Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/yYWhaIMfViLSRK7iCwEAT16QCWQ.roa
File: yYWhaIMfViLSRK7iCwEAT16QCWQ.roa (raw, json)
Hash identifier: yffkf4KTnpRp9maayh8gyACoZv6UI+i5f7qUIcHlPJY=
Subject key identifier: C9:85:A1:68:83:1F:56:22:D2:44:AE:E2:0B:01:00:4F:5E:90:09:64
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B22179419F8CDB41D80573881CB666
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/yYWhaIMfViLSRK7iCwEAT16QCWQ.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8248
IP address blocks: 2001:648:2300::/47 maxlen: 47
2001:648:2302::/48 maxlen: 48
2001:648:3400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:21:79:41:9f:8c:db:41:d8:05:73:88:1c:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c985a168831f5622d244aee20b01004f5e900964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:53:33:5a:1a:a6:14:7e:80:60:fc:3a:8c:
e3:67:42:0b:63:6f:e3:00:4a:01:06:58:45:17:36:
80:0e:2d:db:03:7e:08:c4:6a:1c:8d:b5:94:01:8c:
6d:db:e9:96:2e:fc:6d:81:9d:68:4d:58:75:c2:de:
fb:a3:c3:5e:1a:44:c8:f6:3a:df:63:35:19:ad:0a:
3c:eb:8c:06:a2:c0:51:e1:61:38:b1:d1:8a:b1:d3:
35:6e:d9:7f:c3:2c:a5:71:18:1b:e3:fc:19:16:70:
88:3f:59:41:0d:fa:11:c7:ca:5c:62:a2:45:69:b8:
7e:dc:89:55:b4:37:cf:39:af:4e:d5:ca:3f:90:f2:
f1:0e:86:ac:67:3a:88:a8:d7:98:3c:ec:f4:1c:a2:
a8:d2:85:c6:d9:5c:31:c8:1d:32:5d:14:a9:5a:57:
ef:9a:cb:f3:c8:06:80:1e:59:c4:8b:ce:5b:85:68:
d0:50:9b:b5:11:7f:14:ce:7f:1f:7f:44:92:d4:bc:
eb:11:33:d5:c1:92:12:f3:87:1b:9b:a6:93:b5:79:
bd:9d:0c:7e:4b:e0:20:62:01:64:4c:ca:31:12:31:
f6:75:47:f7:e2:77:ba:80:06:bd:23:89:4c:00:2d:
c2:dc:05:1e:27:82:80:8c:57:21:3e:0e:02:22:4b:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:85:A1:68:83:1F:56:22:D2:44:AE:E2:0B:01:00:4F:5E:90:09:64
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/yYWhaIMfViLSRK7iCwEAT16QCWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:2300::-2001:648:2302:ffff:ffff:ffff:ffff:ffff
2001:648:3400::/40
Signature Algorithm: sha256WithRSAEncryption
3f:0d:fa:2c:05:2b:50:56:52:9a:7e:a6:8a:aa:80:d4:52:30:
37:75:97:df:73:4f:a9:4d:57:20:67:8d:e7:cf:a1:e3:d4:df:
b5:38:b5:83:2a:34:e1:e0:11:5e:55:c5:82:c4:31:ba:b7:5d:
45:1c:f9:fb:a6:60:cd:17:d3:cc:b0:4e:56:f3:ed:28:cb:ca:
80:1e:6b:a4:48:86:12:8d:1c:de:99:45:73:c1:e9:36:0f:57:
7b:3e:71:8f:f2:e6:54:a0:44:aa:b3:59:8e:0e:aa:ec:c9:80:
e7:28:48:d3:cd:ae:0c:1a:5a:a0:21:e8:44:d1:84:09:9f:43:
86:8e:4f:fe:c0:0e:9f:ea:f0:f3:5a:f5:6b:b3:b6:99:23:ac:
50:10:36:a4:cc:c7:84:a9:c2:4f:d6:33:e1:d1:ce:82:50:d8:
50:fa:31:8e:0a:b9:bf:79:65:36:ec:2b:e9:b1:a2:d5:a4:c5:
ae:70:60:eb:1f:86:6a:99:6c:26:83:19:77:d7:48:8f:84:e1:
65:e9:b2:6a:91:4d:5a:9d:6b:3d:b6:78:c0:35:cf:53:fd:32:
28:15:b5:a2:99:35:fe:18:0c:30:97:ae:f8:49:08:eb:a4:5d:
27:fa:94:2e:67:a9:9d:a8:f1:89:2b:7b:64:22:1f:bd:b4:b2:
43:e2:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:47:39 2025 by rpki-client