Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yb6nhUhKeItxH0tqZh9pL5_3yS8.roa
File: Yb6nhUhKeItxH0tqZh9pL5_3yS8.roa (raw, json)
Hash identifier: 1hLGJ/uVVp0YW0kTS6Isi1GE8yPnCCeAG+WmXoj9DZE=
Subject key identifier: 61:BE:A7:85:48:4A:78:8B:71:1F:4B:6A:66:1F:69:2F:9F:F7:C9:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427481DEEF178653916B45604F27A0F64
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yb6nhUhKeItxH0tqZh9pL5_3yS8.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29465
IP address blocks: 2a13:e107:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1d:ee:f1:78:65:39:16:b4:56:04:f2:7a:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61bea785484a788b711f4b6a661f692f9ff7c92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:f8:8a:ad:b6:9b:ae:c0:e8:23:2c:5a:9a:
de:b5:f7:c9:d8:c3:3c:df:6c:3e:5c:15:2d:b1:f3:
37:5a:b5:c4:c4:ed:25:70:0f:18:e7:6a:ff:8b:be:
d9:4a:9c:df:04:aa:a4:6b:2b:47:b5:f7:b4:1d:62:
16:e3:df:d0:d5:c7:7c:7a:40:85:b0:a0:a0:b9:14:
98:06:79:1f:e1:82:93:e5:9b:3d:6a:a5:12:9a:2d:
1d:7f:17:78:44:87:00:1a:72:e8:96:db:2b:54:6d:
84:83:bc:55:67:d7:66:92:59:c0:f2:34:dd:c9:97:
50:bf:06:f3:7b:dc:cd:d1:06:78:80:83:f0:89:e9:
3e:cd:29:21:61:b1:dc:28:48:24:88:5b:ce:c1:8f:
eb:59:15:62:8d:49:f5:6b:20:b4:8d:1f:ce:df:5c:
c1:31:30:4e:c1:36:79:63:0a:c0:1b:ab:79:52:d4:
b0:27:f9:a4:b4:6a:67:38:31:62:0d:ac:88:9a:34:
f0:35:c3:01:15:8d:fb:06:9e:c8:1e:8a:cc:78:ff:
72:9a:e5:09:d3:e2:fb:3a:6c:4d:d8:71:be:76:fb:
5d:3f:67:b4:50:8d:12:90:3b:02:4d:c5:a0:64:a7:
31:e1:fd:94:df:27:d8:20:97:3e:42:4c:31:aa:9a:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BE:A7:85:48:4A:78:8B:71:1F:4B:6A:66:1F:69:2F:9F:F7:C9:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yb6nhUhKeItxH0tqZh9pL5_3yS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e107:7::/48
Signature Algorithm: sha256WithRSAEncryption
3e:56:41:de:64:5d:bd:8c:99:98:e6:4e:3a:b2:0a:b5:49:94:
26:ea:34:a7:4f:72:3a:56:29:fa:b9:50:42:4c:ce:39:2b:c0:
84:3f:58:5c:29:61:14:50:81:c2:2b:60:f3:b9:d3:7e:7b:3b:
a1:26:c4:94:36:10:99:06:48:e8:8f:e0:22:db:30:08:b4:ab:
8c:58:b9:3a:25:83:0f:b9:cd:96:3a:79:6a:e5:5b:36:70:1b:
63:3e:60:b0:55:96:6b:de:2f:98:95:5b:78:b0:25:d1:a9:04:
40:03:53:94:28:b7:78:c3:59:a8:50:5e:88:e1:1d:ef:03:7d:
00:19:36:2c:f2:f0:ea:ae:54:bd:28:15:16:8d:fd:be:b9:28:
98:58:dc:42:8b:3f:4b:ab:c1:85:18:82:c1:d1:81:c6:3b:a0:
00:30:a4:94:39:11:84:fc:c3:72:30:39:31:23:5b:51:27:de:
05:79:27:b8:b8:a5:c5:91:19:88:3d:72:ea:0e:50:fc:bd:0d:
36:40:5d:03:05:c8:51:39:fb:c4:3a:cf:24:17:0e:49:16:c3:
d2:69:2b:94:fa:9d:69:bd:4c:64:54:8b:86:78:a5:13:d5:e0:
c1:a5:49:67:80:6c:38:ac:3d:65:4f:a7:a2:47:04:47:20:a7:
f0:b2:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:25 2025 by rpki-client