Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/YjZtnY0hwobRgnsV2f9G0AiMGUo.roa
File: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (raw, json)
Hash identifier: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=
Subject key identifier: 62:36:6D:9D:8D:21:C2:86:D1:82:7B:15:D9:FF:46:D0:08:8C:19:4A
Certificate issuer: /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial: 0194236A1EFEF4AD7EDE96907394854A1582
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/YjZtnY0hwobRgnsV2f9G0AiMGUo.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214343
IP address blocks: 2001:3e80::/29 maxlen: 29
2001:3e81::/32 maxlen: 32
2001:3e82::/32 maxlen: 32
2001:3e83::/32 maxlen: 32
2001:3e84::/32 maxlen: 32
2001:3e85::/32 maxlen: 32
2001:3e86::/32 maxlen: 32
2001:3e87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1e:fe:f4:ad:7e:de:96:90:73:94:85:4a:15:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62366d9d8d21c286d1827b15d9ff46d0088c194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:44:9f:24:f7:09:6f:08:a2:99:be:93:dd:
17:dd:06:9c:d9:2a:2e:a6:9c:ab:43:b3:d3:df:58:
4f:ca:78:c9:f2:40:01:99:21:05:89:7d:6c:36:69:
7a:1f:8d:66:a1:bd:73:30:d6:51:f9:1b:ab:24:82:
ef:b0:a1:e3:c6:9c:e0:6b:03:f1:06:b4:ae:10:f9:
3a:64:18:c6:bf:30:ab:2d:3c:d1:99:61:dd:10:67:
6c:b5:ea:c9:e9:45:8b:12:b2:0d:95:b1:0a:13:58:
c1:25:a7:d8:25:89:03:51:90:93:9d:9d:df:f2:c5:
58:52:fd:1c:dd:78:e9:dd:2b:8a:44:4c:3b:1d:9f:
b9:b8:5d:ac:89:51:4d:94:a2:f2:11:d1:0f:8d:52:
b4:46:13:04:d0:b6:2b:e4:c9:c7:ef:21:30:23:e0:
c6:80:66:c7:70:45:a0:13:09:46:c0:e9:89:bd:47:
06:a6:82:b3:15:4f:ea:34:29:c9:bf:25:cb:24:e0:
6e:b8:b0:18:f7:2d:d2:9c:53:c9:dd:a9:6b:35:a5:
ec:a9:bb:0a:dc:1e:82:4b:73:b7:58:02:6c:95:fa:
52:88:c8:80:fe:d4:59:1f:9a:6e:14:18:0d:7e:86:
07:df:8e:4f:3b:9c:76:e2:c2:37:9c:96:96:55:97:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:6D:9D:8D:21:C2:86:D1:82:7B:15:D9:FF:46:D0:08:8C:19:4A
X509v3 Authority Key Identifier:
keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/YjZtnY0hwobRgnsV2f9G0AiMGUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
18:10:dc:92:47:5e:d4:bb:ca:a9:d8:d1:df:40:f2:b5:44:48:
72:28:95:52:51:58:d1:0e:a5:1e:a3:71:d4:4e:1d:02:60:29:
8f:13:8f:a5:0c:df:b1:af:2c:36:e5:1d:d4:4c:9d:49:c4:89:
73:5b:65:0c:3d:a6:82:85:dd:48:a4:59:f2:f8:5e:2b:95:6f:
1a:01:28:9b:52:b7:5d:bf:0a:40:91:b8:8a:55:cc:40:37:2c:
b2:04:4a:e5:5d:97:43:c1:c7:16:ba:d0:fb:08:6a:80:61:cd:
fc:25:9a:a0:8a:18:b2:70:f3:04:cd:fd:1d:4d:0a:6e:fd:59:
99:fe:89:e2:8c:7b:c3:b7:d2:b8:e1:da:be:ae:52:eb:f6:db:
63:6f:ec:f9:69:c2:92:99:e5:a6:ef:87:fc:41:77:33:e6:73:
a2:6c:11:52:69:05:ee:90:58:f8:af:ef:cd:97:32:89:e4:15:
1a:d8:64:58:b8:78:0b:a6:6c:31:78:33:93:be:61:40:53:b7:
1a:67:ee:2f:fc:37:bf:3b:bd:74:16:27:3d:85:18:c5:8a:20:
d0:34:5c:73:4b:09:7f:13:7a:2e:33:80:30:7a:c2:30:2c:bc:
b8:b9:e3:b7:ae:f1:36:7a:c0:88:d0:4c:98:d6:e7:7e:05:a8:
97:ba:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:27 2025 by rpki-client