Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YfnuyD2aZgL09IGoh6nw_IRvPo8.roa
File: YfnuyD2aZgL09IGoh6nw_IRvPo8.roa (raw, json)
Hash identifier: ZUZ/WFNKbLAN2JNOsC3ySXw97W5qpoCrRQBvaju2nwA=
Subject key identifier: 61:F9:EE:C8:3D:9A:66:02:F4:F4:81:A8:87:A9:F0:FC:84:6F:3E:8F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019433C7CB1759134AD2DE8EF5ACCA157FEB
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YfnuyD2aZgL09IGoh6nw_IRvPo8.roa
Signing time: Sun 05 Jan 2025 00:05:19 +0000
ROA not before: Sun 05 Jan 2025 00:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:33c7:7059/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:c7:cb:17:59:13:4a:d2:de:8e:f5:ac:ca:15:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 5 00:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61f9eec83d9a6602f4f481a887a9f0fc846f3e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:a4:2f:33:3f:b0:4f:df:9a:31:bd:66:f6:
81:e0:62:6a:11:e7:07:bc:07:fe:61:0b:67:60:49:
af:be:68:7a:19:ad:cb:be:f0:90:58:b0:85:31:32:
0e:6e:25:ea:32:00:44:b1:cc:24:2e:76:7e:fa:99:
b7:30:2b:54:56:1c:3c:55:b4:a9:1c:80:94:c1:0c:
c2:ec:8b:ad:88:09:06:4e:23:49:3b:7b:e2:d0:6d:
e9:c2:48:10:b4:ed:96:9f:4f:7c:ca:e2:9c:4a:ab:
db:7e:b6:e3:dc:96:c8:08:98:67:7b:34:02:a5:ec:
81:02:e2:3a:07:8a:b8:2d:28:84:34:99:b2:02:14:
45:43:64:6a:16:a6:91:e2:6a:a8:58:92:e9:47:84:
a6:51:09:80:38:14:a5:62:f0:c5:6e:c7:9c:62:96:
44:81:b2:8f:46:57:0d:fe:0d:d4:45:cf:ed:bc:7e:
76:a9:02:43:16:4a:64:f9:17:85:7c:37:24:4e:b1:
bd:30:d1:4b:e7:bb:2d:14:56:bc:b1:8d:d4:6b:18:
6d:ab:a7:ed:b7:27:fc:d3:e3:32:d7:2a:58:dc:36:
32:5a:5f:ec:e0:94:6b:83:02:f5:6a:d3:fa:40:0e:
af:be:a3:ef:33:02:f1:f0:40:32:d6:8e:24:a7:64:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:EE:C8:3D:9A:66:02:F4:F4:81:A8:87:A9:F0:FC:84:6F:3E:8F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YfnuyD2aZgL09IGoh6nw_IRvPo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:33c7:7059/128
Signature Algorithm: sha256WithRSAEncryption
6d:cc:e0:95:d9:51:34:70:39:ab:99:fa:46:3e:30:dd:7e:e4:
a4:1a:e1:53:d9:61:38:92:95:4b:96:50:c9:9d:99:70:36:14:
72:2f:6c:a7:8f:29:31:e9:37:15:f5:a5:e2:89:98:4f:26:06:
5f:6b:a9:ce:8b:6c:14:b9:b3:45:79:7f:7c:5f:51:cf:c5:e4:
da:c3:f8:b2:41:c9:b1:9f:7a:a1:c5:be:34:f7:af:aa:ce:93:
19:f5:63:64:fa:b4:87:64:65:c0:71:b1:6e:52:66:2c:6a:a7:
ce:f4:62:e5:5c:3d:d6:82:55:16:49:cb:ae:ac:1c:0e:72:0c:
d3:a6:85:20:bc:69:08:09:2f:e7:b7:30:43:bf:74:ea:d3:c7:
fa:ec:5e:8a:dc:0d:f4:92:9c:01:b5:5f:93:1e:ee:f5:ec:51:
dc:f0:99:5f:48:a0:5f:d3:59:fb:08:dc:96:62:68:94:9d:25:
97:20:f8:2d:49:a9:f7:6e:f1:9e:66:7d:35:41:eb:a0:fa:75:
20:a6:e2:60:d1:ff:e0:60:b0:ad:41:29:a5:11:54:55:87:49:
01:d1:b7:90:6e:37:99:b9:2b:5d:b7:83:88:56:9e:23:ec:95:
16:ef:60:3d:f3:f1:40:71:de:08:95:08:f9:86:9f:2b:ab:f1:
e7:1f:26:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:56 2025 by rpki-client