Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Yz-y591eNOrcrLSkt7bX4CY92Hg.roa
File: Yz-y591eNOrcrLSkt7bX4CY92Hg.roa (raw, json)
Hash identifier: oW3oUBZKt4uL8vuRz0uNo1Cj56FiYIaWKe1rVvQOsZY=
Subject key identifier: 63:3F:B2:E7:DD:5E:34:EA:DC:AC:B4:A4:B7:B6:D7:E0:26:3D:D8:78
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 0194221FF3DB1F7F704EAB779148743CF4E3
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Yz-y591eNOrcrLSkt7bX4CY92Hg.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203629
IP address blocks: 2a13:3306::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:db:1f:7f:70:4e:ab:77:91:48:74:3c:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=633fb2e7dd5e34eadcacb4a4b7b6d7e0263dd878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:b2:bf:e3:9b:b1:40:3c:0f:10:93:3d:f3:
04:74:bd:1f:76:bd:13:a8:62:da:ce:31:e6:d4:55:
bb:8d:31:1e:1d:ae:cf:ca:fe:ee:10:22:ee:cd:da:
a3:b4:8d:2c:6e:ba:15:8a:e3:4d:10:61:99:4f:80:
03:93:76:8f:65:c3:79:6b:2e:d6:95:80:4f:eb:14:
ef:de:83:f4:0b:8c:62:e3:0a:c3:7c:ac:f9:3e:c7:
e0:d3:bd:1c:ee:39:c1:fb:9c:3d:58:70:97:28:96:
f2:5f:1b:07:af:26:cd:ea:4f:a3:ec:dd:08:b8:f3:
e0:08:ef:34:07:e1:7f:f9:b9:22:37:49:fb:1e:6a:
f4:53:9d:b1:1f:f3:8b:31:12:80:f5:24:eb:bb:64:
d2:1b:b6:a0:8b:cb:ca:40:b8:97:54:d2:ef:93:ad:
54:8b:18:cb:02:cf:a9:66:dd:c2:f3:3e:5a:68:53:
1d:75:ee:1f:fb:25:37:df:df:e6:e2:a4:0c:f0:34:
4e:ae:38:40:c1:7e:67:c6:7f:0b:df:04:49:ff:76:
a4:c7:6a:97:1e:2c:20:76:ea:c3:37:70:db:01:a9:
de:dc:d7:e7:9d:86:5e:ec:b3:bb:7e:0c:c0:d8:7b:
e2:4a:50:aa:c7:a2:eb:b8:17:fb:53:7a:a7:10:d6:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3F:B2:E7:DD:5E:34:EA:DC:AC:B4:A4:B7:B6:D7:E0:26:3D:D8:78
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/Yz-y591eNOrcrLSkt7bX4CY92Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3306::/32
Signature Algorithm: sha256WithRSAEncryption
5a:5a:62:c6:3b:e3:c2:91:34:30:67:4c:84:d3:c4:7d:11:13:
6e:f4:de:ff:20:a8:ef:f7:bc:8b:d4:42:11:b4:4a:8c:c3:62:
fc:19:3d:39:dd:47:ff:15:c4:8c:9a:6e:ed:46:1a:e9:ca:eb:
89:5f:7e:14:a4:62:5c:5e:85:61:ab:5b:be:5a:6d:16:9c:50:
6d:d6:2b:59:a2:82:86:d3:7d:5e:9d:56:62:5e:61:34:ea:28:
de:c2:e1:18:cf:79:55:be:72:c3:79:77:b7:a0:3e:92:4f:a0:
7f:6d:4b:4e:38:0d:dc:ba:dc:c9:61:5a:a6:ef:1c:62:d8:fd:
22:43:b0:bc:08:9c:f9:5e:d2:cd:46:fd:66:8c:02:2f:8d:ba:
02:7b:ce:69:c6:f8:10:aa:73:92:32:4e:1a:85:db:08:01:ab:
05:88:6a:74:01:4d:96:e3:b7:1a:3a:33:6d:4d:f2:be:75:31:
3b:3e:46:5e:b6:3c:be:f6:b6:42:71:9a:c2:e4:93:32:1f:d6:
8b:45:c2:8d:1d:02:4b:98:b5:4e:8e:24:0a:ea:4d:ec:93:42:
1f:ee:74:7d:7e:24:48:7a:ba:da:08:03:e9:60:45:d6:57:6a:
89:6a:2d:ec:a4:15:19:49:31:54:12:6d:f6:cb:c8:c6:01:c7:
31:d8:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:00 2025 by rpki-client