Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/YSuMoFeJybFG7KjjEdrErXT8RZ4.roa
File: YSuMoFeJybFG7KjjEdrErXT8RZ4.roa (raw, json)
Hash identifier: rM8xCuh9bxbol6typcFvqGHEfyUt2GABSf2jTjvEz8M=
Subject key identifier: 61:2B:8C:A0:57:89:C9:B1:46:EC:A8:E3:11:DA:C4:AD:74:FC:45:9E
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 018571BA05DC3AFA7825304A58D7BCA9CB4C
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/YSuMoFeJybFG7KjjEdrErXT8RZ4.roa
Signing time: Mon 02 Jan 2023 09:04:54 +0000
ROA not before: Mon 02 Jan 2023 09:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a09:9f44::/30 maxlen: 30
2a09:9f40::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:05:dc:3a:fa:78:25:30:4a:58:d7:bc:a9:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 2 09:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=612b8ca05789c9b146eca8e311dac4ad74fc459e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:5d:b5:61:d7:3c:01:80:a4:31:5d:ac:c2:
5f:09:de:37:bd:86:c2:8d:ab:d5:8d:23:00:23:0c:
e4:cc:00:c9:82:85:16:b2:23:c1:a9:b4:7d:ab:66:
38:2d:34:39:32:5a:41:07:3d:d4:00:7a:dd:94:46:
8a:4e:b1:29:c7:f5:d3:ae:89:dd:7c:da:87:48:5a:
e6:a6:91:6e:38:c8:9b:fb:47:b9:94:80:e7:ee:85:
88:e3:f1:0d:1b:e4:8f:aa:f7:9a:8b:65:ae:c6:7f:
d5:3b:9d:84:b9:53:97:31:b0:bf:d6:6d:ae:ad:e0:
1a:a4:97:14:ae:21:ff:8e:5c:63:5c:db:80:0a:d2:
10:20:17:c4:cf:d9:2c:d5:21:c5:b4:3a:f4:19:f5:
ba:b6:4f:0a:ce:85:47:af:5b:35:0c:f0:b5:12:6a:
ae:d1:31:cf:4f:07:6f:cc:08:1e:a3:9b:bd:de:af:
48:a3:41:f5:5b:2f:33:f1:81:45:e9:89:59:a8:85:
90:d8:58:8f:32:23:54:4d:ff:17:ea:85:ae:24:f6:
45:89:e9:6b:8b:d3:98:5a:f1:72:51:47:da:ff:e4:
89:62:db:06:42:6e:1d:08:9e:c3:b6:e7:d7:98:a9:
7a:b2:4f:cc:7d:3a:57:78:9b:6e:8d:89:96:89:6e:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:8C:A0:57:89:C9:B1:46:EC:A8:E3:11:DA:C4:AD:74:FC:45:9E
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/YSuMoFeJybFG7KjjEdrErXT8RZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
39:40:68:c7:0a:68:e7:b9:ee:63:d9:fe:79:a3:51:8a:60:2f:
39:9e:d4:c3:f1:a2:fc:11:02:e1:86:34:0e:d9:91:86:8d:2d:
99:94:c2:c2:be:3a:46:6a:f7:17:9e:98:f3:60:1f:0e:85:30:
13:ed:57:b4:bc:4f:4a:d7:54:8c:7c:9c:86:1e:cd:eb:7f:b3:
4e:cb:29:c1:aa:3a:e1:0e:08:50:c8:5f:a9:c3:46:97:dd:71:
2a:f0:01:66:13:4f:60:16:18:44:b5:65:86:7a:c7:4e:44:f6:
5f:d3:b6:56:67:ba:43:06:0c:99:3f:93:c5:61:08:7d:88:4c:
c0:1c:7c:a2:95:94:90:c9:c3:1d:7f:9c:a3:26:a8:a3:fa:ef:
6f:09:6d:4c:12:3c:cf:09:a5:22:76:7d:18:e6:6a:a9:7d:00:
19:dd:4f:f7:55:5c:b1:74:48:c0:b7:83:3b:cd:84:72:ff:81:
e7:95:01:f7:cd:fa:eb:48:47:d1:d7:fb:29:ac:73:3c:24:12:
b0:9a:bd:a5:eb:e5:95:34:21:7d:44:65:1d:92:4b:66:ff:a1:
32:51:57:ed:d3:69:92:76:f9:f4:cc:d0:b1:51:9a:91:78:dc:
97:05:63:f3:b6:a6:e4:81:59:3a:00:45:ba:37:14:12:78:3f:
93:39:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:36 2025 by rpki-client