Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ymZdEzMVegQJBBFPgdqPQzW1-gk.roa
File: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (raw, json)
Hash identifier: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=
Subject key identifier: CA:66:5D:13:33:15:7A:04:09:04:11:4F:81:DA:8F:43:35:B5:FA:09
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0194228D8D30091CDDDA06A5E3E7059D48A1
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ymZdEzMVegQJBBFPgdqPQzW1-gk.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34432
IP address blocks: 2a0d:f9c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8d:30:09:1c:dd:da:06:a5:e3:e7:05:9d:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca665d1333157a040904114f81da8f4335b5fa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fa:f9:71:ea:66:a8:1d:47:67:56:1a:80:fe:
14:0a:83:5c:43:9b:b6:6f:29:4c:99:33:87:9d:d9:
2c:05:70:f5:30:cc:90:85:0b:0b:dd:0a:04:86:00:
ed:e5:f3:bf:20:81:3f:62:88:f2:fc:b3:dd:c9:02:
f6:f7:91:47:1b:15:50:35:8a:01:d2:6d:8d:58:ba:
7e:29:2c:b6:45:f4:ac:b3:54:2c:7b:9b:60:6e:f1:
22:2f:85:11:0c:bf:5b:7c:2b:71:0e:94:ec:e5:06:
be:f2:0e:b1:17:11:3a:47:2a:8a:c3:2f:f1:a1:60:
b7:79:7e:68:bf:e6:3a:41:81:7c:0c:53:2c:08:e6:
31:cc:47:d7:3d:12:e1:e3:a0:21:43:0e:fc:c5:c8:
ae:95:8b:3e:0f:b4:09:f3:a8:6a:fe:8c:83:81:fd:
3d:cd:92:95:6c:a8:7d:f5:a8:46:fe:0f:ed:7e:58:
44:22:25:e4:3d:2c:c2:5f:8b:05:ba:cf:26:5f:68:
f8:3a:82:48:80:31:5c:40:e9:8a:4a:3d:6f:f6:b4:
d2:de:db:58:e4:fa:74:36:80:e5:08:a6:52:04:26:
07:e7:61:d9:7a:31:96:1a:11:94:cd:68:56:1f:5d:
e6:6d:60:92:23:db:87:1f:df:22:98:26:06:80:47:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:5D:13:33:15:7A:04:09:04:11:4F:81:DA:8F:43:35:B5:FA:09
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ymZdEzMVegQJBBFPgdqPQzW1-gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f9c1::/32
Signature Algorithm: sha256WithRSAEncryption
d9:44:94:e6:d6:52:ec:45:a5:fa:48:2f:c0:21:19:ac:66:35:
5d:f4:86:4e:eb:49:c5:f3:b1:57:58:41:77:5b:27:bc:ba:c3:
01:2f:cd:b1:c7:33:12:a7:eb:c6:4d:3d:0c:1d:5a:19:89:fc:
37:35:9e:91:31:73:e4:70:b9:b9:c5:91:08:bd:f1:3c:4c:3a:
4f:98:bf:c9:da:a8:d0:7b:d3:52:9f:df:23:45:8c:fb:c8:8e:
c2:70:3d:bf:ab:92:08:a6:63:6a:87:6e:4a:90:3b:e6:42:59:
96:f2:23:d4:00:73:f6:3e:1e:c3:18:4d:94:d7:e6:23:58:5d:
6c:08:9b:89:9a:b8:d1:c3:ab:9e:60:8f:87:9f:7c:38:68:45:
48:b5:78:f0:60:89:9b:90:db:0f:85:f2:bd:ac:74:b0:cb:83:
ab:2b:92:10:92:39:0e:8e:71:23:32:23:2f:3a:99:ed:e5:f3:
16:7a:53:8e:b7:26:d3:b6:d6:07:79:34:23:c5:ed:c4:81:8b:
f5:65:0d:02:8f:9a:c5:31:8d:94:63:aa:50:2c:3b:cb:8e:7a:
89:a3:72:6c:42:58:00:ba:23:1c:a5:6e:38:27:2c:8f:7f:49:
d6:32:1d:38:85:e0:56:08:34:e8:b9:f8:42:05:19:38:9a:07:
ef:f2:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:23:02 2025 by rpki-client