Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/YZrxRx2MZo2f2VLiKo8EiVstQas.roa
File: YZrxRx2MZo2f2VLiKo8EiVstQas.roa (raw, json)
Hash identifier: DsL8+avOzOcElUvnSwrw72B+A/AemnU+YiYy4e+iTe8=
Subject key identifier: 61:9A:F1:47:1D:8C:66:8D:9F:D9:52:E2:2A:8F:04:89:5B:2D:41:AB
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 01927D4AE12C80F65BD8076163BAC53C8BB8
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/YZrxRx2MZo2f2VLiKo8EiVstQas.roa
Signing time: Fri 11 Oct 2024 20:35:12 +0000
ROA not before: Fri 11 Oct 2024 20:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:7b83::/32 maxlen: 32
2a0c:7b85::/32 maxlen: 32
2a0c:7b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:4a:e1:2c:80:f6:5b:d8:07:61:63:ba:c5:3c:8b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Oct 11 20:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=619af1471d8c668d9fd952e22a8f04895b2d41ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:c9:38:34:80:75:44:09:00:57:c5:86:10:
71:5b:52:83:ab:d9:20:14:92:a1:ed:22:6b:43:93:
2f:9c:fd:59:08:fd:cf:7c:7d:13:81:3e:7b:35:fa:
98:c1:2d:b3:40:22:1e:f3:55:1e:43:1b:5e:84:04:
a2:74:50:01:07:15:92:ac:48:8f:01:79:ed:37:ea:
80:38:54:db:90:e9:f6:0e:ba:58:3b:69:75:b2:fb:
83:83:31:11:f5:d1:82:cd:dd:bf:85:67:8e:b5:c2:
e7:1e:d6:0e:18:cd:cd:ba:a9:b9:00:c7:8b:da:8b:
92:d8:fa:95:ed:28:0a:5e:4a:47:06:6d:59:fa:18:
2e:e3:16:52:5f:d9:f4:5b:25:25:c0:a0:8e:43:57:
bb:84:27:01:08:8c:c6:8d:1b:44:36:95:50:5b:f2:
84:67:d8:ea:02:72:e3:99:97:68:d6:9e:c4:07:46:
8e:e7:df:4a:de:f4:02:70:86:ef:72:58:a3:ce:2a:
01:07:a3:de:fc:be:03:1d:b9:7a:c6:dd:af:63:44:
cf:ef:51:01:68:23:9d:b2:ce:e4:7b:bf:79:94:5e:
62:d3:71:9c:d1:c0:db:8b:3f:f9:49:be:f7:03:51:
b9:5f:87:13:a1:80:df:d5:64:da:24:07:07:9f:2a:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9A:F1:47:1D:8C:66:8D:9F:D9:52:E2:2A:8F:04:89:5B:2D:41:AB
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/YZrxRx2MZo2f2VLiKo8EiVstQas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b83::/32
2a0c:7b85::/32
2a0c:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
81:62:5b:89:15:60:25:e5:4d:6f:ae:96:cd:7d:d8:40:4f:b0:
ae:a6:a8:28:fa:7b:8a:cf:f2:de:bd:09:9a:b5:d3:2e:95:63:
76:32:dc:58:2c:ff:d6:95:e9:37:2e:cc:51:35:a0:4e:56:04:
c2:a8:49:0f:25:50:f0:8a:c4:02:1c:5d:c7:d4:59:64:a8:c0:
89:f1:fc:f9:41:f0:53:f9:7a:ae:7c:5b:d8:fb:ce:e4:c4:b2:
d8:d6:cd:ef:2a:c9:8a:df:62:17:62:56:d7:67:71:37:8b:0e:
6d:5e:1d:26:25:49:ae:65:31:d0:f8:64:38:26:01:e4:ad:2b:
9d:d1:48:54:d2:b2:5b:0d:1e:b8:7c:98:e2:e0:f2:62:89:7f:
f2:58:2d:ca:ee:6d:e6:e7:dd:68:02:6e:0f:dc:1e:6d:77:a2:
66:06:66:de:b3:34:77:36:93:8a:74:90:5f:8c:a3:91:5e:3e:
16:8b:29:dd:3e:98:5b:7d:fc:73:f8:0e:49:86:2a:65:6f:56:
35:c7:99:f4:b5:bf:b7:7a:21:21:da:fb:8a:84:63:e6:17:c7:
40:f4:fa:dd:2c:61:83:ef:01:91:af:b3:b2:b8:e3:35:6d:35:
df:63:ab:f1:84:63:5b:0b:b4:16:01:60:e8:9c:1b:9c:56:4c:
10:14:0e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:03 2025 by rpki-client