Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_vWMKL0CwAixJYtOhgHYY7jiwT4.roa
File: _vWMKL0CwAixJYtOhgHYY7jiwT4.roa (raw, json)
Hash identifier: tKwD+0348Lch8n+MHgSQtgCGPibiJsY4K0mVePGZm/g=
Subject key identifier: FE:F5:8C:28:BD:02:C0:08:B1:25:8B:4E:86:01:D8:63:B8:E2:C1:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D6B937C907F66BE96FE390F049C8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_vWMKL0CwAixJYtOhgHYY7jiwT4.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50104
IP address blocks: 2a0e:97c0:600::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d6:b9:37:c9:07:f6:6b:e9:6f:e3:90:f0:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fef58c28bd02c008b1258b4e8601d863b8e2c13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:ca:bb:73:cb:f4:ce:39:b1:30:9b:aa:e2:
38:92:50:65:6f:d2:df:a8:82:08:00:6b:98:ef:c1:
f6:92:2f:86:c4:32:30:51:24:f5:a3:2d:b3:2c:29:
19:06:bd:e9:33:9f:5b:10:c0:4b:00:e5:3a:bc:8e:
a8:24:d1:86:cd:5f:e3:d1:5b:44:3b:21:1f:a9:db:
3c:71:00:49:f7:69:0a:17:be:b3:1f:6b:12:9e:c2:
0b:7d:35:54:52:20:2c:a3:c2:61:c7:7f:6b:8b:85:
f4:b1:8f:a7:2b:72:01:a2:95:52:26:e5:3a:bb:ab:
c8:bc:4e:f2:07:db:dd:a9:53:aa:b3:16:ca:bc:a5:
41:23:28:9e:d8:e9:97:92:83:c8:78:d2:3c:bd:43:
ed:b0:f4:80:b9:b9:0c:34:1b:fc:7c:fe:b6:c0:ce:
ed:06:e3:e4:8e:5b:a3:dc:d8:37:61:c3:75:4d:a1:
a9:bf:66:03:84:17:72:0a:f1:57:1c:ab:e4:8c:90:
89:4b:10:ba:dd:b1:cb:48:38:59:f0:99:1d:f0:59:
a5:78:1c:88:be:29:4b:bf:aa:f3:ab:c1:d1:80:3b:
cf:ac:c3:58:a8:eb:88:28:60:e7:b7:15:37:b5:29:
0e:ee:7b:d5:06:e4:bf:e4:06:0d:6f:49:20:b8:d1:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F5:8C:28:BD:02:C0:08:B1:25:8B:4E:86:01:D8:63:B8:E2:C1:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_vWMKL0CwAixJYtOhgHYY7jiwT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:600::/48
Signature Algorithm: sha256WithRSAEncryption
40:66:2b:f7:a1:06:75:b1:1e:b5:f1:05:06:7f:db:45:32:d4:
44:1a:6d:fc:dc:5a:63:81:8d:59:f7:de:71:d7:a1:b7:28:e9:
ea:bf:5a:f0:4e:6c:17:e2:35:55:21:59:ac:c0:e5:ba:55:8a:
51:78:43:3b:64:6e:54:c6:62:1d:2a:53:bf:03:be:8e:a8:58:
4b:ab:17:52:53:39:dd:80:76:32:19:5d:3e:3e:74:b6:71:c5:
e8:47:ab:c8:a3:5a:30:6a:cf:f6:47:4b:a8:f8:7e:17:f5:f9:
40:07:e5:a1:79:c6:27:12:56:90:c6:de:29:a8:b9:65:e7:d4:
6b:44:70:bb:d3:a8:bd:8f:0a:9e:ee:80:02:9c:4b:0a:73:aa:
ed:fc:26:8d:c6:85:21:87:ea:8a:90:6a:6e:eb:92:12:9d:cc:
ae:25:5d:00:79:43:4e:4b:ff:f6:2f:b7:8f:73:6b:d1:ac:42:
90:66:19:1e:f3:64:63:9c:14:1e:6a:65:ee:88:56:51:d8:fb:
04:17:f2:ae:64:b2:ce:d9:59:2d:49:40:39:d9:ff:d8:7a:10:
f3:41:98:6e:32:44:b3:e4:83:da:e0:0a:e7:08:d3:41:44:f6:
e6:a2:85:cd:06:b3:9f:b1:90:58:07:2a:eb:82:ab:9e:70:f9:
96:f6:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:51:29 2025 by rpki-client