Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ymtbjdND0LTy-moLRemllsNnan8.roa
File: ymtbjdND0LTy-moLRemllsNnan8.roa (raw, json)
Hash identifier: hfkquOIaeqomW349otWa5ZxmiEFZICuXLBtiYpSmsqc=
Subject key identifier: CA:6B:5B:8D:D3:43:D0:B4:F2:FA:6A:0B:45:E9:A5:96:C3:67:6A:7F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019424459FF0040CC2F3652BCD9C3E5417D9
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ymtbjdND0LTy-moLRemllsNnan8.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a10:6c40::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9f:f0:04:0c:c2:f3:65:2b:cd:9c:3e:54:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca6b5b8dd343d0b4f2fa6a0b45e9a596c3676a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:7a:d8:e2:e3:7d:df:31:55:27:b6:c0:56:
49:d8:31:11:48:01:df:2f:9e:98:44:96:d2:d8:75:
81:64:5a:72:21:08:16:6d:de:5a:1c:d4:6f:c2:58:
1a:fd:27:6e:4e:7e:78:cb:0e:ea:84:77:eb:ad:23:
e4:87:02:e8:94:83:1b:ce:ca:ab:8a:ef:2b:e1:70:
ff:4a:6f:37:20:18:f8:c4:be:d7:1d:e9:5e:e1:fd:
e5:9e:eb:17:be:7d:b5:aa:2b:06:ba:5b:4c:e4:97:
56:5c:3a:ea:7e:b6:92:46:6e:4d:61:1f:b2:f6:5b:
ab:ee:73:ce:67:23:c6:25:0b:44:72:99:cb:57:9d:
62:60:37:09:68:19:46:d9:cc:12:06:42:52:bb:4e:
ff:50:56:3c:ad:71:58:e0:ab:58:94:b1:8b:11:cf:
a0:bf:f4:0b:ce:ed:7c:3c:f7:28:95:b2:cc:1b:e0:
28:dd:f3:41:66:2e:6c:c9:14:3e:14:23:4a:d0:da:
61:13:5b:52:05:8d:de:64:2f:db:f3:25:e9:0b:09:
9f:2c:0b:74:83:d2:90:e7:08:17:30:d6:26:ee:27:
51:9a:4c:83:c5:f2:2b:c9:75:ea:6a:f5:f9:d4:fe:
08:46:b1:2a:ac:18:25:c9:e7:48:2f:ad:65:d7:c3:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:5B:8D:D3:43:D0:B4:F2:FA:6A:0B:45:E9:A5:96:C3:67:6A:7F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/ymtbjdND0LTy-moLRemllsNnan8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:6c40::/29
2a10:9600::/29
Signature Algorithm: sha256WithRSAEncryption
55:a8:4b:d0:44:0d:2b:f6:0e:85:4d:72:ab:aa:7e:68:fe:e0:
d1:28:15:c9:7f:cc:b6:4a:bc:e7:a8:b9:17:31:35:4a:76:97:
7f:60:aa:0d:13:52:5b:fd:f9:d7:34:ce:c4:59:1f:85:b6:03:
bb:a0:10:37:c1:70:53:95:2a:82:10:b2:da:f5:6d:4d:a5:cc:
a6:26:f8:c8:6f:33:5b:3e:1d:52:f1:c3:bc:4a:19:ec:0b:bd:
21:02:46:ca:18:74:6a:13:67:e8:ff:8c:0e:ec:6a:2d:7a:61:
ea:26:fa:e7:2e:db:22:3b:1d:7b:ce:3c:47:2c:52:3f:be:a3:
7f:33:18:0d:ac:db:87:af:4c:92:ee:2a:39:3b:f3:ae:b5:c1:
59:71:14:0d:5a:85:98:cb:fe:62:92:45:bb:41:7b:74:9d:df:
2c:aa:4d:21:3e:be:42:05:e3:ca:0f:d8:cb:1d:97:6b:81:67:
ac:92:17:52:c6:e7:5c:4e:7f:6a:72:c6:11:64:51:a7:62:6f:
7a:6b:21:e3:77:24:fc:f9:7b:23:43:67:56:31:f6:24:d0:04:
61:d5:c9:9d:ee:2d:a7:4f:00:6b:79:5d:a9:d5:df:e2:6c:d3:
6a:f9:38:52:72:31:a9:1b:fe:9e:39:28:4c:e2:14:ae:b5:5e:
2a:e0:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:46 2025 by rpki-client