Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa
File: Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa (raw, json)
Hash identifier: 4WQg20bCRgaZBVClPe/ndX9hPwZNZeu+B3wqx3iNyco=
Subject key identifier: 61:DE:6B:FD:01:10:F7:B5:31:AD:28:97:BD:1F:07:33:0F:D7:06:D7
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 01942827341E9239CEFA1A87EE0404579F96
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa
Signing time: Thu 02 Jan 2025 17:54:05 +0000
ROA not before: Thu 02 Jan 2025 17:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214996
IP address blocks: 2a0a:4cc0:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:34:1e:92:39:ce:fa:1a:87:ee:04:04:57:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61de6bfd0110f7b531ad2897bd1f07330fd706d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:6e:82:2e:41:05:17:b4:af:a3:ce:e7:b0:
76:05:06:98:fc:ba:38:97:13:43:a1:31:a8:3f:e8:
26:70:d9:54:3c:1e:20:82:99:85:7d:b3:81:1b:ba:
80:f9:d9:94:e1:7c:84:c5:86:9a:79:20:0a:27:5f:
f2:5d:63:c6:10:7d:b6:a5:37:7d:6f:68:26:81:bd:
51:f3:37:9c:1e:af:c5:8f:ca:9b:84:7e:33:ba:eb:
76:7a:0b:cd:1a:7a:1f:b4:40:57:f1:c1:e0:85:a6:
6a:65:fc:05:f9:c9:68:69:f8:5d:63:ff:39:aa:c9:
24:31:83:98:5d:ed:22:96:27:9b:eb:74:dc:1d:ed:
db:c1:5c:48:76:fb:5f:7a:c8:7c:7c:0f:47:e2:2c:
ad:0b:19:9c:7a:29:3e:87:ec:bf:0b:db:70:89:87:
57:de:ec:36:e6:1e:b0:83:de:74:a2:fa:af:cb:ee:
45:cd:06:78:41:b7:a4:ea:d4:80:73:3e:8e:8a:7d:
69:db:f9:df:71:5d:dd:7d:98:56:01:5f:4f:dd:65:
67:c5:e6:32:35:19:6e:e9:d8:d7:b2:25:61:c2:2d:
f8:0b:9d:7f:10:40:21:44:ed:6e:52:2d:b4:e8:ea:
55:bb:61:f2:55:dd:5a:6b:75:da:70:8a:21:a9:1b:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:6B:FD:01:10:F7:B5:31:AD:28:97:BD:1F:07:33:0F:D7:06:D7
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4cc0:2000::/48
Signature Algorithm: sha256WithRSAEncryption
b0:cc:85:c2:f2:b0:7b:29:02:7d:fe:8c:01:47:2a:1a:1c:2f:
d6:8c:4d:cd:ee:30:d7:f4:78:94:f6:cd:57:0a:40:d4:82:b9:
75:11:3a:3e:e4:63:56:d0:57:47:7a:35:4d:e1:d7:9b:9c:87:
0f:00:fd:d7:59:cd:2d:87:47:fd:ec:6c:95:48:e6:70:fa:90:
8b:70:41:a0:e9:49:3c:09:ff:85:6b:07:cc:d5:9a:7b:3a:88:
54:83:f7:b5:fd:d1:9a:73:44:c9:b2:cf:7f:4c:c5:ea:70:a9:
ef:ee:15:8f:02:6d:c4:8e:3a:de:d3:a8:ee:3f:c5:3a:da:6d:
a5:dc:c8:3a:ea:ba:f1:4c:81:03:c7:71:5b:2f:4d:8f:76:b0:
94:94:08:39:4a:d3:73:ed:df:76:4d:08:f6:4a:37:ed:5c:eb:
91:62:f5:30:0f:32:02:3e:67:37:0b:3c:c5:03:86:1c:f7:2d:
fc:b0:42:a4:f8:d2:2c:c5:b5:22:1b:a9:59:02:da:24:2a:4b:
8b:69:82:97:fb:77:6f:29:90:40:68:30:f9:77:f6:4a:42:e8:
5b:ec:30:73:d4:c2:23:c4:d8:4d:bb:84:9f:1c:e1:71:c8:bc:
a3:f2:ef:29:22:fc:8f:43:af:15:1c:94:f0:9f:49:05:89:59:
94:87:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:24:32 2025 by rpki-client