Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/y51hiFPZW-gkNjlGWGRcL6QruIc.roa
File: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (raw, json)
Hash identifier: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=
Subject key identifier: CB:9D:61:88:53:D9:5B:E8:24:36:39:46:58:64:5C:2F:A4:2B:B8:87
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 0194236986CEC00A25EE5C05A719C6F3ACDC
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/y51hiFPZW-gkNjlGWGRcL6QruIc.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42378
IP address blocks: 2a01:190:15fd::/48 maxlen: 48
2a01:190:15fe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:86:ce:c0:0a:25:ee:5c:05:a7:19:c6:f3:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb9d618853d95be82436394658645c2fa42bb887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:7d:3c:dc:5f:b9:51:19:f6:23:c9:cb:21:
fe:78:33:b0:89:d9:e2:56:98:c9:a6:d1:44:06:06:
5e:ed:47:95:94:f6:de:bb:40:f2:e9:cd:a1:a5:ce:
9b:3a:0c:fb:1e:4e:57:2a:e6:70:dd:9d:b6:30:e7:
d1:1c:90:67:8d:ba:c6:26:33:5d:67:ac:0c:81:43:
6c:04:52:0b:88:2b:50:66:9d:e1:bd:e1:1e:58:10:
2e:ac:a9:c6:86:0d:05:42:27:4a:8b:8a:49:d2:9b:
ac:bd:2d:89:8d:9e:db:20:4d:fd:02:5a:50:40:87:
8b:15:23:90:40:21:df:d9:fb:62:70:5e:16:55:26:
45:01:8e:de:31:50:76:8d:bf:2d:ec:1c:ac:1b:98:
3f:92:87:2b:4a:65:61:84:e8:6b:54:61:3c:68:b6:
f4:16:69:4c:69:29:cf:90:f9:d3:65:ad:26:ac:21:
94:27:32:1c:43:92:6f:70:89:d7:eb:13:ba:22:70:
72:c4:1f:c1:ab:a8:06:a5:0a:c5:b5:d7:dc:b4:5b:
5e:79:61:10:0f:f5:07:cd:2a:87:49:d5:08:8f:40:
54:27:c6:f5:d8:7c:8a:98:34:e7:ad:fb:fc:c5:86:
ac:d0:e6:fa:0d:ae:bc:2f:3b:ca:30:49:96:de:bb:
c8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:61:88:53:D9:5B:E8:24:36:39:46:58:64:5C:2F:A4:2B:B8:87
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/y51hiFPZW-gkNjlGWGRcL6QruIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15fd::-2a01:190:15fe:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:85:93:90:01:63:a0:df:aa:ea:14:47:97:8f:6a:1a:8c:77:
ca:2a:4b:46:cf:73:e3:86:c9:fc:82:9e:91:04:fd:46:e1:62:
c4:83:14:1c:93:5e:d2:bf:bc:94:cc:8b:cb:68:07:3a:6c:09:
82:45:8b:81:b9:71:79:45:e5:ca:7d:e1:5f:7b:d7:1b:4f:55:
68:1c:f9:0e:b2:a4:ac:a3:d7:44:08:4a:6f:64:6e:b4:c7:20:
1a:fb:24:cf:d4:87:9f:cc:31:52:13:4e:ff:56:1b:20:bb:5e:
24:09:1f:2a:e1:0b:f0:2c:05:77:27:3b:be:c3:df:01:f3:9a:
a3:22:11:04:6b:6c:1b:17:27:e1:86:2a:84:36:e5:d3:2f:2f:
09:67:5e:6b:d0:2b:eb:aa:2c:e0:df:22:b5:fd:78:15:e0:25:
92:97:9b:86:0e:ae:a6:35:b6:bb:10:2e:11:6e:8e:ac:05:56:
7d:9f:80:f9:e7:02:50:f6:57:e4:8f:b5:b8:be:82:97:c4:1c:
f2:f2:6b:cb:39:7a:45:77:27:2b:87:30:e5:79:ec:ca:26:53:
02:46:09:d8:df:74:c6:6c:99:0f:43:9f:39:99:c3:45:7f:5f:
6f:d5:94:f6:dc:ed:20:8b:bd:3e:93:b7:40:fc:1c:5d:76:91:
15:07:3e:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:15 2025 by rpki-client