Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xi0wKatYDKcjFq7d0m5Cvo1CYrM.roa
File: Xi0wKatYDKcjFq7d0m5Cvo1CYrM.roa (raw, json)
Hash identifier: ZiB5yL9E7R5U6/l1Mma25R1oDbSGUMg5yj629VYDvSI=
Subject key identifier: 5E:2D:30:29:AB:58:0C:A7:23:16:AE:DD:D2:6E:42:BE:8D:42:62:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226B08DEB4EEE14F5ED47C17E4C4EB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xi0wKatYDKcjFq7d0m5Cvo1CYrM.roa
Signing time: Thu 02 Jan 2025 03:49:59 +0000
ROA not before: Thu 02 Jan 2025 03:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213064
IP address blocks: 2a0e:b107:b50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6b:08:de:b4:ee:e1:4f:5e:d4:7c:17:e4:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e2d3029ab580ca72316aeddd26e42be8d4262b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:f7:ba:c5:09:52:e5:6c:18:0d:21:b0:be:
ec:aa:41:a7:a6:94:85:52:ea:ef:01:f5:8d:0b:d3:
dc:98:d0:b8:be:48:58:a7:2d:56:82:b1:71:e0:ae:
4a:4d:e8:31:ec:d7:a6:82:fa:21:a5:5e:81:0c:be:
2d:3b:e7:dc:3c:36:8b:85:4a:ea:48:cb:cc:f5:a0:
50:1d:2e:d5:2a:43:09:f8:49:88:2c:82:bd:d9:6a:
b2:40:18:e8:27:f1:59:b1:90:d5:ba:f5:d2:ec:ef:
d2:a9:8a:53:90:c1:c4:2c:5e:60:eb:a6:83:6e:02:
a8:0c:c3:dd:fa:72:f4:db:26:0c:1f:08:ac:c1:e6:
b5:3d:b2:68:a8:0e:a2:e3:43:f1:85:b9:60:ff:4b:
0a:52:e5:a8:be:fd:cb:f1:b1:26:77:94:81:3c:c9:
b9:30:21:6f:7f:23:c9:fc:17:f6:be:90:18:2a:16:
a9:af:cf:96:8d:1a:76:9f:22:7c:b8:78:83:fd:a9:
7e:22:bf:f6:3f:23:36:59:aa:53:8d:96:f5:35:96:
38:1b:cc:1e:e5:0c:3d:ec:f4:15:2c:b3:be:18:a5:
7b:bb:8a:a8:c8:13:37:65:b6:03:a6:55:5e:a0:59:
26:ae:31:b6:78:7f:86:0a:29:84:3b:34:23:08:e7:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:30:29:AB:58:0C:A7:23:16:AE:DD:D2:6E:42:BE:8D:42:62:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xi0wKatYDKcjFq7d0m5Cvo1CYrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b50::/44
Signature Algorithm: sha256WithRSAEncryption
61:79:52:61:b9:53:74:75:7f:c7:04:28:c4:36:58:e9:7e:19:
9b:8d:85:71:d5:98:54:85:2c:e6:18:c8:94:44:d0:b7:9a:74:
1d:a2:33:ff:c4:e8:80:e1:77:a1:86:ae:4d:8e:88:a3:35:97:
11:d4:50:ef:46:fa:b4:4e:f7:26:02:86:79:02:d3:d2:9a:f0:
5b:bd:d7:85:a9:dc:36:3e:7a:9e:5c:c7:1d:c1:41:6a:05:a2:
5b:de:1b:41:e4:a8:92:7a:a2:0a:38:82:de:5a:75:0c:a4:e7:
e1:d0:33:01:d7:70:a3:4f:6d:ef:ad:da:b3:6f:b0:84:41:47:
33:33:4f:55:89:d6:bb:42:90:94:3c:68:cc:42:17:78:4e:4c:
06:d2:d0:1b:96:ab:79:44:b4:67:2e:3d:19:35:fe:37:bd:90:
00:6c:c7:4a:0c:d4:3d:cc:97:59:e3:5a:fb:97:ba:d4:98:9f:
10:b7:ee:53:b9:bd:0a:7b:ad:11:b7:34:68:7e:ed:0e:bd:8a:
92:fd:74:87:7d:e7:55:90:f8:dd:9d:d3:70:82:3b:aa:47:49:
fc:e6:9a:a1:14:5e:d3:af:90:fd:fb:05:d2:93:6f:ac:ce:4b:
2f:f2:90:64:b8:a8:18:49:5f:0e:97:83:1a:79:c5:2a:be:98:
d2:91:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:49:15 2025 by rpki-client