Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XTtUGIRaI2n9ypM71DDXUnHZ7aM.roa
File: XTtUGIRaI2n9ypM71DDXUnHZ7aM.roa (raw, json)
Hash identifier: fxxH3wRYpI1PZbexAlFcWoqXbZh3436puoaHyTbJyS4=
Subject key identifier: 5D:3B:54:18:84:5A:23:69:FD:CA:93:3B:D4:30:D7:52:71:D9:ED:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195CE82C1FF9EB4F85C21C2A67037B88FC6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XTtUGIRaI2n9ypM71DDXUnHZ7aM.roa
Signing time: Tue 25 Mar 2025 18:13:50 +0000
ROA not before: Tue 25 Mar 2025 18:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202340
IP address blocks: 2a10:cc40:210::/44 maxlen: 48
2a10:cc40:211::/48 maxlen: 48
2a10:cc40:212::/48 maxlen: 48
2a10:cc40:213::/48 maxlen: 48
2a10:cc40:214::/48 maxlen: 48
2a10:cc40:215::/48 maxlen: 48
2a10:cc40:216::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:82:c1:ff:9e:b4:f8:5c:21:c2:a6:70:37:b8:8f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 25 18:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d3b5418845a2369fdca933bd430d75271d9eda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:33:f6:d9:64:9d:5c:ae:00:30:bb:91:e4:
d5:7b:2b:32:19:da:7a:85:b6:4a:7b:0a:c8:4f:1b:
96:da:b7:28:38:df:7f:41:f8:d2:c1:eb:5b:15:5e:
3f:6c:45:f0:d3:78:cd:2d:5e:f3:47:f4:1e:3c:20:
ad:06:39:7a:5b:ee:b3:9a:6a:b7:29:c4:67:1c:01:
74:13:b9:ff:f0:9a:91:14:f4:d3:66:33:d8:f1:44:
72:51:1e:85:df:6b:1a:7a:2f:b9:31:e5:21:f9:fe:
73:16:dc:17:92:d1:39:32:f1:09:bf:74:e2:61:c6:
59:11:e4:50:b3:49:bb:84:bc:d2:2e:65:55:e1:c3:
62:cd:9a:e4:8b:a2:c1:a1:77:c2:1c:a3:91:8e:8e:
17:81:dd:80:1c:8d:9c:cc:5d:36:ca:57:c1:01:1d:
f8:7c:f6:47:84:de:5d:b2:4a:36:94:f4:7a:26:6d:
a6:a7:a3:c9:ec:6d:5f:e1:9e:88:66:24:26:d0:ef:
d5:23:75:2b:9e:d9:8a:fc:81:f8:e1:fe:be:0c:78:
0c:05:4d:df:99:6b:0f:1d:89:c4:8c:f1:86:61:59:
33:91:4e:a3:18:1c:26:a6:3c:8f:d9:99:da:58:84:
0a:5f:ab:32:8c:fa:15:56:1c:3b:08:9b:f1:9a:a1:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:54:18:84:5A:23:69:FD:CA:93:3B:D4:30:D7:52:71:D9:ED:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XTtUGIRaI2n9ypM71DDXUnHZ7aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:210::/44
Signature Algorithm: sha256WithRSAEncryption
0d:e6:90:e2:d4:a9:af:60:d2:8b:1b:6c:d5:83:14:b3:a1:75:
c2:d3:14:36:6a:e3:84:6e:e4:33:8b:3f:96:e4:90:2b:8e:8d:
01:db:c9:cc:c2:68:64:a8:23:a6:c9:b4:8d:fc:f3:7f:9b:3f:
36:d4:19:ac:61:4b:12:87:41:6c:5b:5b:86:72:5e:8f:1d:f8:
6d:f3:70:ca:be:8d:12:85:c5:99:fe:ad:df:83:82:60:48:70:
a5:6c:ae:a1:03:5f:2f:b6:9f:71:3c:fe:69:f6:34:d1:a7:c7:
36:ee:7a:de:59:a0:91:63:bf:8d:42:ed:e3:99:bc:a0:11:15:
9a:70:49:95:2f:e5:ff:20:8a:86:f5:84:81:ce:42:82:20:64:
cb:f4:2a:a8:c2:80:e2:15:9a:56:0a:87:6a:5c:0a:91:53:42:
ab:6b:9f:ca:aa:12:98:d0:a4:46:3d:90:06:ed:30:d3:b1:cb:
ea:8a:97:26:6e:b1:5d:b8:08:8c:be:90:42:5b:3d:13:59:5d:
d3:b6:f9:99:4a:49:6a:6a:41:f9:32:d1:1d:73:f1:73:0f:36:
4b:28:64:f9:e1:4f:18:80:d2:32:25:dd:46:5d:f0:fb:99:a8:
74:a2:d3:4e:37:f5:f3:91:42:25:21:b8:63:00:71:a3:71:4f:
54:7e:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:25 2025 by rpki-client