Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yB_C9lXl2QaU_Ckrj6XdXVjuHd4.roa
File: yB_C9lXl2QaU_Ckrj6XdXVjuHd4.roa (raw, json)
Hash identifier: jLoYhlnG8aReOOyn2X5gv5yXxnSYyWd7W20Cd1k7ZfQ=
Subject key identifier: C8:1F:C2:F6:55:E5:D9:06:94:FC:29:2B:8F:A5:DD:5D:58:EE:1D:DE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01959CEFB4115EFAF844E4DE7A41122235BA
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yB_C9lXl2QaU_Ckrj6XdXVjuHd4.roa
Signing time: Sun 16 Mar 2025 03:11:49 +0000
ROA not before: Sun 16 Mar 2025 03:11:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:195:86cf:630c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9c:ef:b4:11:5e:fa:f8:44:e4:de:7a:41:12:22:35:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Mar 16 03:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c81fc2f655e5d90694fc292b8fa5dd5d58ee1dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:4a:ed:e7:ed:fc:c4:67:de:85:1b:ac:69:
02:ad:40:64:c1:2d:9a:6b:71:52:c7:aa:bd:9b:a3:
6b:5f:07:f5:70:ba:82:95:a6:b0:45:80:7c:c4:20:
f6:e1:e2:b0:e4:57:b0:15:d6:96:27:3e:9f:7b:6e:
bc:8d:57:63:2a:a4:a2:76:1c:39:c8:9e:b3:2c:d2:
73:48:a6:6f:18:43:1f:44:5d:72:7c:dc:26:b2:3f:
37:dc:5d:71:ba:d2:41:a2:c5:7e:2a:fc:22:c2:fb:
11:2c:3e:5f:40:3a:c1:12:8d:d5:6a:bf:04:a4:08:
f9:48:5f:db:9d:f1:40:c4:27:f4:9b:67:e8:41:19:
ea:ed:5d:d1:1c:28:29:a7:98:13:e9:23:47:14:94:
35:b1:03:9c:77:60:15:34:1f:8c:43:bb:07:25:92:
04:bf:d7:72:b1:79:2b:d2:77:a1:1a:01:ba:80:7d:
6b:17:d9:ce:38:54:ff:8b:cf:04:52:ff:21:1f:7c:
8f:87:8f:4b:45:18:b6:5e:16:2d:3c:13:53:44:de:
ec:a1:4c:97:a1:c6:e5:d2:43:1c:7e:11:f3:e3:1e:
0b:6f:ee:14:47:80:dc:4d:b0:82:11:9a:e2:22:b5:
6e:f7:28:7f:9c:7d:05:cc:15:db:94:e5:07:4c:dc:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:C2:F6:55:E5:D9:06:94:FC:29:2B:8F:A5:DD:5D:58:EE:1D:DE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yB_C9lXl2QaU_Ckrj6XdXVjuHd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:195:86cf:630c/128
Signature Algorithm: sha256WithRSAEncryption
4b:fe:5c:1c:2f:36:57:42:35:36:91:e7:c9:30:90:d3:49:fb:
f3:66:3e:ce:d9:15:f1:e8:7f:ac:3c:59:1d:b9:c0:0b:43:bf:
5b:d2:50:dc:2d:56:9c:4e:da:a1:f1:e4:cb:31:9b:44:2e:36:
6b:27:54:6d:64:b3:e0:40:17:c2:34:dc:f9:eb:99:a1:64:c5:
28:09:58:af:a7:f7:2e:e8:48:22:72:9d:8b:ec:19:52:8f:97:
58:df:bc:68:e0:1c:da:a9:86:e0:d5:0e:c1:14:cf:9e:f5:1f:
0c:cd:52:91:ea:52:17:ff:99:eb:40:e1:27:01:62:66:dc:d0:
1c:38:cd:50:2f:1b:36:5c:ee:7e:ac:d0:a6:48:14:36:00:7d:
ed:a6:7e:3d:8f:86:03:94:bd:13:de:28:bb:55:13:3c:42:b6:
63:6e:fc:1e:17:ea:a5:6e:23:53:c6:80:70:f9:6e:91:85:34:
b5:c1:fe:70:b9:c5:99:ad:02:59:33:a8:96:07:1d:76:d4:41:
d6:e7:e2:e2:bc:a0:9b:83:da:ee:96:c4:a3:69:70:bb:9c:e0:
a7:02:fc:4f:9c:76:1e:1d:92:86:00:cf:4d:b2:d1:43:f7:98:
76:f1:59:41:7a:e3:07:aa:78:19:37:6b:70:b0:33:f2:b2:8f:
a6:ef:bb:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:19 2025 by rpki-client