Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_ACuKKcQ3IIGBOWRuSFuUuYFJmM.roa
File: _ACuKKcQ3IIGBOWRuSFuUuYFJmM.roa (raw, json)
Hash identifier: 2GgRjD2pQDbeAm9eIc/iOnysnFmwFuwHf1ulZU8vj+w=
Subject key identifier: FC:00:AE:28:A7:10:DC:82:06:04:E5:91:B9:21:6E:52:E6:05:26:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223C24439FBCAE97029EC4BFFCC0DC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_ACuKKcQ3IIGBOWRuSFuUuYFJmM.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210041
IP address blocks: 2a0e:b107:272::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:24:43:9f:bc:ae:97:02:9e:c4:bf:fc:c0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc00ae28a710dc820604e591b9216e52e6052663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:0e:34:2d:98:d1:55:7b:a1:80:58:bf:ac:
eb:78:02:87:94:03:13:bb:f9:be:dc:b5:56:cf:38:
f5:7d:a9:7f:f5:85:ea:bf:e0:2a:10:1e:69:cb:fa:
21:e0:65:3a:97:21:f9:be:cf:5f:27:00:ae:e4:e6:
8d:c5:1a:7c:98:74:0a:cc:b8:13:5d:ec:b3:ff:60:
af:0a:51:ae:0b:b4:64:d3:77:34:98:84:1f:08:ac:
39:06:bf:7a:88:f8:95:3b:35:24:ac:65:8a:36:df:
ec:a2:68:89:fa:1e:cc:1d:b7:6f:8c:51:d9:e2:da:
d2:c2:67:f0:f1:72:ef:43:4e:f5:a3:cb:3c:33:15:
5d:06:1c:c6:9f:9d:96:2d:83:20:a4:be:04:eb:74:
6b:ba:9b:31:fe:03:d2:cb:4d:4e:21:1d:f5:5c:79:
52:9f:8d:07:a8:0a:7c:b6:94:21:b1:41:b7:ad:51:
b5:c2:af:cf:7c:84:41:d2:7c:bc:6e:d0:1e:e6:ec:
59:96:87:97:17:f3:f4:91:65:d4:93:ca:39:b6:94:
75:95:e0:d6:d9:5f:3f:8d:63:61:4f:00:3b:45:9d:
9d:d4:98:d1:06:25:c1:1b:1a:b0:6f:29:c3:15:8b:
48:2d:1c:cf:60:67:05:28:40:8b:98:92:1f:75:01:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:AE:28:A7:10:DC:82:06:04:E5:91:B9:21:6E:52:E6:05:26:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_ACuKKcQ3IIGBOWRuSFuUuYFJmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:272::/48
Signature Algorithm: sha256WithRSAEncryption
3e:4a:5f:bc:67:f7:98:e2:a8:1b:4e:7f:f8:72:ce:0b:0c:8a:
7b:64:f5:ed:af:33:1b:66:ac:73:c5:49:46:dd:d8:69:38:bb:
0f:be:77:d0:ab:d8:be:01:51:45:94:50:c1:67:7b:11:47:e4:
e1:a1:e5:5f:bc:39:09:0b:9e:a0:bc:24:af:35:2f:79:51:73:
f9:36:4f:73:be:a1:d1:14:f0:14:db:65:b8:74:fa:09:c3:f2:
3e:df:f3:69:e3:f0:1b:a8:e6:1d:40:3b:c7:0e:1c:a4:48:38:
4d:f4:a7:a9:24:35:bd:f4:f3:f1:32:15:ba:d3:71:92:54:28:
bb:71:60:2c:dc:8c:fb:61:4c:da:32:aa:23:c4:e4:29:85:f1:
7e:2b:61:3d:b3:f3:21:ea:38:0f:d7:2f:d7:d0:13:54:32:41:
13:52:50:06:4b:7c:b1:73:29:9e:eb:2f:db:c7:63:b8:ef:d0:
bd:fa:8a:81:34:f2:8f:b9:80:b2:8a:8c:35:92:03:1c:77:c9:
b3:6e:fa:0e:48:92:27:46:57:0d:3c:21:df:d6:80:0b:34:53:
b3:a3:12:ba:ce:e2:e8:82:00:ee:5f:e8:a5:b8:f7:18:ee:d0:
1c:d6:2a:9a:c1:d9:71:b7:cb:a5:28:ad:02:81:28:4e:1e:41:
8f:77:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:24 2025 by rpki-client