Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/yD5Hs_qDOjzYePaGjxxpveB5n3A.roa
File: yD5Hs_qDOjzYePaGjxxpveB5n3A.roa (raw, json)
Hash identifier: Gf1ynMuKw8mwItao11g6hpTk8T+awfVyraxB/Jj6t1U=
Subject key identifier: C8:3E:47:B3:FA:83:3A:3C:D8:78:F6:86:8F:1C:69:BD:E0:79:9F:70
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 019424B36E628CC3E66BD7CC6F8990412550
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/yD5Hs_qDOjzYePaGjxxpveB5n3A.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20940
IP address blocks: 2a10:fa44::/48 maxlen: 48
2a10:fa44:100::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6e:62:8c:c3:e6:6b:d7:cc:6f:89:90:41:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c83e47b3fa833a3cd878f6868f1c69bde0799f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:19:bb:48:39:a8:3a:64:10:4b:24:9a:64:
f0:79:c4:7a:64:ea:90:45:a6:ee:66:dc:8a:d3:41:
8e:02:ac:3a:8e:cc:8c:a6:6c:5e:22:b7:55:7b:78:
94:ba:d3:49:e1:96:7f:8c:40:ff:83:ab:01:e6:27:
01:5e:e7:4d:78:6a:99:18:7c:e3:59:e4:20:01:40:
e6:a1:d0:80:a0:7f:5c:98:0e:d7:0c:5c:35:96:ad:
12:b1:b9:5e:16:3d:d5:5a:7e:ec:8e:d2:ff:4a:1e:
52:25:e1:35:86:95:9b:bb:c9:a8:e0:fd:d1:40:d1:
8f:b8:df:fc:6b:70:d6:5a:5c:bc:49:1c:d0:81:18:
e7:c9:f4:b9:99:92:3c:d3:70:b7:84:18:80:29:68:
b5:5f:ac:20:10:01:07:c0:88:5f:b2:12:98:af:27:
70:99:93:67:63:17:8c:b5:63:1b:69:0e:13:b7:5d:
de:66:e7:46:8d:d6:f8:2e:86:2c:be:08:1d:7b:cc:
48:58:7b:4d:e0:e9:99:3d:0e:b8:16:09:d1:43:16:
79:f5:2b:90:2b:8d:2e:7b:1b:72:f9:a3:80:b7:8b:
d6:4e:6f:42:5b:c7:65:4a:e3:da:e8:e9:c8:67:54:
ef:16:b9:cc:ec:14:32:7a:1c:d7:76:60:17:65:55:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:47:B3:FA:83:3A:3C:D8:78:F6:86:8F:1C:69:BD:E0:79:9F:70
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/yD5Hs_qDOjzYePaGjxxpveB5n3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa44::/48
2a10:fa44:100::/64
Signature Algorithm: sha256WithRSAEncryption
3c:9a:9c:5f:0e:df:60:c2:39:ee:8a:0c:b2:c4:ae:7c:79:1d:
f2:cd:0c:95:0c:a6:7d:17:84:fd:f7:b0:8a:f4:67:5d:dd:d8:
85:d8:32:35:f3:94:98:32:22:1a:70:1a:2d:ec:a3:ea:1c:c4:
25:a0:6c:ce:eb:b2:9b:cd:16:71:43:ca:7d:ee:be:90:50:3b:
20:34:3a:50:77:d9:38:01:d7:3c:32:d4:42:f9:0e:4b:3f:74:
e5:4d:3d:8e:db:a6:02:ea:5f:73:9b:7d:a0:2e:03:24:93:28:
51:4f:f0:a2:97:62:d2:ff:ed:52:2b:2b:05:eb:02:c0:24:52:
2a:90:e7:ab:35:3f:82:3e:fd:63:93:f4:54:6c:b5:20:e9:31:
a2:fb:ac:22:c3:51:49:c4:20:f0:51:52:f6:cc:31:d9:1b:4c:
a6:95:73:91:cf:c4:51:2c:1d:ac:55:89:fb:ca:6d:7f:34:66:
dc:53:99:22:c6:46:d8:12:5e:1f:53:39:b0:7c:47:4c:da:f7:
89:80:87:18:25:0e:53:5c:a0:5b:a9:7c:09:40:3e:21:93:5a:
2d:ca:97:55:9f:79:33:c8:0f:83:65:be:ab:ed:cd:c8:9a:33:
88:00:62:b9:71:58:ee:36:9b:26:44:d3:8f:85:35:83:78:1b:
24:47:64:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:01 2025 by rpki-client