Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/YySqCkVu4aKNctDheFwKOwvWH7A.roa
File: YySqCkVu4aKNctDheFwKOwvWH7A.roa (raw, json)
Hash identifier: +2oo/pzCMCws9S1DeUCihFyaKnrlYkOh1+Ai/IA99wo=
Subject key identifier: 63:24:AA:0A:45:6E:E1:A2:8D:72:D0:E1:78:5C:0A:3B:0B:D6:1F:B0
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 0198141BF22850790B3492E59FD59D91CBD0
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/YySqCkVu4aKNctDheFwKOwvWH7A.roa
Signing time: Wed 16 Jul 2025 16:40:32 +0000
ROA not before: Wed 16 Jul 2025 16:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30788
IP address blocks: 2a09:3900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:1b:f2:28:50:79:0b:34:92:e5:9f:d5:9d:91:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Jul 16 16:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6324aa0a456ee1a28d72d0e1785c0a3b0bd61fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:be:70:f6:2f:34:c7:6a:b9:34:fd:64:c7:
b4:23:72:49:b8:0e:69:81:65:98:45:d7:0e:4c:94:
b6:ba:dd:50:bb:e6:3c:a9:14:97:77:4c:25:d6:c0:
cd:43:80:64:2d:20:8a:cd:13:6c:e8:50:31:d3:fd:
01:99:ee:4e:93:c7:29:04:ac:50:6b:d3:5d:6e:6d:
f0:9c:17:b7:02:02:85:a1:ed:b4:4b:90:c1:6c:a8:
7b:f3:63:7a:56:4b:c2:a7:2d:fa:35:6c:42:89:c6:
7a:62:b8:42:5d:d3:3f:34:b0:1c:81:1a:77:25:b7:
4f:02:78:b7:73:c3:4f:32:a3:1c:01:4b:8b:36:b1:
a4:bc:1f:42:47:48:49:31:ad:32:69:c7:e1:eb:f6:
47:05:e7:ba:40:fd:bc:8e:d2:52:61:3f:a9:ed:12:
ad:40:0c:6e:fe:4b:9a:55:fe:9f:b2:88:74:8d:0e:
52:90:12:8e:75:f3:83:64:06:31:bc:5f:7b:c6:23:
7d:aa:10:04:16:b1:f0:3e:41:6b:01:7a:59:0e:05:
88:90:c9:7e:fd:f0:47:3d:64:af:d6:07:16:71:88:
0a:30:cd:6e:c2:0d:fc:92:b5:8c:b7:47:7d:6d:a8:
9a:64:49:69:ba:9d:23:7f:7e:5e:bc:5a:48:b4:e2:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:24:AA:0A:45:6E:E1:A2:8D:72:D0:E1:78:5C:0A:3B:0B:D6:1F:B0
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/YySqCkVu4aKNctDheFwKOwvWH7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3900::/29
Signature Algorithm: sha256WithRSAEncryption
6b:12:63:22:19:81:36:96:18:8e:08:a0:fa:2b:ae:29:dd:b2:
5f:06:24:45:63:c2:4f:18:e7:89:5f:15:8d:a2:99:7e:d5:e4:
34:5e:12:f6:1f:83:54:97:d4:83:6a:23:22:52:91:3d:db:2c:
65:ec:8b:ea:7f:9c:29:e2:9d:1d:4e:24:3e:8a:92:b2:dc:f7:
ef:80:53:28:ee:de:85:7f:78:c9:dd:b1:05:24:18:7b:78:4a:
99:a8:ef:1a:d3:b6:ba:91:ac:e2:f7:7f:7a:8c:9a:5b:73:b7:
ed:b8:46:3f:aa:e3:9d:e6:7d:d0:57:35:59:ce:bc:1d:81:69:
61:83:48:ba:ad:ee:b7:db:9a:c9:3e:57:27:65:21:51:ba:30:
c0:f7:b5:9b:e4:72:2b:25:3a:49:3f:1f:b1:2c:db:58:0c:56:
27:5a:90:99:2b:b0:99:99:a3:ee:de:3d:e9:92:98:99:84:ac:
9b:11:34:e2:bb:8c:53:86:69:0b:2a:0a:96:6f:ea:54:2e:3f:
43:df:6f:c8:3a:d8:f2:b6:99:ef:8d:92:97:f1:84:b3:5a:e4:
a8:90:d5:41:14:bb:30:67:3a:01:46:47:a8:b2:b6:f1:97:4a:
97:07:22:8b:6b:71:08:0c:df:4d:ad:73:a9:1d:22:39:fc:17:
c6:8d:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:30 2025 by rpki-client