Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yu-BZEhGWKgcMwdbL5YPzAVfjb4.roa
File: yu-BZEhGWKgcMwdbL5YPzAVfjb4.roa (raw, json)
Hash identifier: oXVrY9RkQsXAFmji4BrbYWJER8TbRej9bSJ5W/sEqTQ=
Subject key identifier: CA:EF:81:64:48:46:58:A8:1C:33:07:5B:2F:96:0F:CC:05:5F:8D:BE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019447C103535FDE60DDD9B2715498430EE4
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yu-BZEhGWKgcMwdbL5YPzAVfjb4.roa
Signing time: Wed 08 Jan 2025 21:10:19 +0000
ROA not before: Wed 08 Jan 2025 21:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:c1:03:53:5f:de:60:dd:d9:b2:71:54:98:43:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 8 21:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caef8164484658a81c33075b2f960fcc055f8dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:37:23:2e:37:9b:fc:c8:97:a0:9a:b7:79:
5a:20:8d:03:bf:93:e5:61:cf:02:f8:44:4f:9c:05:
94:b9:ef:14:76:1a:9b:ae:5c:fd:bb:b3:b9:c4:0b:
b8:3c:cd:f6:9d:f4:32:ca:04:4b:1e:11:c8:87:f6:
f2:5e:1c:ea:41:d4:50:9e:1b:20:9d:75:98:b9:79:
27:d8:b0:69:c9:ab:06:8f:38:80:64:ea:14:76:ce:
23:e4:22:a7:0a:38:8b:f3:2d:74:78:28:1a:c5:40:
37:84:75:49:f3:76:c7:21:d6:09:8f:3b:23:ab:d1:
83:70:25:da:ca:e9:f4:04:08:7e:8a:ce:db:3d:6b:
b0:a2:a6:5c:c1:83:df:fb:2d:6f:eb:5b:86:84:ba:
25:91:2d:fb:4c:6a:3c:af:60:df:27:20:5d:42:27:
4c:d9:1c:39:f0:8a:63:a0:94:b9:cc:13:44:ae:a9:
9d:07:cb:0f:4f:78:26:bc:dc:88:f0:b7:d1:af:be:
d4:26:fe:2d:cf:e1:58:59:a2:c2:67:0e:83:ef:0c:
ff:af:70:64:f8:be:16:32:07:fd:d8:59:dc:a3:5e:
ea:ba:32:67:9b:f0:03:46:b5:64:8c:d2:30:46:49:
68:1d:d9:da:9b:35:ae:b6:82:44:c8:ea:7e:78:77:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:81:64:48:46:58:A8:1C:33:07:5B:2F:96:0F:CC:05:5F:8D:BE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/yu-BZEhGWKgcMwdbL5YPzAVfjb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
39:e4:86:f1:1d:05:cf:94:17:5a:0c:9b:39:12:c0:85:19:94:
79:e8:40:b8:0e:51:1a:d2:55:4e:66:50:41:ae:d2:dc:c4:47:
b1:9a:3b:fc:c8:c8:4f:34:e9:65:a7:7b:61:18:34:7e:49:27:
08:ad:03:77:29:ef:61:b2:39:d6:ee:90:3b:2e:4b:d6:85:bc:
a3:d9:26:bf:97:2c:3e:4b:21:bf:21:8f:5a:6b:15:82:9b:f0:
b3:48:13:88:bd:47:80:1a:fa:9a:20:d3:71:8d:f8:f6:d3:8f:
b7:a7:69:19:1a:dd:71:d3:93:a8:90:8d:41:6c:77:16:9b:00:
04:60:4c:25:7a:8d:d5:01:aa:94:26:b9:bf:8b:0d:02:f7:1a:
c5:9a:f9:e1:5d:b8:79:8e:c9:4e:f0:0e:28:53:8d:16:e5:18:
5d:2b:ff:55:92:aa:8d:43:17:ff:ad:d9:13:76:21:a4:88:b9:
b1:a9:53:60:f3:18:ed:a1:a3:7b:9c:9f:93:fe:3e:de:e6:6c:
15:fb:fc:44:16:d5:00:40:75:15:81:f9:92:30:5d:e6:81:58:
b5:f4:92:f7:8d:cc:fc:74:e9:45:d6:9f:d7:38:01:9b:c3:a7:
66:fa:d9:94:42:ac:1c:af:51:f4:13:05:46:f7:82:d7:9b:c8:
7f:cf:38:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:42 2025 by rpki-client