Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa
File: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (raw, json)
Hash identifier: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=
Subject key identifier: 62:A5:CE:41:DC:F2:24:62:84:22:C4:51:2A:5A:31:2D:74:84:E8:CB
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 0194258F44BCEE52FEDE080ACC7970790442
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56740
IP address blocks: 2a0a:7d80:2::/48 maxlen: 48
2a0a:7d80:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:44:bc:ee:52:fe:de:08:0a:cc:79:70:79:04:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62a5ce41dcf224628422c4512a5a312d7484e8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:9c:94:d3:5f:23:51:32:e9:14:c0:ca:52:
27:97:14:e3:74:fe:a9:ba:88:a1:33:a2:71:cd:2e:
96:5d:59:07:55:e8:aa:75:bc:c5:87:75:a1:6b:ae:
fc:9b:fd:59:b3:cd:9b:30:e1:77:18:84:04:4c:6f:
ec:8b:e1:a0:76:26:25:09:5e:6b:f2:17:d1:7b:50:
3e:f9:0d:17:66:6d:cb:51:30:68:4d:4f:77:6e:8b:
d8:7e:ca:ab:75:aa:08:c3:19:e2:c2:3d:38:fd:2a:
29:1c:47:3c:8b:a7:13:2a:2d:7c:78:94:93:a1:54:
f6:f1:1b:c1:de:b6:4b:34:a2:6b:3e:a4:0d:50:15:
d1:1e:22:f9:3e:b0:0f:c6:54:f3:4b:0c:9d:99:e6:
71:fa:30:be:fe:91:60:76:33:be:f4:c1:c6:ed:8c:
02:a2:fe:6d:9f:4c:a6:da:ad:6b:f2:6b:34:bd:50:
81:fc:72:29:fd:c9:93:07:da:14:70:a2:a0:23:b8:
be:a5:81:43:8a:96:1a:ef:9f:67:be:31:69:72:51:
ff:05:7d:a1:66:9a:10:18:5c:e2:90:ff:2c:bc:f0:
57:09:b6:df:f2:1f:fd:73:68:85:22:61:23:b7:4a:
26:97:80:75:ed:34:c0:7c:a2:eb:7c:15:f0:49:f4:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:CE:41:DC:F2:24:62:84:22:C4:51:2A:5A:31:2D:74:84:E8:CB
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d80:2::/48
2a0a:7d80:1000::/36
Signature Algorithm: sha256WithRSAEncryption
7e:6e:c1:c7:e3:99:39:32:03:d3:e7:8a:bf:d1:e9:b0:1e:3f:
b5:cf:54:23:39:b0:b1:fc:cf:0a:26:a4:00:af:62:0f:c7:cd:
f4:56:31:a5:b2:b0:4e:ab:3d:39:19:62:00:d7:91:93:92:fd:
cb:42:e6:2b:f6:f5:18:39:49:72:9a:b7:9c:14:7b:0d:2f:9c:
02:f1:35:d7:72:0a:22:62:37:94:92:39:96:86:44:25:e7:b2:
eb:b5:34:ed:d0:0b:9e:ac:85:be:39:3d:ee:0e:c0:21:fc:5b:
89:3b:1b:63:10:ad:30:d1:ff:8b:dd:b4:7b:29:ef:63:01:9e:
35:79:21:31:f0:16:d2:da:fb:9e:94:40:a0:c5:af:dd:95:fd:
18:ca:82:cd:9c:87:de:77:db:b0:d4:49:db:dd:90:e4:13:fe:
aa:02:db:2e:bd:35:73:55:84:57:3a:49:df:26:39:99:96:b4:
af:f6:67:96:06:76:07:7f:e9:f9:be:34:2f:a3:33:89:42:36:
89:31:3e:8d:0f:50:76:b4:b8:e2:50:e5:2b:04:38:e4:4b:3c:
9a:4a:40:22:48:1c:b5:19:e7:00:40:0b:52:01:7c:d0:04:e4:
ca:74:81:57:68:f4:4a:b8:29:14:83:0a:73:56:04:ae:39:1a:
09:c6:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:50 2025 by rpki-client