Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yJtpW_kJnyJ_bI2ygnH9z5j7Mpc.roa
File: yJtpW_kJnyJ_bI2ygnH9z5j7Mpc.roa (raw, json)
Hash identifier: FWhNkj1hl1e5ovN2IIjjOTecVNGtMh53Dn+S5VHTpv0=
Subject key identifier: C8:9B:69:5B:F9:09:9F:22:7F:6C:8D:B2:82:71:FD:CF:98:FB:32:97
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01942D27513D85E13E57BB5D456C757F721C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yJtpW_kJnyJ_bI2ygnH9z5j7Mpc.roa
Signing time: Fri 03 Jan 2025 17:12:18 +0000
ROA not before: Fri 03 Jan 2025 17:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2d:27:51:3d:85:e1:3e:57:bb:5d:45:6c:75:7f:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 3 17:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c89b695bf9099f227f6c8db28271fdcf98fb3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:ad:3c:0a:17:26:6a:74:a3:7f:95:d9:65:
a0:e7:3c:c3:a9:34:75:0a:72:c7:c7:8e:03:ce:d8:
61:12:40:d7:34:0f:fc:75:c3:51:e3:41:de:e3:5e:
c2:4e:7b:36:17:1b:b4:20:ea:24:89:2a:98:a4:e8:
0a:1e:1f:32:da:b2:de:f4:ea:f6:b4:ff:91:75:ea:
f0:99:b2:df:fb:7c:a8:3a:ff:61:33:e9:70:e2:66:
3f:80:aa:34:a1:6a:28:86:4c:1c:d2:c8:e9:0d:47:
1d:83:94:39:12:1a:d1:95:09:19:bd:84:db:c3:9c:
72:70:cc:ca:46:c0:8e:b4:89:6e:e8:fe:cc:f7:ea:
01:ba:fc:8d:79:bb:4c:31:ab:54:07:5d:3a:56:db:
f2:e3:28:b8:17:6a:17:26:45:52:00:1d:f5:70:4a:
c1:31:e3:aa:f3:6c:db:9c:61:8e:ed:cd:51:75:97:
a9:0e:5e:5d:c9:19:6a:cd:93:40:98:55:3d:eb:ea:
1c:c2:33:82:04:96:c3:4d:2e:07:6d:6a:45:bf:21:
57:6f:40:db:40:ba:18:a9:29:bb:ea:09:d8:2b:fa:
18:22:a4:18:b1:cc:60:c0:43:be:49:29:88:a3:46:
ec:04:3d:10:fa:7e:c2:f4:18:6c:18:8b:53:02:5c:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:69:5B:F9:09:9F:22:7F:6C:8D:B2:82:71:FD:CF:98:FB:32:97
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yJtpW_kJnyJ_bI2ygnH9z5j7Mpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
88:2f:c9:4a:11:94:71:e0:e4:c7:91:3a:13:f5:1e:de:69:0e:
fe:e5:59:5f:b1:25:73:54:92:9f:b1:ac:63:d4:a1:0c:e3:81:
b6:bb:35:e2:d2:94:64:cb:1c:27:6f:58:c0:1a:19:c1:71:63:
e3:38:a5:fa:4c:b6:83:ec:c5:ac:31:b1:0b:80:de:22:8e:aa:
07:16:3a:b9:1c:2a:29:1a:2d:91:e7:34:3e:b1:0c:84:51:19:
c8:18:c9:c9:58:01:c9:dc:f7:ca:b8:77:c0:03:e3:34:88:4b:
b9:b0:40:a4:55:d3:c9:80:88:86:1e:30:a3:ce:65:1e:56:3c:
46:96:c7:db:2e:44:9d:69:dd:78:a1:f8:a4:74:22:7b:03:a4:
ed:d8:3b:92:aa:a7:3a:aa:cb:fd:81:34:70:f4:0a:9a:2a:d9:
a6:74:e0:43:a5:77:41:ca:46:8e:9b:f2:2e:61:a0:d4:8a:de:
03:64:ac:f8:8a:55:cb:90:a9:47:7e:d6:d6:f4:4a:51:a1:91:
25:01:34:a1:a0:fd:8c:f6:2e:f6:c3:5d:ff:89:b5:36:45:06:
39:73:b4:e1:9c:e4:0e:01:8d:ed:a7:6e:f8:92:e2:7d:9a:66:
10:98:cf:78:45:40:64:67:93:0e:d0:f4:69:14:17:c0:ff:96:
41:31:c0:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:20:19 2025 by rpki-client