Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ypND7g1G7ie9IB6BUV1YjOpT_48.roa
File: ypND7g1G7ie9IB6BUV1YjOpT_48.roa (raw, json)
Hash identifier: bsfZ5SFVn+h+wmLVFztclO3F+wdI132vEBFvyrjQ9l8=
Subject key identifier: CA:93:43:EE:0D:46:EE:27:BD:20:1E:81:51:5D:58:8C:EA:53:FF:8F
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 0122BF85
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ypND7g1G7ie9IB6BUV1YjOpT_48.roa
Signing time: Sat 12 Feb 2022 23:46:12 +0000
ROA not before: Sat 12 Feb 2022 23:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47869
IP address blocks: 2a0e:1c80:b::/48 maxlen: 48
2a0e:1c80:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19054469 (0x122bf85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Feb 12 23:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca9343ee0d46ee27bd201e81515d588cea53ff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:73:44:59:68:4c:51:c2:32:3b:6b:84:bf:
6d:2e:92:17:f8:ae:99:86:81:b8:90:27:47:bc:47:
88:c7:1c:3b:44:b8:69:e4:73:f0:4b:4a:ce:5f:10:
d1:53:79:74:fb:ce:d8:45:ec:e8:b0:c8:e0:3d:e1:
4b:be:7e:5e:97:8f:6d:93:de:73:23:f4:74:76:b5:
b5:4c:0e:c8:72:66:2e:c0:b0:9d:4a:8f:5d:5c:95:
46:39:63:bb:af:da:d9:bc:c4:14:93:d5:8c:17:c5:
d4:b9:4e:e4:97:38:5d:e8:86:d8:71:b9:db:38:fb:
75:ad:86:4a:e6:76:be:92:20:31:38:96:1b:e5:de:
95:83:1c:b2:d7:a4:40:9a:fc:82:30:e0:fa:52:62:
69:7e:6f:f1:68:56:7e:88:98:f6:77:07:20:ff:85:
62:be:53:e6:27:2b:80:2c:42:ce:7c:d5:c3:a0:21:
98:47:53:62:f2:48:4a:cf:c5:98:ea:0c:83:5d:c1:
3c:bd:6b:90:4e:1f:66:ba:6f:c2:6b:fa:2d:c4:78:
e8:c4:ad:a2:bc:92:3d:86:0f:0e:fe:95:8e:fa:28:
90:ee:ee:ac:1a:b8:1a:a2:d3:9e:75:bb:78:a1:c9:
49:dc:c1:95:18:e5:81:68:a1:80:a7:9b:20:64:08:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:93:43:EE:0D:46:EE:27:BD:20:1E:81:51:5D:58:8C:EA:53:FF:8F
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/ypND7g1G7ie9IB6BUV1YjOpT_48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:4::/48
2a0e:1c80:b::/48
Signature Algorithm: sha256WithRSAEncryption
29:c1:48:f2:d5:79:08:c5:73:b8:aa:f9:3a:3e:76:83:28:39:
05:ef:64:8b:1c:49:ff:75:77:fa:2e:4a:a3:c3:8e:5c:a6:ab:
28:56:24:40:42:82:0a:72:cf:20:de:c6:9f:c3:cc:bf:00:d7:
8a:ec:0d:86:7e:67:ea:ad:bd:2e:7a:23:49:55:c3:06:00:3d:
46:8c:c9:3a:4e:48:1d:00:89:87:98:e6:57:22:b7:84:61:77:
e5:e8:9e:7b:27:36:3d:a9:8f:41:98:e1:63:a6:83:a2:c1:7d:
3e:0f:60:9e:52:5e:06:dc:a4:7c:54:78:02:af:9c:93:cd:6b:
3d:6b:81:4a:22:54:ab:c9:5a:5f:a7:9e:0d:ed:28:35:08:ba:
b6:c4:d1:a5:b0:67:1a:c3:02:c9:61:39:0f:25:ce:bb:6a:21:
e0:fd:a8:35:7e:4b:27:73:86:92:32:6f:45:73:ca:f3:1b:52:
cc:94:a3:ca:9e:a3:f5:e6:4a:ed:00:0a:a4:4f:67:38:51:4a:
65:08:72:1e:23:34:91:94:b2:80:90:73:e2:ff:ee:17:f1:ce:
51:4b:e9:fe:16:8c:31:da:00:53:e4:c3:a5:94:a4:6d:8c:a8:
bd:69:f0:6f:09:91:4a:34:d9:67:ef:84:20:6b:40:96:db:2d:
8b:91:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:25:17 2025 by rpki-client