Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YVlWW3J76o669Md621iDJuFZ7WI.roa
File: YVlWW3J76o669Md621iDJuFZ7WI.roa (raw, json)
Hash identifier: vyOiSsyARxYZddo5RBRk0OwURzYTJyCwsxz6HLHwXpo=
Subject key identifier: 61:59:56:5B:72:7B:EA:8E:BA:F4:C7:7A:DB:58:83:26:E1:59:ED:62
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522413D66F8B6D07868C946951A750C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YVlWW3J76o669Md621iDJuFZ7WI.roa
Signing time: Thu 02 Jan 2025 03:49:49 +0000
ROA not before: Thu 02 Jan 2025 03:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210617
IP address blocks: 2a0e:97c0:5a0::/48 maxlen: 48
2a0e:97c0:5a1::/48 maxlen: 48
2a0e:97c0:5af::/48 maxlen: 48
2a0e:b107:cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:41:3d:66:f8:b6:d0:78:68:c9:46:95:1a:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6159565b727bea8ebaf4c77adb588326e159ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:a5:7e:c7:e7:ba:98:4f:31:0c:46:72:67:
9e:f0:45:cc:e6:90:5a:6d:c0:fa:10:4a:32:02:85:
ac:bb:04:4d:57:bb:18:ce:74:b9:c6:94:79:6b:c2:
7e:e2:57:27:96:57:21:23:d3:57:9f:81:28:70:a8:
38:8e:25:88:96:4c:f8:aa:17:dd:98:1f:1c:d1:ca:
b1:5e:4a:de:e4:90:de:85:30:ab:8b:9b:4a:f9:25:
70:d6:9f:3b:16:01:20:9c:dd:50:38:5a:06:a4:6d:
ea:f0:80:ff:8e:30:14:23:36:08:17:0d:89:72:f3:
7e:27:72:a8:32:ce:66:09:8f:cd:5f:ec:26:64:44:
9f:80:58:91:91:0d:2d:ff:43:82:e2:f3:c0:d5:f8:
7f:81:30:d5:3f:f1:59:1d:a8:44:60:50:a1:2a:10:
ec:a4:9e:2d:51:d5:23:8d:5f:e3:b5:e5:1c:c3:8e:
98:c6:d6:d2:9f:65:50:4f:1b:89:57:c0:20:bd:e5:
ef:21:2a:8b:31:75:3f:48:04:48:5c:c3:97:db:1b:
22:05:e2:fb:a2:3c:c1:d0:97:0b:63:82:2f:1a:52:
94:54:ea:cb:68:3d:e2:70:62:08:21:6e:08:2e:7b:
ac:2e:f6:3d:59:93:4d:43:87:2a:2e:8a:88:4e:cd:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:56:5B:72:7B:EA:8E:BA:F4:C7:7A:DB:58:83:26:E1:59:ED:62
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YVlWW3J76o669Md621iDJuFZ7WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5a0::/47
2a0e:97c0:5af::/48
2a0e:b107:cc0::/48
Signature Algorithm: sha256WithRSAEncryption
2b:1e:c0:8f:06:60:18:9e:e8:33:38:06:00:0c:fd:44:ee:21:
24:cd:95:e9:bb:70:f5:f8:8a:0d:38:36:65:59:7d:42:f4:b2:
f8:2e:58:28:28:b6:d3:dc:c8:a9:a1:ca:83:3c:20:91:a4:8f:
06:3d:4d:a2:0e:f3:7e:58:85:13:78:74:0c:9a:9c:0c:89:59:
8e:77:71:14:76:07:21:c6:9d:30:33:2b:df:68:b5:4c:f6:87:
7f:3e:54:90:4e:72:ba:2c:aa:ce:46:e8:3d:3e:70:bb:32:38:
d0:a9:a7:45:62:de:89:84:96:12:6c:ab:b2:2e:28:63:d0:82:
34:ac:6b:5f:1b:31:40:ce:4f:31:0e:1c:f2:cf:97:6a:04:95:
fc:d4:2b:6b:00:c6:38:bf:9f:27:3e:81:39:75:79:da:cb:b4:
f9:4d:69:53:ef:b2:d4:9a:d2:14:1e:32:e8:8e:9d:41:37:30:
31:48:82:c3:9a:42:7f:aa:d8:85:9c:97:8e:d7:50:49:80:9c:
5b:0a:69:ee:56:e3:3e:40:bc:ca:74:f8:dc:de:02:21:11:02:
d1:49:15:6a:a6:55:d1:f3:63:16:06:f8:b8:98:ca:3e:80:ad:
37:ea:19:82:b6:6f:74:12:9f:fa:3d:8a:fc:eb:da:aa:e4:a0:
15:41:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:05 2025 by rpki-client