Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qiIlRRczZWrA0BGhbWgN7Ix8Glc.roa
File: qiIlRRczZWrA0BGhbWgN7Ix8Glc.roa (raw, json)
Hash identifier: fnJyoXeIDHrWqae8yEsFOcc6/KcHWInvDurCqOPe0fA=
Subject key identifier: AA:22:25:45:17:33:65:6A:C0:D0:11:A1:6D:68:0D:EC:8C:7C:1A:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521EEE0AE8D6B49CE3CA534F3C6FDDA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qiIlRRczZWrA0BGhbWgN7Ix8Glc.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151194
IP address blocks: 2a06:de00:de00::/44 maxlen: 48
2a06:de00:de0f::/48 maxlen: 48
2a10:ccc0:ccc0::/44 maxlen: 48
2a10:ccc0:ccc0::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ee:e0:ae:8d:6b:49:ce:3c:a5:34:f3:c6:fd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2225451733656ac0d011a16d680dec8c7c1a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:53:c9:92:a6:69:e7:67:da:ba:f6:23:93:
41:65:21:7d:44:b4:ee:5b:e3:a5:e5:71:cc:fa:dd:
f7:85:d7:10:55:50:2d:ce:16:d4:ae:dc:c5:6e:1c:
4f:88:2c:73:62:9d:c3:ef:e6:36:f0:3a:8d:f8:3b:
d1:30:c8:e9:6c:1c:68:30:7a:5a:ea:e6:6c:76:e9:
b2:97:84:9c:c8:6d:c4:5b:30:eb:fe:3b:55:95:d6:
a8:4b:59:cf:4f:64:c7:27:c5:bc:b8:f2:d8:9c:d5:
6e:f5:f5:5b:fa:3a:0e:d3:2f:c3:67:8b:e3:e6:55:
51:ee:38:66:c9:17:43:b3:42:3d:d5:1a:47:05:3a:
04:53:e1:7f:b7:7d:c7:62:47:e3:c9:b4:89:f4:3c:
9a:c5:91:8d:83:e3:cd:34:ad:5c:cd:bc:c1:00:2a:
7c:73:cf:89:8b:81:54:cc:8f:b5:40:97:fa:c1:47:
b1:8e:43:12:4d:08:be:c0:17:60:7f:c4:82:c1:78:
27:b6:49:c6:47:d6:e7:cb:62:dc:f1:bb:b1:4a:e5:
eb:30:af:6e:5b:c7:5a:b5:56:24:68:b6:96:2e:8a:
1c:5f:7d:44:1f:75:55:2b:92:a2:0f:b4:38:c3:76:
c7:3a:a8:04:4c:11:08:49:ae:4d:34:0c:2f:78:25:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:25:45:17:33:65:6A:C0:D0:11:A1:6D:68:0D:EC:8C:7C:1A:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qiIlRRczZWrA0BGhbWgN7Ix8Glc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de00::/44
2a10:ccc0:ccc0::/44
Signature Algorithm: sha256WithRSAEncryption
22:b8:41:bd:de:9a:58:c9:ff:34:9f:89:c3:34:91:9c:7c:1f:
c1:b5:0a:fd:01:b2:d9:03:b5:c9:2c:10:01:7c:fb:67:d7:98:
5a:a8:11:ed:03:27:51:24:3d:a6:68:98:8b:fb:96:7f:0b:a5:
84:0f:c4:aa:02:79:a2:60:c7:b4:a6:11:32:f5:4d:8f:72:9f:
ef:27:96:66:b8:35:ae:3e:8c:8b:c8:a8:60:4e:13:3c:a8:ba:
6c:38:c5:99:37:24:f2:71:e3:f3:b9:ef:87:c9:95:2b:b5:50:
79:7d:c6:32:c5:ac:3c:6d:f5:81:96:9f:b4:c5:67:44:4e:9b:
18:c4:b7:73:31:12:65:de:4e:8d:57:ce:e6:8c:b9:cc:e3:1d:
9e:20:f3:a0:c4:8a:e0:40:4e:bb:99:d7:c2:4e:12:de:fd:7c:
77:fb:b0:4a:09:de:6f:7b:bb:92:10:2a:90:84:97:db:9e:82:
61:42:61:6b:f6:c1:95:80:79:5e:0a:31:ff:e5:78:64:d4:f4:
bb:41:69:08:f1:93:5e:5e:73:56:4c:f8:9c:72:4b:35:56:5c:
26:5d:22:0a:0c:08:35:0a:ce:2d:02:0a:67:b1:39:99:bb:ce:
f8:31:e8:9d:30:18:9c:05:93:fa:13:ae:38:4f:c6:20:21:f8:
8c:43:2e:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIe7gro1rSc48pTTzxv3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTIyMjU0NTE3MzM2NTZhYzBkMDExYTE2ZDY4MGRlYzhjN2MxYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMxTyZKmaedn2rr2I5NBZSF9RLTu
W+Ol5XHM+t33hdcQVVAtzhbUrtzFbhxPiCxzYp3D7+Y28DqN+DvRMMjpbBxoMHpa
6uZsdumyl4ScyG3EWzDr/jtVldaoS1nPT2THJ8W8uPLYnNVu9fVb+joO0y/DZ4vj
5lVR7jhmyRdDs0I91RpHBToEU+F/t33HYkfjybSJ9DyaxZGNg+PNNK1czbzBACp8
c8+Ji4FUzI+1QJf6wUexjkMSTQi+wBdgf8SCwXgntknGR9bny2Lc8buxSuXrMK9u
W8datVYkaLaWLoocX31EH3VVK5KiD7Q4w3bHOqgETBEISa5NNAwveCUr/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKoiJUUXM2VqwNARoW1oDeyMfBpXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcWlJbFJSY3paV3JBMEJHaGJXZ043SXg4R2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAN4A
AwcEKhDMwMzAMA0GCSqGSIb3DQEBCwUAA4IBAQAiuEG93ppYyf80n4nDNJGcfB/B
tQr9AbLZA7XJLBABfPtn15haqBHtAydRJD2maJiL+5Z/C6WED8SqAnmiYMe0phEy
9U2Pcp/vJ5ZmuDWuPoyLyKhgThM8qLpsOMWZNyTycePzue+HyZUrtVB5fcYyxaw8
bfWBlp+0xWdETpsYxLdzMRJl3k6NV87mjLnM4x2eIPOgxIrgQE67mdfCThLe/Xx3
+7BKCd5ve7uSECqQhJfbnoJhQmFr9sGVgHleCjH/5Xhk1PS7QWkI8ZNeXnNWTPic
cks1VlwmXSIKDAg1Cs4tAgpnsTmZu874MeidMBicBZP6E644T8YgIfiMQy6/
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:11:21 2025 by rpki-client