Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/m5xeOcjzWHivT__e3TNzcg-o6lg.roa
File: m5xeOcjzWHivT__e3TNzcg-o6lg.roa (raw, json)
Hash identifier: kLGNjASvNfSvCJz/3X04zaBnwfMduwrjF0wlFJq7w2o=
Subject key identifier: 9B:9C:5E:39:C8:F3:58:78:AF:4F:FF:DE:DD:33:73:72:0F:A8:EA:58
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019546A34F7ABE86610BC479819082B8E50A
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/m5xeOcjzWHivT__e3TNzcg-o6lg.roa
Signing time: Thu 27 Feb 2025 09:01:02 +0000
ROA not before: Thu 27 Feb 2025 09:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.63.0.0/16 maxlen: 16
2a02:11f8:60::/48 maxlen: 48
2a02:11f8:61::/48 maxlen: 48
2a02:11f8:62::/48 maxlen: 48
2a02:11f8:63::/48 maxlen: 48
2a02:11f8:64::/48 maxlen: 48
2a02:11f8:65::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:a3:4f:7a:be:86:61:0b:c4:79:81:90:82:b8:e5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Feb 27 09:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9c5e39c8f35878af4fffdedd3373720fa8ea58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:97:ae:94:db:ce:ca:4e:48:dc:c4:ad:e8:38:
36:dc:74:6b:0e:34:f5:55:05:b1:13:01:72:e8:00:
d2:74:17:f8:ca:b3:9b:26:6c:8e:f0:de:c2:15:b6:
b2:e6:99:e7:c8:86:dd:36:c7:e6:47:66:bf:d8:7e:
4a:47:9d:c4:b6:57:f3:97:54:aa:91:aa:34:23:a4:
7f:d0:27:20:3e:c9:5a:e8:bb:63:a9:ff:1f:72:ff:
cf:4c:d5:6a:8a:bf:a4:3b:4e:42:60:fa:6f:d8:0d:
c9:fe:73:a5:e9:83:fd:23:b5:a5:f1:b8:c8:73:9d:
30:71:27:1a:49:17:cf:a8:5a:d4:ae:60:0c:b6:d8:
e7:c1:a5:2a:64:0f:3a:ac:d9:68:04:3a:f3:51:d8:
22:18:41:05:63:38:b1:dc:28:27:7e:ac:fc:3a:51:
fe:16:e4:a2:92:fb:c0:45:ce:ed:82:04:d1:4d:1e:
66:8b:f4:01:00:3b:b0:51:ba:fd:ae:17:f9:dd:fa:
8d:62:01:d4:f3:c1:d9:f9:ed:bd:a7:8d:20:4f:5e:
d7:2e:66:e3:da:e6:59:03:9e:e0:a3:a4:e6:d2:6e:
db:17:87:f7:60:ee:3d:c8:f1:2e:52:af:35:fe:5d:
57:4a:97:6d:b0:02:7f:c4:93:f9:53:75:de:5e:27:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:5E:39:C8:F3:58:78:AF:4F:FF:DE:DD:33:73:72:0F:A8:EA:58
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/m5xeOcjzWHivT__e3TNzcg-o6lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.63.0.0/16
IPv6:
2a02:11f8:60::-2a02:11f8:65:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:88:2f:02:11:a1:26:ee:a8:7c:a0:7b:cd:da:f2:10:d0:9e:
01:0f:58:f9:8e:6a:bd:4f:ed:12:6b:d0:09:fb:2a:99:82:70:
f9:02:d7:fe:b9:3d:84:71:c8:c2:09:a2:db:53:08:22:ff:76:
2c:ff:cf:3b:16:1b:ab:d7:63:9a:96:65:19:d8:8d:0b:cd:5d:
0c:4a:49:75:19:fa:df:80:b4:d7:87:04:8e:3f:3b:a8:30:2f:
29:64:f9:05:41:6c:ec:5c:94:56:29:2f:4c:0e:5b:ce:cf:01:
4b:7f:f3:bd:e3:5e:a7:79:4a:6b:3a:9f:69:05:e2:ca:40:04:
d2:d5:b1:20:ee:b3:ce:3d:80:7b:37:cb:0b:53:40:cd:da:53:
9f:da:80:d1:9a:99:93:a4:b8:e6:6d:f8:65:29:5a:c1:de:83:
61:45:de:28:cc:ec:8b:eb:cd:5e:1a:bb:7d:48:28:58:99:db:
59:f3:27:27:64:75:2a:6f:98:7d:f5:bc:5e:2e:d5:bc:f6:62:
fc:6a:30:17:45:44:cd:c4:58:51:48:5c:e8:1b:f5:e0:80:33:
91:58:8e:6f:4c:12:9a:44:0d:72:12:2e:40:8d:99:d8:1a:58:
03:dd:a5:de:0a:79:6b:f2:80:57:7e:66:51:f7:0f:c8:6f:c1:
f9:b3:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:24 2025 by rpki-client