Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BcC3b-toWhE-_e5DjkRSh3-LM6Q.roa
File: BcC3b-toWhE-_e5DjkRSh3-LM6Q.roa (raw, json)
Hash identifier: RwgZ1AWuoVeOltAex3+CvdK+lLRi6N1WEhjRppr221Q=
Subject key identifier: 05:C0:B7:6F:EB:68:5A:11:3E:FD:EE:43:8E:44:52:87:7F:8B:33:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019508E77CE8A27E9A3752C51ED60418B451
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BcC3b-toWhE-_e5DjkRSh3-LM6Q.roa
Signing time: Sat 15 Feb 2025 09:19:03 +0000
ROA not before: Sat 15 Feb 2025 09:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149977
IP address blocks: 2a0e:97c0:aa0::/44 maxlen: 48
2a0f:e404:105::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:e7:7c:e8:a2:7e:9a:37:52:c5:1e:d6:04:18:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 15 09:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c0b76feb685a113efdee438e4452877f8b33a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:f7:30:3d:74:fe:43:7d:42:aa:ba:3b:c3:
5d:71:ba:17:8a:5a:0c:ce:90:9d:06:fe:5c:11:63:
e7:d8:2f:74:71:20:cb:90:a3:5d:57:6b:3b:45:7f:
9f:e5:b7:5f:30:a5:92:b9:d1:2d:9a:73:1a:bb:0b:
d6:5a:42:ae:0b:ba:4d:90:84:83:4a:5c:67:dd:89:
0d:66:28:4e:3c:79:da:b3:71:2d:7d:2a:b2:df:ad:
a4:6d:5a:10:f6:21:ce:36:26:1c:fa:10:47:f2:60:
37:2c:73:64:30:f9:53:8b:8d:38:9f:78:6a:1c:59:
c8:f7:da:68:58:23:e0:0f:81:d9:74:c7:eb:88:36:
e8:a3:25:ab:b5:56:90:8c:4d:42:dd:81:a7:0b:f9:
af:f1:c3:0e:44:4a:85:c2:4c:a0:ff:cd:3f:ad:82:
56:cf:44:b8:66:98:ab:8f:ee:2f:fb:f1:ca:b9:23:
6b:72:33:11:b9:67:d1:b4:b0:2e:6a:b6:0f:2f:86:
5a:02:d5:76:63:04:f5:66:ea:ba:2d:06:b2:fe:a5:
6c:ef:3b:1a:58:a9:06:c9:23:8c:15:9f:dd:03:eb:
77:7b:c5:1e:1d:bb:53:d3:03:0c:6c:d1:a0:41:33:
17:db:26:29:7f:d6:c7:c0:0f:61:5e:b7:8b:8d:86:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:B7:6F:EB:68:5A:11:3E:FD:EE:43:8E:44:52:87:7F:8B:33:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BcC3b-toWhE-_e5DjkRSh3-LM6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:aa0::/44
2a0f:e404:105::/48
Signature Algorithm: sha256WithRSAEncryption
c0:44:32:2f:07:18:e4:4a:5c:f1:28:65:fa:95:27:9d:db:bd:
30:d1:f1:aa:07:da:15:c5:64:54:9c:6e:8f:6a:30:f7:8b:eb:
ea:2b:19:f6:d6:c0:67:75:19:db:62:9d:22:77:0b:16:d9:63:
d1:71:e4:75:24:f2:b3:a9:1a:a3:9f:e2:29:81:b9:83:62:54:
56:95:2d:51:f9:64:aa:09:7f:fd:a2:a1:bb:4d:b8:32:b5:79:
2e:d4:2a:b7:f8:ef:70:b6:5f:60:da:c0:e3:52:53:43:d7:f7:
d5:a1:ca:85:15:95:55:54:79:e1:ae:d2:48:37:a6:8d:14:76:
ff:0f:bf:db:b6:7a:d5:f4:ef:ae:48:cf:37:ff:d1:e6:d5:6a:
ba:db:2f:aa:a5:8d:26:17:56:63:9e:a4:22:9c:72:48:69:24:
6d:01:fa:ad:66:9a:e9:41:f8:a4:ea:16:87:21:5e:09:2b:a9:
3e:a1:d2:3e:a2:0f:ff:8c:b3:28:49:30:36:40:5d:c7:8d:1b:
05:98:b3:f3:f4:ee:82:e5:ef:43:9e:42:50:e1:fd:6f:95:2b:
3c:11:70:6e:f0:34:ca:a0:a1:c9:c0:c9:04:7c:2d:d0:da:ab:
7e:2e:7b:05:bc:86:7e:82:b4:2b:27:c9:e3:eb:9d:6b:52:da:
fb:36:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:44 2025 by rpki-client