Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/Y_Y1ITkuATFTDsWlNtS0vQgzrII.roa
File: Y_Y1ITkuATFTDsWlNtS0vQgzrII.roa (raw, json)
Hash identifier: j+zhk4kFz6X/J+EvJPEuSbpNUvlfJj7qfZ0nkQHr7FE=
Subject key identifier: 63:F6:35:21:39:2E:01:31:53:0E:C5:A5:36:D4:B4:BD:08:33:AC:82
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 01929531F3E8104E8029EEC293AB8451A679
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/Y_Y1ITkuATFTDsWlNtS0vQgzrII.roa
Signing time: Wed 16 Oct 2024 11:58:51 +0000
ROA not before: Wed 16 Oct 2024 11:58:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16221
IP address blocks: 2a02:16a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:95:31:f3:e8:10:4e:80:29:ee:c2:93:ab:84:51:a6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Oct 16 11:58:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63f63521392e0131530ec5a536d4b4bd0833ac82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:78:4f:1a:ee:5b:1c:a3:02:87:c2:b4:1e:
d9:b9:60:7c:27:b8:ee:ba:3b:6d:f7:c9:79:6e:b0:
68:4d:f9:ba:a1:33:62:fa:b3:7b:8f:c5:5e:af:50:
cd:e1:66:9c:ec:e9:9d:14:22:88:78:e8:3c:46:7d:
bc:75:45:b9:df:3a:d1:58:f7:b8:de:a6:7b:86:86:
6d:c3:0e:a4:83:6d:6b:af:8b:a8:34:1a:0c:0e:9a:
93:a0:3e:ac:bd:91:60:8c:39:10:bf:29:db:57:92:
78:23:8a:c5:7d:ff:bc:7d:aa:0e:82:28:c1:64:4a:
ad:8f:ab:58:83:63:bd:5a:54:f5:19:a5:ab:62:90:
5f:22:80:cb:72:2b:fc:35:09:d7:fc:db:f5:52:e7:
7a:97:97:2d:5e:29:f3:f1:27:fc:e9:75:06:d7:53:
57:59:18:f6:35:f6:3a:e2:29:4b:7a:d7:f2:d7:2b:
63:c8:f9:e0:7e:a5:be:c6:9f:05:f7:4e:5c:b4:80:
5c:9e:91:53:a6:68:2a:74:66:56:65:20:43:de:21:
4d:86:a3:c0:84:ae:d0:62:b8:46:74:a5:da:f8:32:
6d:4a:44:32:24:16:e5:91:8d:be:1f:39:d8:96:65:
a1:4f:75:c2:a6:84:02:81:a4:6a:c6:12:4d:de:23:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F6:35:21:39:2E:01:31:53:0E:C5:A5:36:D4:B4:BD:08:33:AC:82
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/Y_Y1ITkuATFTDsWlNtS0vQgzrII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:16a::/32
Signature Algorithm: sha256WithRSAEncryption
30:3e:f4:db:80:51:a7:2b:2a:a6:24:2d:3c:c7:67:d9:06:2b:
88:e9:84:37:b9:1e:64:3b:fe:9d:80:2e:c4:b2:76:b8:88:2e:
f4:59:2b:e3:1f:9b:07:14:cb:0f:08:50:12:9a:15:d5:55:ad:
5a:00:d9:f8:83:03:06:e2:58:a5:13:8a:73:a1:6b:9d:95:70:
20:7c:2a:38:ea:ee:7a:2f:8e:8f:c3:73:64:53:99:53:df:4b:
87:11:bc:19:a3:cd:f8:e0:75:6d:c6:c0:f1:b2:bb:d8:02:05:
cd:eb:ae:0a:58:db:09:eb:90:6e:70:45:8e:0c:c6:ab:5d:88:
9e:01:4a:54:29:f7:82:91:df:a6:9d:0e:06:ed:e8:d9:fc:99:
f2:cf:43:6b:b0:85:d0:cd:f4:5f:6f:ee:b4:0c:37:1a:1a:ce:
c6:d6:54:74:73:45:63:54:b9:59:f8:cb:40:7f:4c:72:12:4e:
82:b7:2c:9a:d5:22:cd:66:35:93:b2:59:58:49:99:0e:a6:0b:
e7:e5:db:a3:0f:dc:85:71:ed:ef:7d:37:db:85:6e:a8:1e:0a:
15:9a:f7:ce:fe:33:57:88:37:aa:db:48:5d:0d:84:16:59:8d:
21:c5:23:6a:a1:85:93:e2:c8:0e:0e:27:92:88:da:3e:91:fc:
21:6f:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:58:32 2025 by rpki-client