Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/YOHHT-skEE4yfo6rH0tWQ_cNhPc.roa
File: YOHHT-skEE4yfo6rH0tWQ_cNhPc.roa (raw, json)
Hash identifier: UBJvSErxIa7elbojww9MPjtVYVQAonrH5hKrQSaIrYY=
Subject key identifier: 60:E1:C7:4F:EB:24:10:4E:32:7E:8E:AB:1F:4B:56:43:F7:0D:84:F7
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 019B77C6BEFA38A7074A7BD5B9A4F78AC2BE
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/YOHHT-skEE4yfo6rH0tWQ_cNhPc.roa
Signing time: Thu 01 Jan 2026 04:17:52 +0000
ROA not before: Thu 01 Jan 2026 04:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47962
IP address blocks: 2a0f:6a80::/29 maxlen: 29
2a0f:6a80:1::/48 maxlen: 48
2a0f:6a80:888::/48 maxlen: 48
2a0f:6a80:999::/48 maxlen: 48
2a0f:6a80:1001::/48 maxlen: 48
2a0f:6a80:1002::/48 maxlen: 48
2a0f:6a80:1003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:be:fa:38:a7:07:4a:7b:d5:b9:a4:f7:8a:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 04:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60e1c74feb24104e327e8eab1f4b5643f70d84f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:2a:dc:dc:e2:a8:26:ee:80:16:cc:40:58:
38:b8:3e:2b:0b:94:a3:9e:ba:23:15:a3:76:1d:ae:
4b:b9:f6:73:a5:7d:68:ab:5d:a2:1d:01:f9:72:89:
77:7d:ce:79:52:47:7a:ff:91:95:06:c5:c0:99:ee:
06:d5:33:cf:d7:5c:a1:6b:24:a3:bb:12:3d:2e:f7:
3a:46:b3:e1:af:48:d8:e5:64:9f:0f:f7:22:78:43:
5a:f0:34:03:6a:07:97:f3:d9:d2:b2:94:5f:51:06:
e5:8d:f0:7c:26:9c:76:ca:f4:4d:a1:17:89:d4:2e:
c9:58:c2:dc:78:83:f6:f2:37:d1:6d:8b:0f:3c:7e:
92:19:48:e6:16:94:93:83:79:ff:69:48:79:74:5a:
03:c5:b6:2c:e3:e9:ec:29:f8:e5:8c:c2:86:25:e1:
96:2a:ea:67:2e:cc:42:fb:ea:99:b0:ee:e5:14:aa:
24:41:ef:df:48:48:49:3b:ac:fb:b0:5b:b3:ac:99:
fd:d9:e2:c7:d8:c2:04:cf:ae:4d:02:85:b4:44:43:
dc:e5:65:4c:42:46:8d:69:0c:c4:f3:d2:9c:cd:8d:
4a:0e:e1:2e:2a:c0:da:41:4a:39:af:ad:3e:95:60:
0b:b1:5a:74:90:63:3f:5a:a2:ab:10:93:41:c3:ac:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:C7:4F:EB:24:10:4E:32:7E:8E:AB:1F:4B:56:43:F7:0D:84:F7
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/YOHHT-skEE4yfo6rH0tWQ_cNhPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6a80::/29
Signature Algorithm: sha256WithRSAEncryption
2d:31:26:d5:bf:56:e4:8b:54:ac:32:43:8f:a9:f0:c0:0a:5a:
96:1e:53:a7:67:21:0c:54:50:76:7b:90:1b:2e:89:b4:82:b3:
bb:3c:42:d9:4e:8f:b6:be:2d:9b:16:25:4c:e4:7f:ab:a9:6d:
8c:5d:57:a5:a3:48:e3:14:c8:87:1a:a6:6e:cc:10:ed:29:f1:
79:7e:92:51:3d:ca:80:1d:d1:b5:c9:f1:f0:ab:95:7d:0f:a2:
98:af:38:0a:b4:6d:a1:76:2a:bd:33:a9:19:e0:e9:24:df:5f:
2e:38:4f:f9:9f:5b:5a:ed:c7:1b:57:9b:2c:22:95:3c:df:e4:
52:9e:2a:03:e6:54:da:d6:49:69:94:98:00:32:72:5d:17:89:
3e:31:1d:ea:d5:4e:c8:4e:f8:06:ac:18:8e:15:37:e9:e8:48:
b9:61:e7:a4:c6:ce:73:ec:1a:0e:52:22:24:46:fc:e1:37:52:
88:8e:19:b0:1f:ca:34:2f:88:38:f8:04:e9:12:66:c8:b4:ff:
5d:d4:73:69:79:0c:fe:be:81:59:b1:de:4b:e2:51:3a:48:1d:
ab:3a:1f:27:2d:b1:f0:c7:91:bf:b1:1a:27:6d:4c:85:bf:4b:
3a:77:47:a1:d8:44:b5:8b:d4:3e:54:ea:53:1c:2d:a1:f3:82:
bc:df:0d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:03:01 2026 by rpki-client