Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0YnsI6_UG6-RAWypIRXKDYAgDkQ.roa
File: 0YnsI6_UG6-RAWypIRXKDYAgDkQ.roa (raw, json)
Hash identifier: yyHqiQr9jFvvpyTcaHXB1vpOZZHcJyAQbIvZ6xMsYXg=
Subject key identifier: D1:89:EC:23:AF:D4:1B:AF:91:01:6C:A9:21:15:CA:0D:80:20:0E:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521F8D76796D1ED5DB54DDEF7C04D95
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0YnsI6_UG6-RAWypIRXKDYAgDkQ.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199052
IP address blocks: 2a0e:b107:2070::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f8:d7:67:96:d1:ed:5d:b5:4d:de:f7:c0:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d189ec23afd41baf91016ca92115ca0d80200e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:67:7b:03:db:b2:e8:fa:ee:46:b6:62:d0:
e6:90:37:d8:43:04:50:4e:44:f8:5a:de:3f:9a:56:
1b:1a:c9:6e:ac:c8:b7:98:9d:71:40:ee:d1:73:4f:
5f:fd:e6:03:17:fc:d5:82:72:b5:24:62:ce:58:69:
1e:a7:bc:41:ad:4b:42:4f:c9:83:b4:9d:df:e9:ca:
35:e3:15:2a:01:94:cc:e0:ea:d4:65:ab:23:52:e5:
cf:b5:35:1b:c9:c8:22:6d:86:6f:50:81:4a:93:87:
30:54:2b:1e:89:b6:96:f9:42:6e:56:13:1d:2c:ac:
48:f9:1d:f2:9f:04:7d:98:48:e8:e4:ef:2a:3a:31:
1f:42:28:d3:ba:7f:a0:f4:ec:1b:19:54:a2:71:18:
09:88:01:d6:89:f7:04:98:a0:61:aa:37:4d:14:82:
c5:8b:4b:fe:8a:c1:cf:e1:62:e2:1d:f5:35:f5:c0:
c4:b7:64:00:d0:b9:ab:2c:c9:94:95:70:0f:5a:af:
a9:fb:64:2a:7a:86:68:06:ba:ee:6c:de:bb:b7:39:
26:e6:d4:a0:82:71:fc:e3:1c:f8:4e:c2:7d:ec:6d:
01:13:ab:de:cc:59:d2:5a:d1:6a:dc:83:36:1d:00:
d8:80:ea:e2:d5:b3:23:4f:e1:ea:37:5e:b2:da:b1:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:EC:23:AF:D4:1B:AF:91:01:6C:A9:21:15:CA:0D:80:20:0E:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0YnsI6_UG6-RAWypIRXKDYAgDkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2070::/44
Signature Algorithm: sha256WithRSAEncryption
c7:52:b7:9b:47:33:47:df:32:48:3e:7b:b7:14:ce:10:be:c7:
a5:71:8c:55:87:db:d0:1d:fb:b1:23:d9:9b:b0:54:ca:f1:9b:
4c:e1:55:ae:b3:ba:68:5a:9d:c5:39:2f:eb:5b:0a:68:ce:bd:
e1:37:3d:2b:c0:ff:29:43:2f:3a:60:22:21:91:87:4c:a0:32:
fe:2d:bf:20:05:61:30:90:f6:00:3c:69:c0:9c:a2:bb:97:42:
cd:d4:d9:11:f3:b2:71:57:8e:d4:e8:c8:dd:d2:27:d6:05:e1:
37:39:b5:22:7a:23:b1:5d:6b:10:93:34:30:e6:97:e3:c3:98:
0d:90:85:84:4b:cf:6d:a3:ff:1d:3c:1d:26:03:a0:a8:ac:41:
98:5f:6c:7a:b2:07:19:21:8e:5e:21:18:0e:56:89:6a:bf:0d:
1d:78:31:9f:1c:0f:92:c9:1e:44:45:58:c5:71:9e:e9:b1:c3:
44:e9:b8:07:3e:08:83:f9:91:1f:a0:d2:10:7d:37:9c:e7:90:
7b:83:97:29:60:0a:de:bc:26:c7:a0:23:61:bc:4c:86:48:e4:
5c:ff:c4:9a:c8:ee:cf:ae:d0:3d:95:f6:64:16:27:f4:c5:8c:
fd:40:a0:89:e9:e0:3f:1d:62:14:e6:27:b1:2e:8f:fe:1e:4e:
00:79:73:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:02 2025 by rpki-client