Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zfi3g6RnUfKOk4_rpx-HdYeH-VA.roa
File: Zfi3g6RnUfKOk4_rpx-HdYeH-VA.roa (raw, json)
Hash identifier: kzCN3pJTgwsUNunpjqV+PyBNh2zIL5HS6VJt/DSSMNs=
Subject key identifier: 65:F8:B7:83:A4:67:51:F2:8E:93:8F:EB:A7:1F:87:75:87:87:F9:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521CD5DE6478D507DEC5517EC980099
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zfi3g6RnUfKOk4_rpx-HdYeH-VA.roa
Signing time: Thu 02 Jan 2025 03:49:19 +0000
ROA not before: Thu 02 Jan 2025 03:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39351
IP address blocks: 2a06:de00:10::/44 maxlen: 48
2a10:ccc2:20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cd:5d:e6:47:8d:50:7d:ec:55:17:ec:98:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65f8b783a46751f28e938feba71f87758787f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:46:8b:9d:72:b1:5b:e6:1c:50:b9:e6:ae:
cc:52:22:ce:c2:1b:69:0d:77:c1:65:42:56:1c:52:
0a:e5:ed:6a:09:c5:3c:c8:90:db:99:32:e1:24:eb:
2e:1b:44:b5:85:96:31:a3:ba:71:3d:1f:89:ca:0a:
d2:3b:cf:c8:4b:fb:c8:47:19:ce:42:0d:27:83:1a:
04:02:ae:e1:2d:7e:0c:ab:3d:e2:58:2b:18:a1:13:
c9:dd:cd:97:46:44:ae:ad:95:08:32:f4:d3:af:5b:
74:04:64:b2:6b:1e:4f:ad:f6:f6:80:b5:d9:bc:ea:
3f:c5:23:9d:3f:85:78:ab:4b:aa:f7:87:4c:3e:a3:
c9:79:bd:f0:71:85:39:74:81:d5:0b:bc:9b:88:f8:
cb:26:8f:05:b9:97:d1:e2:69:66:a7:c0:05:39:48:
dc:76:37:b0:58:70:24:af:fa:6f:f3:4a:b1:1e:e3:
b3:88:94:08:fa:b4:ea:de:db:9b:d3:a1:b3:fd:70:
5f:98:a0:46:84:c4:55:85:e7:7a:43:c0:0a:01:de:
fa:f4:ce:a3:93:77:0d:6f:b7:d9:63:7e:6c:6c:10:
81:ef:9f:49:43:25:7e:e8:68:86:bf:4d:9a:5d:e4:
b4:9f:1b:a3:b2:df:98:e8:61:99:de:58:3b:6e:67:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:B7:83:A4:67:51:F2:8E:93:8F:EB:A7:1F:87:75:87:87:F9:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zfi3g6RnUfKOk4_rpx-HdYeH-VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/44
2a10:ccc2:20::/44
Signature Algorithm: sha256WithRSAEncryption
3b:f6:d1:f4:19:ac:c0:84:c6:59:e1:2b:7e:3f:64:98:18:5f:
4c:70:05:78:21:c8:e0:8c:1e:4e:df:c5:ae:a3:8b:93:3f:74:
97:6e:d7:b2:00:8e:59:28:65:a4:72:46:14:42:5b:29:03:33:
69:d5:98:33:bc:c4:f4:c6:58:ee:58:71:7b:2b:74:56:86:c0:
4e:fb:1b:e7:72:0b:db:de:64:8c:b7:0f:51:dc:29:55:ba:45:
7d:a7:ec:98:52:de:b7:b2:10:29:9a:4b:86:ba:63:ea:aa:bb:
4d:d5:1b:dd:38:b2:6c:ea:c4:3f:10:04:f4:e9:7c:51:43:8c:
d1:40:50:0c:51:a6:00:fe:b0:7b:a5:4a:09:6b:6a:3b:14:61:
28:df:12:be:e1:c8:ca:d9:90:55:88:f7:8f:f5:1b:e5:6a:bd:
83:c1:6f:62:b5:f5:67:39:62:78:6d:b6:17:02:26:0e:b2:52:
e5:f6:c7:79:9c:d1:4b:c1:58:c4:95:78:82:91:1c:97:b5:6a:
ef:dc:b9:9c:c0:bb:08:3d:40:83:76:76:a0:77:cb:40:f1:a8:
9c:49:95:b8:64:88:d9:d1:bc:d2:e1:c6:2a:4a:40:9f:cc:02:
c0:d3:40:a6:c0:b3:77:0a:9c:5e:c5:42:22:25:6d:40:a5:f0:
3f:52:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:15:10 2025 by rpki-client