Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/86lFlfl-uM8-ev_YXas6ss2ghAE.roa
File: 86lFlfl-uM8-ev_YXas6ss2ghAE.roa (raw, json)
Hash identifier: outb6/mW28zTU+I0/MSrdHHiW7hHBRclzunqoyFoBrs=
Subject key identifier: F3:A9:45:95:F9:7E:B8:CF:3E:7A:FF:D8:5D:AB:3A:B2:CD:A0:84:01
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195CE83ABA0FABD2C45EB1744030A16F200
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/86lFlfl-uM8-ev_YXas6ss2ghAE.roa
Signing time: Tue 25 Mar 2025 18:14:50 +0000
ROA not before: Tue 25 Mar 2025 18:14:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
2a10:cc40:216::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:83:ab:a0:fa:bd:2c:45:eb:17:44:03:0a:16:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 25 18:14:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a94595f97eb8cf3e7affd85dab3ab2cda08401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:00:95:43:7e:03:9e:f8:fa:b4:ac:cc:05:1e:
9f:b7:c3:df:9d:ac:bc:60:ab:dd:b0:48:c7:00:1a:
b5:8b:07:0b:1e:8a:bf:a1:a1:3f:0b:c6:09:c4:ee:
ea:ab:be:fe:2c:c6:28:e5:b9:a7:a3:1b:95:c4:64:
17:f4:f8:76:46:b7:8a:01:3c:9c:5d:2e:bc:ff:2e:
92:57:68:7a:e8:2e:83:89:ad:7b:56:aa:36:c1:24:
e7:75:3a:4f:01:dc:64:94:bf:96:47:cb:5f:e4:34:
ba:15:fa:35:1d:a6:41:85:8b:7d:9b:fd:79:b6:bb:
5e:e6:63:22:7d:bc:ae:8d:3a:74:bf:d3:8c:c4:d6:
23:1b:8d:03:70:35:79:ff:29:2a:3e:df:f9:0d:b0:
c5:44:cd:32:a2:f1:18:25:4c:7a:af:fc:52:b3:90:
7b:5e:6a:48:9e:14:6f:28:55:d8:0e:1e:c9:29:e5:
18:b1:c3:01:2c:f8:08:74:f4:12:bf:84:08:de:6d:
4e:98:08:a8:45:ef:95:91:21:11:60:44:4c:73:f7:
d4:bf:34:c2:79:d9:38:0c:b0:e9:0f:62:5c:7d:b3:
cc:19:18:5d:4f:66:fe:05:bd:e8:97:5a:af:72:d6:
be:13:ec:e8:79:8a:36:23:27:a0:4e:2d:12:3c:22:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A9:45:95:F9:7E:B8:CF:3E:7A:FF:D8:5D:AB:3A:B2:CD:A0:84:01
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/86lFlfl-uM8-ev_YXas6ss2ghAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
2a10:cc40:216::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a9:a1:9c:85:d2:39:2a:ca:a6:8d:91:3f:34:ff:66:be:6a:
33:a2:a1:93:aa:d6:61:02:3c:51:ca:6a:6d:cc:08:26:18:bf:
7e:e7:d3:36:cf:17:ef:b5:33:c7:ee:82:16:bd:95:64:5a:8a:
be:33:37:8b:d1:dc:dc:e8:47:66:a2:af:1e:bc:8d:06:96:2e:
70:13:63:78:3e:fa:0d:a1:ff:b4:96:dd:a9:ba:62:e4:a0:9c:
52:18:ab:04:5d:59:40:79:56:3c:65:e2:06:ed:9a:78:e1:28:
ca:82:93:1e:3f:ca:b5:2d:0c:69:0c:cb:03:b0:6e:bc:81:bd:
5b:f4:72:1e:2e:8a:54:de:65:78:e4:f1:a2:a6:8e:07:9e:65:
a8:8b:6f:61:65:ff:36:14:e5:1f:9f:9e:2c:f9:27:2a:e8:d1:
15:a9:b2:36:24:67:4d:f9:f9:9c:b4:02:e3:d7:5a:43:ed:6b:
d4:2f:cc:80:bf:e9:cf:f5:be:25:f1:4f:51:e9:a3:cc:4a:62:
cd:a9:e1:dc:fa:34:6b:91:a9:39:aa:60:0b:52:6d:8a:88:e5:
8c:fd:91:2b:25:12:23:10:c1:00:ee:77:9f:63:03:1a:43:fd:
5b:fb:ae:fa:8e:86:93:8d:28:7e:d5:69:3c:61:07:5f:69:eb:
1c:d5:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:43 2025 by rpki-client