Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_rXZ7N3lI9bTlUDdpaUb5mmeHEw.roa
File: _rXZ7N3lI9bTlUDdpaUb5mmeHEw.roa (raw, json)
Hash identifier: X9MkaSRxAzk5SwIav03UUtzmL0fEPPMggWfemdc7JOg=
Subject key identifier: FE:B5:D9:EC:DD:E5:23:D6:D3:95:40:DD:A5:A5:1B:E6:69:9E:1C:4C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252283F05030B89ABB64A2F85C33FCF2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_rXZ7N3lI9bTlUDdpaUb5mmeHEw.roa
Signing time: Thu 02 Jan 2025 03:50:06 +0000
ROA not before: Thu 02 Jan 2025 03:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215168
IP address blocks: 2a0e:97c0:7c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:83:f0:50:30:b8:9a:bb:64:a2:f8:5c:33:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feb5d9ecdde523d6d39540dda5a51be6699e1c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:00:74:ef:85:61:cb:42:93:b3:06:59:63:
be:c2:d9:42:83:59:24:34:0f:5e:64:88:01:0c:f5:
bf:c0:ad:07:40:80:17:93:33:53:c9:30:22:36:aa:
ed:f6:58:1d:0b:28:ca:4a:57:c7:32:8e:53:1d:df:
42:3c:e5:4a:62:df:1b:8e:11:fb:46:5e:82:ff:e8:
01:37:1d:7a:21:bc:80:33:d2:9e:c9:1d:c6:26:8f:
14:91:c5:bc:0f:10:92:a1:0c:e3:2a:51:84:56:6d:
88:de:50:52:44:b4:48:83:ea:cf:3f:4e:81:b5:ca:
ef:56:e2:ef:3c:9a:52:86:50:92:21:a8:15:2b:b7:
42:f6:90:f6:a8:73:03:04:2f:70:c6:7c:24:b3:d7:
3e:99:68:c5:17:91:9a:7b:12:08:08:4e:7d:f1:06:
ab:b3:02:48:f6:57:92:72:ba:3d:32:41:90:78:7a:
b9:75:0e:fc:dc:92:0e:7c:7b:f4:d7:b9:17:e0:4c:
18:ef:59:38:b7:da:81:ef:60:5b:7e:33:a9:ae:da:
59:34:93:84:ce:67:8f:9c:34:2d:c8:c3:97:b6:1f:
48:c1:24:92:66:41:b3:7f:0d:2d:a6:f1:0c:d4:09:
9e:57:31:4e:c9:31:8c:c1:9a:d6:75:8d:ba:07:96:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B5:D9:EC:DD:E5:23:D6:D3:95:40:DD:A5:A5:1B:E6:69:9E:1C:4C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_rXZ7N3lI9bTlUDdpaUb5mmeHEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7c0::/44
Signature Algorithm: sha256WithRSAEncryption
40:d6:84:67:e9:79:66:81:1b:5d:f1:b2:5d:92:50:54:66:85:
53:06:61:da:77:d2:a4:b1:ae:27:08:61:9f:0a:0a:0f:b5:45:
ad:e7:c4:4a:4e:4b:c1:57:4d:98:25:a8:71:bc:09:b9:57:12:
f9:ce:25:2a:23:df:b7:1e:ce:c1:bd:fa:c1:1e:3f:02:72:21:
a3:c5:20:ea:8c:82:9a:3d:73:4c:41:11:31:77:ac:de:13:6c:
82:7d:b3:26:41:72:71:00:e3:0c:98:43:6e:35:f0:36:c8:75:
9e:e6:f8:29:8e:ae:2a:bd:7c:95:6e:91:48:56:6e:7d:0e:1c:
a5:06:18:2b:da:e4:1f:62:e9:10:ee:3e:a3:f4:9d:51:bd:d9:
59:bc:3d:0a:8d:87:a7:c6:b0:ca:ec:6b:db:5b:f2:d6:fe:81:
f5:6d:05:c5:01:57:99:27:bb:f7:8b:e9:c1:cc:dd:2e:46:d5:
8e:89:56:8e:75:02:63:df:49:a3:eb:32:1c:a0:c7:56:ac:5f:
49:94:62:43:41:34:38:b7:98:63:38:a8:7e:fb:a2:e5:9a:08:
2f:8b:d8:d1:4d:22:15:15:0a:0f:e3:81:30:16:64:08:fb:6a:
60:3e:8e:9e:36:8b:eb:3d:bd:64:47:a5:41:1f:9d:19:10:e2:
b4:64:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:45:32 2025 by rpki-client