Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/Yu3sg19gw9RqxXtaBobOTcFABCU.roa
File: Yu3sg19gw9RqxXtaBobOTcFABCU.roa (raw, json)
Hash identifier: s1VpHCeBK4q+0ERblkTkQcFQicVxzMLQOo1cXvgRehs=
Subject key identifier: 62:ED:EC:83:5F:60:C3:D4:6A:C5:7B:5A:06:86:CE:4D:C1:40:04:25
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 0194228E358CD0497A943605B601083BB615
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/Yu3sg19gw9RqxXtaBobOTcFABCU.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200270
IP address blocks: 2001:67c:b68::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:35:8c:d0:49:7a:94:36:05:b6:01:08:3b:b6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62edec835f60c3d46ac57b5a0686ce4dc1400425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:3e:5e:80:86:04:f5:c2:28:47:1c:63:8d:
6e:cb:66:2e:e0:32:d2:d0:86:15:5c:fe:61:68:7a:
de:09:a4:f8:67:68:6b:9d:d2:63:0d:f4:aa:0f:f7:
43:c7:0f:5a:85:01:21:6c:1f:ba:27:e8:63:86:fe:
7e:87:bf:30:a1:30:6b:aa:a4:11:7b:ef:3c:22:6c:
13:1b:ed:ee:a7:37:cf:08:32:7c:76:84:df:5d:e9:
c3:b0:19:88:46:94:fe:bf:20:a9:22:9d:0f:15:8f:
68:01:69:59:a1:10:68:6b:07:73:d5:f3:8b:1b:ae:
06:01:4d:69:fc:80:af:04:ce:9f:27:d1:45:34:b3:
75:64:ec:b8:8e:a4:89:d0:25:14:83:b5:30:79:e2:
0c:f8:c9:7e:e2:3a:47:95:2e:bc:54:f7:a5:88:b9:
e8:33:ff:24:1e:fb:c1:52:67:e0:a3:55:aa:21:5d:
54:a0:38:e5:a2:85:38:5b:ac:0a:49:f8:63:3a:91:
21:7e:1f:43:7f:bd:0b:59:3b:7e:c4:b0:73:95:0b:
9a:53:ac:e6:19:7c:97:53:6c:f3:c1:9f:fb:52:87:
74:8a:e3:21:44:79:2b:1b:75:94:ec:6f:0e:0c:a7:
fc:37:45:8b:2b:23:00:2f:0a:1c:b7:c5:4a:a0:fa:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:EC:83:5F:60:C3:D4:6A:C5:7B:5A:06:86:CE:4D:C1:40:04:25
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/Yu3sg19gw9RqxXtaBobOTcFABCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b68::/48
Signature Algorithm: sha256WithRSAEncryption
05:6a:10:0e:e2:04:77:81:10:99:48:79:96:4a:63:2a:c4:95:
ec:02:23:c5:e0:19:e1:02:c3:3e:35:17:77:4f:00:92:7c:13:
36:3d:97:38:7d:3b:97:c4:78:36:c0:95:ff:92:26:23:9c:4f:
d7:99:d7:3f:59:d1:0d:e0:fd:e0:45:b1:15:8d:99:70:a4:9f:
bb:4f:a6:aa:6e:65:45:39:b8:87:0c:0f:19:18:ef:67:69:eb:
e6:e2:7a:ca:4e:cc:9e:6e:5a:f6:ca:bf:02:a0:d3:40:67:7a:
45:da:5a:c2:1d:f6:0e:f0:20:5c:2e:85:98:fe:c7:ac:a1:71:
11:6c:ca:fd:40:84:ba:bc:ba:82:cb:85:63:07:bb:ca:e4:22:
9b:48:cd:1a:c5:6f:d2:ae:97:c7:e8:2e:1d:6a:e0:e8:ab:00:
1c:7f:df:db:81:6c:54:6a:84:64:86:2d:9e:91:af:a5:d5:09:
63:f3:fd:c4:c9:1c:20:8f:7f:c3:65:69:00:e9:a1:03:9e:8b:
f8:e0:b1:d8:f4:49:cd:6c:51:42:0e:48:52:2f:f8:47:cc:47:
c0:0b:cd:1b:79:7f:53:3d:0f:fe:38:48:77:8f:20:37:2c:31:
20:d7:27:8f:bb:53:7c:f7:eb:0a:17:5c:8b:29:6e:1b:57:9b:
37:25:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:06 2025 by rpki-client