Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YsBfTwvoORUoJ4mP5tl31MLXgCY.roa
File: YsBfTwvoORUoJ4mP5tl31MLXgCY.roa (raw, json)
Hash identifier: Z7E4t7zK7F9yrjXkjKv9e5E/yPmbVhw0+ATsFDb6lQ0=
Subject key identifier: 62:C0:5F:4F:0B:E8:39:15:28:27:89:8F:E6:D9:77:D4:C2:D7:80:26
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019485888DF894EE17CCB22732130319474E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YsBfTwvoORUoJ4mP5tl31MLXgCY.roa
Signing time: Mon 20 Jan 2025 21:05:06 +0000
ROA not before: Mon 20 Jan 2025 21:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
2001:67c:64:ffff:0:194:8587:e6f5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:85:88:8d:f8:94:ee:17:cc:b2:27:32:13:03:19:47:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 20 21:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62c05f4f0be839152827898fe6d977d4c2d78026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:a2:ea:9f:31:ca:05:9f:f7:a9:0d:e1:1a:
78:5a:ee:a4:4c:06:54:0c:1f:6b:ed:a6:9d:94:2c:
ff:09:20:3d:66:6a:d7:43:61:7e:f7:83:f3:a1:49:
0f:da:8e:93:ea:69:e1:08:ac:9d:8e:5c:de:86:53:
a6:51:58:05:db:5e:05:f8:6d:a4:83:89:ef:06:eb:
1a:ee:52:11:38:95:65:fd:4a:74:56:5a:b1:8e:e7:
0b:15:43:22:de:17:da:18:dc:a7:4f:29:d1:16:99:
00:b6:60:97:0a:8a:bd:2c:30:92:76:54:6c:67:6b:
ff:09:75:83:68:a7:58:38:ff:24:a3:bc:9e:d3:4a:
47:3d:df:2c:d8:f6:cb:26:c1:3a:02:41:91:fa:86:
ab:20:b1:c1:33:09:cd:ef:18:8d:46:70:1a:3a:d9:
2b:42:c9:01:da:48:c9:7e:92:b1:ab:a2:be:26:e0:
12:7b:a4:d7:42:5a:08:d7:ef:b1:39:0a:99:07:6b:
39:e9:fe:5f:14:e7:9c:08:e8:f0:32:6b:eb:f2:45:
a4:13:b8:c5:6e:c3:3f:ed:ee:f4:29:ab:82:75:12:
ba:f1:43:81:b9:10:9f:78:db:ea:44:90:d9:e9:f9:
32:e6:5d:eb:1e:35:ad:15:7c:97:03:25:54:9a:68:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:5F:4F:0B:E8:39:15:28:27:89:8F:E6:D9:77:D4:C2:D7:80:26
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/YsBfTwvoORUoJ4mP5tl31MLXgCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
2001:67c:64:ffff:0:194:8587:e6f5/128
Signature Algorithm: sha256WithRSAEncryption
19:bb:8a:bf:d5:00:6e:d9:f7:aa:3a:82:be:ab:4a:63:28:5c:
53:a0:da:b2:36:13:7e:12:34:fd:fc:8c:4d:ac:11:52:80:95:
f9:9c:d7:b7:86:01:7e:17:fb:b1:0a:ba:22:14:4c:15:64:b2:
83:a6:aa:0d:39:6b:69:79:52:3c:4a:68:b8:e2:a3:0f:6b:13:
82:f5:1d:d3:11:ce:37:01:ae:de:89:ad:8c:50:4d:78:24:67:
fd:89:a6:0c:83:e1:60:c8:29:eb:a8:b1:a9:d7:f3:bf:ac:49:
c9:f9:32:28:07:1d:1e:8d:84:00:ed:21:50:38:a2:1b:f1:98:
c3:04:a8:22:f4:f5:60:5d:ff:97:8d:9f:92:c4:ce:8a:f3:cc:
f2:18:7f:2c:92:75:d9:54:12:b9:cb:95:1e:51:32:27:36:14:
e4:27:ea:63:7d:db:ed:7d:d1:17:c1:a9:f1:a7:46:7d:aa:a7:
b5:a4:7d:5c:b3:70:9d:0f:09:44:7e:00:15:6e:3d:ad:d2:81:
cf:d9:d4:ec:5b:66:7a:18:b0:4f:36:96:f4:29:ce:9b:d0:2f:
33:1e:fb:a0:47:48:73:75:5e:40:85:85:44:cb:ae:ea:22:b4:
39:6f:2d:c9:e2:59:ce:1c:5b:aa:d7:c8:e3:79:4f:90:bc:0c:
0e:6e:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:21:10 2025 by rpki-client