Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ykf6r3W72AfwkC3h2eGZ4ABwhNI.roa
File: ykf6r3W72AfwkC3h2eGZ4ABwhNI.roa (raw, json)
Hash identifier: ty/VhpAobU4StjAeKciwBjwD3lmjsFftthbVG6+gkYY=
Subject key identifier: CA:47:FA:AF:75:BB:D8:07:F0:90:2D:E1:D9:E1:99:E0:00:70:84:D2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB79BFE3E6BB36642E83A46447503E
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ykf6r3W72AfwkC3h2eGZ4ABwhNI.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204916
IP address blocks: 2a0b:9007::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:79:bf:e3:e6:bb:36:64:2e:83:a4:64:47:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca47faaf75bbd807f0902de1d9e199e0007084d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:df:e8:db:cc:87:22:f0:c1:9e:06:a1:1a:
59:18:c4:8d:f3:07:af:92:4c:ac:40:54:b1:4e:43:
ff:4a:68:a6:10:6b:7c:69:70:5b:2b:e8:4a:85:f7:
ab:20:c2:8f:da:57:5c:3b:39:de:01:c1:fa:86:57:
4c:fc:48:fb:e6:09:48:23:65:0f:ef:ee:d4:06:42:
e7:cd:23:5f:ab:9c:e5:b4:61:6b:0d:19:6d:61:af:
63:c5:bc:64:03:cd:c3:0a:eb:58:d0:20:b8:fc:7b:
ef:49:4e:8c:f1:7a:b7:56:96:e6:29:50:60:09:54:
84:15:b4:1d:87:81:2d:3f:0d:e3:d1:d5:2e:98:e2:
ef:bc:9d:85:3f:f8:ba:db:b8:d6:c3:65:71:c0:38:
d6:70:fd:dd:4f:5c:fa:7e:c6:10:c8:a8:59:8e:90:
e1:e8:04:07:7d:cd:e8:0a:7b:ac:bc:2b:8f:f5:7d:
86:25:18:26:7f:b4:2f:81:92:76:d6:6e:e3:fe:fe:
39:53:b5:49:be:5a:bd:63:84:dd:76:66:26:86:5d:
4b:7a:57:93:74:2f:2a:0f:44:a1:90:3e:c4:45:6f:
ad:3b:b1:79:49:e3:e4:08:b5:00:69:a1:bf:19:80:
d4:05:a2:b3:93:0b:ab:c4:93:c5:51:5a:da:e7:f5:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:FA:AF:75:BB:D8:07:F0:90:2D:E1:D9:E1:99:E0:00:70:84:D2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/ykf6r3W72AfwkC3h2eGZ4ABwhNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9007::/32
Signature Algorithm: sha256WithRSAEncryption
1b:57:81:9d:9d:71:8c:23:f8:03:23:4e:45:68:2d:f0:57:bd:
f4:6b:b3:df:bb:cb:f5:bf:d6:20:e4:88:0d:77:a9:18:96:fe:
dc:bf:ba:1f:56:e6:7f:d3:80:f0:6e:6d:80:52:05:6e:1c:79:
cb:61:60:bd:ee:19:8b:fc:6e:94:a5:e9:f5:81:e1:15:58:20:
17:21:1f:33:8a:70:f5:8d:85:a2:02:ee:bf:b3:cb:65:c4:fe:
d9:51:7b:4e:5d:5f:7e:86:d8:6f:e5:b3:bf:cf:bd:4e:5f:24:
49:f4:33:13:9f:2e:cf:bc:d7:49:77:cb:ff:5b:fd:1f:af:c5:
67:e3:56:8a:2f:1d:61:84:a2:60:6f:44:7c:0c:bb:86:4e:15:
ef:65:7e:2f:c8:e4:01:94:49:6b:fd:47:7d:e6:9c:ec:5a:aa:
f6:e9:11:51:42:30:70:4f:28:cb:80:3a:f3:f1:0b:46:61:3b:
c2:8b:1c:82:b8:b4:86:52:a7:1f:1f:3a:f4:d7:0e:b7:6f:df:
9c:36:eb:44:ba:94:db:23:0a:86:1f:67:dc:99:1a:ac:c8:81:
f9:47:db:92:cb:f8:54:d5:4c:cb:6b:29:14:02:41:8e:7e:e0:
41:87:de:d0:77:7c:bc:be:69:f3:81:c3:5f:e8:0d:36:b2:6b:
3e:f0:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:37 2025 by rpki-client