Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YOBRATXxk13M0WUprdvuC-pLMcw.roa
File: YOBRATXxk13M0WUprdvuC-pLMcw.roa (raw, json)
Hash identifier: DjJ1i7dBp/l2UiRKgQc4niW4+ZGHlgF3KWYCTpgKF8E=
Subject key identifier: 60:E0:51:01:35:F1:93:5D:CC:D1:65:29:AD:DB:EE:0B:EA:4B:31:CC
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01951816CE7DC789AC0CC3E4A1C80765D6C0
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YOBRATXxk13M0WUprdvuC-pLMcw.roa
Signing time: Tue 18 Feb 2025 08:05:02 +0000
ROA not before: Tue 18 Feb 2025 08:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:1816:12cf/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:16:ce:7d:c7:89:ac:0c:c3:e4:a1:c8:07:65:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Feb 18 08:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60e0510135f1935dccd16529addbee0bea4b31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:cd:39:25:c2:6d:50:e5:92:2c:81:2e:fe:
44:53:f3:4c:91:82:52:66:7d:d7:70:23:aa:7b:ae:
f1:98:3d:ea:a3:08:81:52:05:cd:80:7e:b8:5c:65:
c2:30:e6:c6:c9:56:b7:d7:f4:05:75:89:38:a9:df:
53:2b:d5:11:21:8e:2a:3d:2b:be:ab:56:d8:1f:8d:
0b:ef:8f:ff:02:b8:8f:97:2d:68:b4:bf:92:9c:f7:
44:32:e3:8d:73:ab:e2:1c:13:16:c4:55:31:0a:dc:
0d:62:c0:8c:8e:ca:18:1d:1b:93:5c:9f:0b:cc:a9:
c3:cf:5f:67:ca:21:0d:98:b9:d0:4d:ac:6d:c4:08:
2b:2b:89:ff:16:33:d3:31:64:4b:d4:b3:d9:81:66:
1e:b6:92:30:37:d9:e6:74:dd:1e:06:fa:ea:45:4d:
72:68:83:3a:8a:6e:f9:3e:11:45:e0:be:37:90:7f:
fb:36:66:23:0a:f9:06:f0:61:f4:35:66:ec:c9:83:
b5:d5:d4:3c:53:dc:ba:32:a4:58:cc:e7:b5:86:10:
ab:4d:12:05:e0:fd:37:db:72:f4:6f:3d:39:60:19:
88:84:a3:6b:a0:fd:aa:b7:dd:58:a3:3f:89:86:cb:
b2:b0:18:ed:dd:71:64:45:8e:4d:38:b5:18:19:80:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:51:01:35:F1:93:5D:CC:D1:65:29:AD:DB:EE:0B:EA:4B:31:CC
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YOBRATXxk13M0WUprdvuC-pLMcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:1816:12cf/128
Signature Algorithm: sha256WithRSAEncryption
30:08:c0:e9:13:3c:5c:f0:01:76:6f:f1:e2:c9:c6:18:49:a1:
9b:70:a7:8e:64:b2:4e:3f:5f:8d:67:76:aa:fc:09:03:f6:38:
c5:64:e3:4b:2a:16:d9:9c:25:c0:ac:87:49:8f:d1:4c:a2:8a:
69:28:06:3e:a4:36:05:de:96:26:f1:eb:3a:54:88:36:9c:82:
f4:ea:b1:64:03:be:ba:cc:31:66:74:34:28:8c:61:af:31:02:
5c:ee:5e:89:cd:e4:8e:9c:d7:2d:38:31:4e:b7:ad:45:62:ba:
d1:fd:ed:86:c9:35:cd:3a:a8:30:6c:ab:c4:e8:e5:4a:fd:fb:
e6:da:ee:25:f3:18:67:b6:c2:83:a8:8b:68:c2:aa:94:b1:41:
98:07:a2:6c:9d:53:a5:0a:25:74:3a:6a:6e:fe:85:f2:09:af:
f6:0d:5e:9e:c8:69:73:f0:8e:36:92:4b:51:ac:ee:d5:9b:66:
b5:12:43:bd:40:6b:13:de:30:bd:28:35:56:f0:89:02:e0:ba:
5a:f3:d0:cf:0b:88:40:23:98:76:89:65:3c:66:cc:c2:0e:59:
d8:ce:0a:0d:2c:39:ef:c2:af:48:a5:ec:14:1f:ec:ef:70:3c:
c7:d7:8c:01:05:9e:6c:30:aa:cc:92:45:66:9e:34:37:de:fe:
c5:fb:47:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:39 2025 by rpki-client