Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y4qWNqO7y2ftRuA1zJBBxWOd2lA.roa
File: Y4qWNqO7y2ftRuA1zJBBxWOd2lA.roa (raw, json)
Hash identifier: XKeoI2MP5ODTzWQl87f4P6ueFKBUuclSjZr7IjoCgCg=
Subject key identifier: 63:8A:96:36:A3:BB:CB:67:ED:46:E0:35:CC:90:41:C5:63:9D:DA:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425224D97AC6837ECFCEA5AF4CFB9D284
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y4qWNqO7y2ftRuA1zJBBxWOd2lA.roa
Signing time: Thu 02 Jan 2025 03:49:52 +0000
ROA not before: Thu 02 Jan 2025 03:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211231
IP address blocks: 2a0e:b107:1390::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:4d:97:ac:68:37:ec:fc:ea:5a:f4:cf:b9:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=638a9636a3bbcb67ed46e035cc9041c5639dda50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:13:50:cf:a5:b5:cb:f4:c6:a9:96:13:b9:
1e:5f:5e:dc:1b:a9:53:a0:8d:97:6a:80:5d:40:e9:
34:29:87:40:8f:49:7f:0f:10:0d:d0:9d:ae:49:5d:
63:fe:a8:01:7e:df:46:37:b4:25:61:2a:13:83:e5:
bd:0a:6f:03:3e:8c:ef:c8:7d:1e:b4:1c:3e:08:4c:
af:ed:84:69:12:c6:3a:76:49:50:4e:07:44:fb:23:
2a:da:3c:8c:5c:d1:00:c2:45:9c:62:4b:45:f1:2f:
53:28:be:39:f4:db:f5:dd:09:cf:a6:a8:b5:70:24:
0a:d2:1c:12:59:8c:95:67:05:cd:f2:86:74:4d:57:
93:c1:7f:10:01:20:cb:7a:49:df:77:a0:83:44:09:
7e:32:a4:6e:48:2e:1a:f5:c8:19:62:0d:56:0a:d0:
30:2c:e3:25:e1:12:78:12:70:e2:cd:ab:8f:f7:69:
3c:0c:8d:94:ca:fa:fa:5a:3c:40:ff:9a:3d:16:35:
ad:d9:05:6c:09:2b:a0:f0:67:0d:49:30:46:5c:be:
c8:ee:0f:ab:cc:05:a4:99:0d:67:3d:4d:8c:27:ad:
fe:11:11:f6:9b:20:33:7a:54:2a:67:59:78:70:a6:
d6:4b:d7:bc:c2:4c:0e:24:71:4e:c8:6b:13:e7:d2:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:96:36:A3:BB:CB:67:ED:46:E0:35:CC:90:41:C5:63:9D:DA:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y4qWNqO7y2ftRuA1zJBBxWOd2lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1390::/44
Signature Algorithm: sha256WithRSAEncryption
a4:d4:30:99:a9:5b:14:09:4b:c3:ee:79:9a:ae:9d:d6:25:30:
f8:2c:93:a2:c8:24:0e:d1:c5:14:fb:56:14:8f:2f:06:61:c1:
ad:6d:a2:22:88:fd:5e:24:47:72:c0:65:dc:0f:6e:13:b1:ab:
fc:0f:ac:20:f4:c0:d9:d8:ea:4f:e2:2f:54:42:91:25:da:18:
7f:b2:c8:5f:e6:bc:42:33:b5:b9:4f:d5:76:43:01:18:35:e9:
04:64:8f:fd:30:49:83:c8:1e:1f:b8:ab:06:84:7a:20:1d:9d:
18:b6:4d:af:f2:78:9c:d5:6d:24:d2:68:52:03:31:3d:e5:23:
67:31:f8:f9:93:38:8a:db:c5:28:d7:5f:3e:2d:51:90:09:fb:
41:d4:2a:66:2c:f1:00:3d:e0:64:1a:1e:a5:da:d5:f1:6c:a7:
5c:3f:7f:cf:82:bb:d6:97:04:c7:ce:83:c8:68:45:41:29:3f:
f4:29:a1:31:40:15:d9:0b:1b:27:9c:3e:15:b9:30:6c:12:a9:
46:77:2d:26:53:4a:ba:0f:dc:96:98:75:61:9f:1f:c0:5c:09:
fd:74:8c:02:d8:58:2a:b3:c2:26:43:e3:b5:72:2c:fa:f6:3c:
e8:bc:ae:d2:43:4c:83:a6:54:e8:88:94:91:7d:af:39:c9:5e:
66:52:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:17 2025 by rpki-client