Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/YVDiu2Bt78Tw59IN2GiD08sPbEY.roa
File: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (raw, json)
Hash identifier: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=
Subject key identifier: 61:50:E2:BB:60:6D:EF:C4:F0:E7:D2:0D:D8:68:83:D3:CB:0F:6C:46
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019422200F1BF39E45F46D1F7401CBF1EA29
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/YVDiu2Bt78Tw59IN2GiD08sPbEY.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12525
IP address blocks: 2001:67c:554::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:1b:f3:9e:45:f4:6d:1f:74:01:cb:f1:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6150e2bb606defc4f0e7d20dd86883d3cb0f6c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:2c:bc:06:e4:39:3a:73:d7:b0:9b:50:38:
6a:66:9a:b2:e1:73:dd:0a:0d:b9:07:67:35:5e:6e:
ec:53:c3:57:df:c0:fd:06:f2:42:34:6e:3c:99:24:
17:3e:63:15:92:d9:46:4d:d4:74:fd:c9:37:60:f8:
04:21:81:af:04:3f:01:87:1e:54:99:e3:8a:55:cd:
dd:49:1a:ec:40:8a:ac:54:f7:9a:c0:a5:a8:a9:ab:
c7:57:65:db:80:fa:15:fa:0b:50:a0:76:3c:d7:94:
72:ed:cf:5b:e4:61:3e:04:4a:bd:f4:54:0e:14:18:
73:9a:62:ed:ca:ac:12:44:be:07:68:c0:df:74:09:
e2:d5:7c:73:1e:0b:05:a0:34:06:19:5c:e6:13:c7:
30:ac:87:d7:53:c7:2f:40:b1:83:89:37:74:8c:92:
ef:f4:d7:a5:d8:ab:0e:f4:77:37:bb:7b:00:39:0b:
13:80:1a:ba:f9:e4:d7:af:6c:89:11:c6:ce:cf:32:
87:92:4d:77:4e:3c:01:24:50:08:ad:60:fc:01:ad:
34:7a:9e:c1:6f:95:18:9a:63:82:43:ef:bb:22:85:
4c:86:4e:87:0d:15:7a:2f:c9:87:bc:44:4a:c3:dd:
2b:fd:51:48:b2:9b:bf:57:01:9c:86:ae:c7:70:60:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:E2:BB:60:6D:EF:C4:F0:E7:D2:0D:D8:68:83:D3:CB:0F:6C:46
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/YVDiu2Bt78Tw59IN2GiD08sPbEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:554::/48
Signature Algorithm: sha256WithRSAEncryption
ac:19:28:97:7d:6c:df:57:9f:8b:27:d5:c2:2d:3f:3f:68:86:
ea:5d:c5:ce:a5:01:6b:5d:6f:c4:d1:2d:c0:82:1d:ea:2c:a2:
ea:95:e8:c9:85:29:96:ba:fe:0a:64:9c:77:54:05:94:d9:5c:
55:f7:4d:56:65:aa:53:c1:96:d2:ad:f3:1f:e7:8b:81:5e:22:
c8:2c:e1:bb:79:f7:ec:b3:3f:84:64:10:aa:59:73:1e:a5:20:
8b:e2:d0:61:fa:4a:83:a1:ef:be:9b:32:0c:07:12:3f:05:c1:
23:81:42:c3:eb:d0:c7:26:dd:85:4b:25:9a:45:b0:d9:84:71:
e5:59:ae:76:f4:c2:8d:38:73:73:f0:be:02:43:c3:c2:2f:13:
fb:98:8b:00:1a:f9:b6:74:04:b0:67:e1:d8:39:84:c7:50:69:
c8:15:ca:ff:2d:72:63:19:a2:3f:8d:f9:74:e4:e2:7d:06:ce:
4e:11:e9:7f:b3:dc:bc:f3:93:cd:58:41:75:9b:aa:21:91:73:
49:2c:28:3f:01:26:a3:7d:49:f9:e4:c4:e7:e9:80:46:8b:5e:
02:67:b7:c7:15:0b:43:1d:e0:1d:f4:f7:7c:4a:64:0a:6b:36:
74:6b:63:dc:d1:0d:d6:3e:5e:8d:81:77:2e:10:38:3e:f7:28:
c2:28:5d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:55 2025 by rpki-client