1:08:9a:b7:86:60:7c:59:
dc:49:df:ca:0c:40:c5:50:28:41:1b:2b:ee:7b:72:
18:f0:ac:39:ba:07:7e:c5:d5:06:af:57:0c:a9:81:
3d:99:90:db:44:72:d5:20:3d:f9:b6:8c:16:ee:2c:
6e:3f:67:96:3b:2d:0e:64:42:c9:0a:5a:6a:c4:e7:
d6:48:b8:93:d7:92:e5:20:d1:0a:87:fc:80:c7:b2:
39:18:06:b1:59:49:81:68:9e:09:3e:b3:40:c0:8f:
e0:a8:7b:49:a6:d8:b7:18:d6:9b:0d:e0:dc:b3:77:
86:6a:ad:73:b0:f9:05:18:25:98:61:72:b0:b0:33:
a3:e9:8e:3f:0d:90:e9:05:b2:33:02:76:f8:c3:7f:
34:15:2a:89:94:7c:a7:0a:bc:2e:28:9f:54:58:b3:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:37:98:DD:33:C9:6F:31:FF:37:8F:18:52:B6:9D:CC:BF:57:C3
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/Y5k3mN0zyW8x_zePGFK2ncy_V8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:11d::/48
Signature Algorithm: sha256WithRSAEncryption
a5:47:48:7b:57:81:63:e0:8d:9c:c8:79:8e:48:86:9d:8f:7b:
27:1a:9a:ec:e8:d9:d8:f8:09:0c:d3:81:4d:1e:e9:87:60:38:
bc:44:cd:4f:56:a5:c9:97:ba:36:03:10:ba:97:8d:0b:8d:42:
9c:4a:6a:20:ea:7c:05:cc:d8:8d:64:9e:a0:42:62:7d:59:ca:
20:8d:ca:1d:c5:b0:a2:e1:64:b6:0b:c2:ff:33:52:6b:4d:a5:
e8:9e:b5:d0:53:0e:84:51:8c:a6:d1:5c:ff:a1:20:f2:bb:02:
23:7a:13:1e:68:9f:53:8c:a6:c3:c5:01:5a:25:29:1f:ba:36:
5e:25:b5:91:70:66:f5:48:d9:9d:a1:12:f5:8a:77:14:fd:a5:
5d:d6:23:34:ad:7a:99:a4:24:0a:26:27:a5:09:2c:6e:69:91:
fc:c6:c4:9a:69:3c:96:c0:a2:94:ed:05:b0:be:e0:4a:a7:96:
30:7c:1d:27:e8:b2:6c:1e:35:87:a4:38:2d:a7:1c:59:ad:cc:
de:30:eb:3b:0d:b9:74:26:d3:e3:27:6e:97:0e:11:da:bf:c1:
c7:13:1a:66:88:4d:48:99:a3:3d:1c:ec:df:4a:86:f7:fd:ee:
af:85:1d:00:9f:e4:fa:4d:24:cb:65:21:f5:6b:2a:d9:f2:a1:
7b:8f:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:41:38 2025 by rpki-client