Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/CYsdEXHop57QzfKqvfdF67LZXQM.roa
File: CYsdEXHop57QzfKqvfdF67LZXQM.roa (raw, json)
Hash identifier: tixSrxqFFhZZTwk/Ksztms/xtPjNKxQm+DujRSD/LBY=
Subject key identifier: 09:8B:1D:11:71:E8:A7:9E:D0:CD:F2:AA:BD:F7:45:EB:B2:D9:5D:03
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDD831D393E394D21E0C0E09206AFA
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/CYsdEXHop57QzfKqvfdF67LZXQM.roa
Signing time: Thu 02 Jan 2025 07:49:39 +0000
ROA not before: Thu 02 Jan 2025 07:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d8:31:d3:93:e3:94:d2:1e:0c:0e:09:20:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098b1d1171e8a79ed0cdf2aabdf745ebb2d95d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:7e:98:54:a6:03:62:48:4a:15:cb:aa:01:
4e:db:7c:27:eb:f4:19:3a:32:b1:67:20:17:3a:8b:
70:50:3e:cb:ab:c5:d2:30:59:7c:6d:fc:9d:cf:b9:
7b:6c:0f:83:15:8c:72:45:4a:6c:da:8e:f0:48:52:
32:8e:4e:e7:70:c8:56:a8:4f:09:72:fe:e2:91:c8:
c5:e4:22:23:37:17:f0:ff:96:3a:29:d8:bf:68:6b:
9c:7a:69:15:82:1c:99:88:91:ba:f4:d7:21:55:0a:
da:c3:fe:ff:64:56:1f:26:ef:0f:a9:74:a8:fd:45:
8c:5a:18:48:2e:c2:7b:3f:cd:83:d8:fe:41:22:cc:
db:65:17:02:72:dd:51:44:74:91:d9:3b:25:8a:1a:
7e:bd:c2:99:ad:e6:24:92:db:f2:52:b4:9a:a1:17:
79:bf:b3:e8:69:0e:f0:b4:aa:49:f1:52:c1:80:5c:
3d:02:8a:b3:e6:24:19:cf:4a:52:b1:41:96:8d:d3:
74:5c:6a:f7:77:df:91:1a:5b:0e:2f:e9:9b:5a:cf:
9f:0c:45:fc:5d:0a:0e:70:5e:41:24:9a:f9:42:e0:
54:ed:36:eb:3d:e4:6e:f7:f0:69:a3:cf:cb:d9:78:
59:31:a4:87:80:1a:5b:5d:63:15:27:5a:f1:d9:25:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:1D:11:71:E8:A7:9E:D0:CD:F2:AA:BD:F7:45:EB:B2:D9:5D:03
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/CYsdEXHop57QzfKqvfdF67LZXQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
74:16:62:d0:c2:63:66:1f:3d:56:da:f7:c8:9a:a7:da:1c:3e:
8c:f8:aa:3d:23:f1:fb:3e:af:c8:8a:ec:87:ed:d9:8e:a8:06:
da:47:92:f7:b5:6d:33:98:80:7e:fd:d5:43:b2:ac:dd:2d:23:
20:3e:8b:24:11:4b:ec:9d:59:eb:e8:38:c6:71:4e:26:96:93:
8a:ba:45:eb:da:6c:53:fb:b3:ab:bf:01:2a:22:b7:59:fa:ab:
da:dc:5e:a0:80:77:4b:85:1d:37:1f:2d:02:d5:59:48:80:09:
9e:e8:fe:6c:b3:51:d7:2b:b6:0b:7a:a3:d2:63:a5:0f:76:c1:
b3:7f:96:40:b0:05:0e:00:15:c2:c1:61:eb:9c:9f:ad:ed:ac:
4b:5d:cc:ea:ba:95:09:5a:36:8a:06:a0:d2:80:dc:d9:4b:ea:
09:39:35:3d:5f:ee:b5:6c:85:ca:71:38:21:e8:91:30:0c:65:
9b:c2:21:98:aa:11:5f:28:6f:3b:e9:ac:37:7e:ea:a5:cf:be:
e0:99:59:ae:73:d6:52:e2:7a:7d:6f:0b:72:48:d6:86:52:35:
f1:a5:87:c4:c7:8f:dd:92:77:b5:27:a9:f5:7f:25:95:0e:bd:
fc:75:29:94:93:c9:89:80:75:b9:ed:6a:93:be:29:87:7d:87:
07:12:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:17 2025 by rpki-client