Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/youBbycl656_E7Ul0i31jkCZB6I.roa
File: youBbycl656_E7Ul0i31jkCZB6I.roa (raw, json)
Hash identifier: 68R3gU8sZH/rJz2shA3ls1x4ybm/Uvig0l7uihOJ3Mg=
Subject key identifier: CA:8B:81:6F:27:25:EB:9E:BF:13:B5:25:D2:2D:F5:8E:40:99:07:A2
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01975C8E48680DA6080CFD6BD60FE2825143
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/youBbycl656_E7Ul0i31jkCZB6I.roa
Signing time: Wed 11 Jun 2025 01:15:17 +0000
ROA not before: Wed 11 Jun 2025 01:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:8e:48:68:0d:a6:08:0c:fd:6b:d6:0f:e2:82:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Jun 11 01:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8b816f2725eb9ebf13b525d22df58e409907a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:d2:9c:7b:07:ec:3c:5b:68:bf:19:f0:d5:
f9:f2:2b:dd:a5:1c:75:17:9d:ae:68:c5:5e:c2:ca:
4d:39:c4:4a:9d:8c:47:b0:8c:99:7f:19:e2:9c:d8:
8c:b2:ea:05:80:cc:91:23:03:6f:a1:2f:5a:5e:82:
55:ea:48:2f:29:0d:a7:c2:f3:0d:41:06:27:26:9b:
c3:51:4f:33:78:3b:a8:c5:e9:d0:7a:1d:c4:40:6a:
db:3e:47:79:e8:8a:c7:87:a1:94:d0:c2:06:d1:66:
ec:b7:33:e3:bb:e6:c7:17:7e:91:d0:8f:87:6e:5f:
aa:cb:54:72:fa:93:4f:e2:f1:9f:96:d8:11:2c:68:
81:93:f9:85:93:98:fe:51:42:fe:a7:88:03:58:2c:
81:bf:a7:35:74:2c:ce:b3:48:91:a8:45:3a:0c:3b:
56:98:62:8c:8d:0b:de:b4:d7:f6:b5:dc:8b:0f:15:
06:4e:12:94:ba:80:b1:8c:f1:89:ec:ba:3a:54:d6:
6b:cc:f8:92:99:f2:65:0c:69:11:9a:cb:72:82:8a:
e9:e7:5b:f2:3e:56:d0:35:69:b0:2e:36:d5:f5:a3:
30:90:ac:c1:1d:ef:8b:5a:60:00:aa:6a:a9:b7:8a:
dd:a3:4c:a1:d8:ca:bf:54:6a:a4:ed:ff:ca:af:e6:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:81:6F:27:25:EB:9E:BF:13:B5:25:D2:2D:F5:8E:40:99:07:A2
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/youBbycl656_E7Ul0i31jkCZB6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:108e:927e/128
2001:67c:64:ffff:0:197:15eb:6226/128
2001:67c:64:ffff:0:197:353f:be91/128
Signature Algorithm: sha256WithRSAEncryption
33:77:77:78:2b:65:e6:4a:c8:04:2c:b1:f9:9e:09:ab:09:d3:
2c:fb:9f:81:14:cc:64:68:f9:32:5b:21:05:d2:c2:d2:c9:bf:
2f:d8:66:18:64:3e:ba:16:91:78:b8:ad:55:54:8a:df:53:e0:
b4:ad:53:da:67:a9:e9:45:e8:86:62:e8:b9:43:87:ee:fc:43:
00:da:bd:02:21:be:e5:8f:46:65:19:57:11:aa:97:17:a9:eb:
80:08:82:e1:ea:36:74:72:cd:d4:cc:18:6c:a7:1d:9e:95:e2:
4d:9d:ee:11:63:57:35:40:26:b8:6d:6e:f6:4d:14:17:4e:66:
da:6e:70:e1:77:23:f2:d7:94:20:83:5b:8b:67:4f:71:9e:af:
9d:a1:3d:65:89:e6:f2:d7:08:35:3d:50:9d:c2:77:38:cc:7c:
6d:44:c0:0a:fe:f9:76:b1:87:e5:58:c6:22:ec:e4:9b:f3:09:
5b:90:a6:f3:e5:d0:55:5a:a3:e2:d6:ab:40:25:7a:0c:54:38:
a3:03:92:43:34:d5:d1:7c:4f:cd:ce:b6:d7:4d:7b:70:4b:2b:
84:7f:29:79:04:30:89:75:fb:e5:7c:ff:7d:92:8b:51:a4:11:
f4:48:06:76:b0:66:ca:c8:79:ef:a3:99:5f:b5:c4:ec:c7:22:
72:d9:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:10:27 2025 by rpki-client