Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ybDfqb3XZNRLUBxHkNBKsIILb5s.roa
File: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (raw, json)
Hash identifier: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=
Subject key identifier: C9:B0:DF:A9:BD:D7:64:D4:4B:50:1C:47:90:D0:4A:B0:82:0B:6F:9B
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 019424B261C0F060DAADFDEC05155F4402C1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ybDfqb3XZNRLUBxHkNBKsIILb5s.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35758
IP address blocks: 2a11:840:30::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:61:c0:f0:60:da:ad:fd:ec:05:15:5f:44:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9b0dfa9bdd764d44b501c4790d04ab0820b6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:95:3b:48:88:97:b3:70:5e:ac:e7:48:fd:
99:3f:7f:f8:b0:04:4a:54:bd:f3:2c:9c:17:c2:b1:
93:61:0d:a9:e5:f5:65:2e:8f:72:70:92:06:f9:90:
7c:74:39:11:ec:42:75:fa:ec:ae:04:88:ff:ff:70:
fb:8b:42:4e:52:3d:81:34:44:66:9f:d8:76:ac:c2:
0b:a5:1b:95:6f:f9:29:25:27:77:57:55:f8:38:4e:
c9:b8:2d:dc:43:2b:ca:96:2f:2a:c5:a0:bc:bc:01:
f0:96:85:f4:52:49:52:0e:3e:57:08:d4:e8:d0:5e:
19:88:21:61:d2:bf:73:4f:7a:78:2b:28:11:17:c4:
e8:e8:11:cb:d3:8f:6a:9b:01:70:c5:b2:b4:a4:93:
08:36:f8:c1:38:dd:4e:a2:9d:d3:f8:89:6f:d2:41:
29:59:04:bf:74:e2:5c:9f:24:40:d3:78:b7:a0:87:
c1:2e:86:02:68:b7:61:8d:f1:c9:d1:b2:1f:2b:0e:
a2:52:dc:41:02:49:e7:ff:14:c2:e0:45:98:82:67:
b9:19:fc:c0:60:c3:aa:b1:1b:d6:2a:31:10:2b:24:
79:a2:d0:72:5a:a2:97:db:4a:f2:e7:9d:cb:96:8e:
a0:6c:8b:41:b0:a2:cf:e8:e6:c5:53:48:f3:03:ab:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:DF:A9:BD:D7:64:D4:4B:50:1C:47:90:D0:4A:B0:82:0B:6F:9B
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ybDfqb3XZNRLUBxHkNBKsIILb5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:30::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f7:3f:45:5e:89:b5:57:18:68:b7:b6:51:c5:99:66:ba:05:
08:35:c7:98:d9:de:f5:9a:e2:87:b7:a8:f6:2d:e1:7d:df:5a:
96:83:cb:7a:a7:f8:d6:e2:fe:44:82:5c:65:3e:46:c4:97:14:
22:ea:21:f2:ee:fe:20:36:7e:62:ef:e9:3b:17:ed:b9:b2:83:
38:36:9e:06:4e:47:0d:a8:9d:c3:49:55:10:25:ee:96:2b:51:
63:06:7e:be:ea:a6:3e:2e:86:c6:2a:cf:1e:fb:8d:78:32:ec:
0e:e5:5c:62:aa:4d:8b:99:1c:b7:07:e1:a2:90:ce:1c:3c:75:
29:63:3c:0a:61:c3:6f:35:4c:86:51:13:aa:3a:66:d4:02:43:
8e:71:e5:ef:a0:8f:73:f7:c8:37:29:e8:54:cb:7e:b3:85:8c:
3e:f6:32:96:b1:71:54:3d:c8:91:95:c3:a6:3e:83:77:fa:9f:
94:ff:ef:a1:c5:e8:fb:d4:3d:64:c0:df:cc:86:5a:9e:d3:40:
71:65:47:c1:cc:cf:f3:a7:6f:ff:ea:90:4f:d5:7d:cb:e9:32:
b0:68:8a:79:06:4c:45:3f:d5:ad:de:58:05:39:fa:43:a7:0d:
53:e5:8b:f9:7b:fc:c6:a9:6d:80:19:77:36:12:8a:a5:a6:dd:
89:64:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:26:19 2025 by rpki-client