Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aSJe8ItTfPiy4N6-yPMY4bKTeLw.roa
File: aSJe8ItTfPiy4N6-yPMY4bKTeLw.roa (raw, json)
Hash identifier: 1jol5ZP1lYbxc8AA668pwvwRu18rKnYPiY/xL/Gh0Rw=
Subject key identifier: 69:22:5E:F0:8B:53:7C:F8:B2:E0:DE:BE:C8:F3:18:E1:B2:93:78:BC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522819F95DD08DA53DD969D3EE24B85
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aSJe8ItTfPiy4N6-yPMY4bKTeLw.roa
Signing time: Thu 02 Jan 2025 03:50:05 +0000
ROA not before: Thu 02 Jan 2025 03:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214953
IP address blocks: 2a06:de07:de00::/44 maxlen: 48
2a10:2f01:403::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:81:9f:95:dd:08:da:53:dd:96:9d:3e:e2:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69225ef08b537cf8b2e0debec8f318e1b29378bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:09:20:2c:a9:c0:2f:4e:05:aa:f0:47:51:
9b:1f:a4:f8:63:5d:f0:01:b5:4a:01:3f:7c:62:4c:
34:3b:4f:1c:e0:70:9c:cd:81:65:1d:db:17:b5:f3:
2f:ad:f2:4e:0a:41:d8:35:54:f9:ba:3e:2c:4e:b2:
5d:86:03:0d:5d:48:b9:56:99:87:36:8e:06:ab:59:
3e:36:24:98:ab:23:bc:75:71:f6:f3:ad:a9:47:38:
44:aa:5e:df:24:2b:ec:a7:ac:32:b9:f6:04:2e:b6:
33:f5:43:2d:69:09:3b:c0:9b:7e:f4:9f:0b:35:23:
f7:12:28:9b:9e:17:1c:d9:c4:30:d7:a3:79:f9:f5:
d2:78:0e:d8:bd:77:a4:d5:fa:38:6e:45:a1:f3:e2:
d6:97:0d:36:b4:6d:27:eb:ec:f9:c5:7b:77:43:a1:
17:0f:c5:70:20:7d:85:95:ca:0a:26:0b:f4:8a:a5:
1f:40:79:54:3b:81:ad:3f:77:4c:1a:66:0f:58:45:
e2:47:4f:42:23:b6:37:38:10:35:13:51:d8:e8:0a:
05:26:42:36:1c:e1:ff:b0:1f:d4:ba:9c:e5:d9:21:
8f:c1:4a:2f:f9:3a:6e:af:7b:9f:3a:5c:74:0a:15:
3c:1d:30:7e:e5:04:cd:59:d1:65:21:fa:f1:ce:4d:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:5E:F0:8B:53:7C:F8:B2:E0:DE:BE:C8:F3:18:E1:B2:93:78:BC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aSJe8ItTfPiy4N6-yPMY4bKTeLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:de00::/44
2a10:2f01:403::/48
Signature Algorithm: sha256WithRSAEncryption
a6:3e:16:b9:b6:63:a0:cf:c3:1e:72:a6:6e:f3:36:d7:8a:59:
48:52:a4:17:88:a3:70:a5:88:bc:52:1b:c4:85:d3:9a:ba:51:
84:c4:6e:d7:58:63:67:2f:0e:ab:95:e9:a6:a4:f5:cb:c4:46:
9b:74:93:fb:10:a1:33:fc:83:15:90:63:d0:e4:8b:81:b2:35:
2e:7d:ec:dd:e0:a3:fe:14:7d:57:15:77:fd:ae:d1:ed:bb:14:
e6:8d:c5:51:96:fc:41:a6:0f:d3:14:5d:1f:31:ea:4e:23:0c:
2a:50:b3:e3:1d:15:8c:17:6e:3b:28:bb:61:c2:69:04:83:1f:
a8:36:56:a7:de:9a:4a:95:83:af:38:bb:41:7b:e3:9c:e1:c4:
31:8d:98:c2:ee:32:9b:ca:fa:ee:fd:04:8d:93:47:f9:45:a7:
36:7f:ec:bf:56:c7:c8:19:b2:42:c9:49:9e:8b:cb:22:fa:20:
37:1d:17:15:35:a9:3b:76:fe:48:0a:b7:9d:43:a2:bb:cd:a1:
0a:d1:e9:bd:be:52:88:bd:5c:30:40:6d:1e:f1:0a:7f:f4:f4:
b2:d1:cb:be:84:de:b3:52:d4:61:a7:46:69:89:6b:73:9e:5c:
c9:1c:f2:c0:4c:62:d5:04:4f:bd:07:1a:89:c4:9b:24:4c:cd:
39:52:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:23:47 2025 by rpki-client