Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bZ_RGQIxbAQyOfc3T53oCyaQZ2k.roa
File: bZ_RGQIxbAQyOfc3T53oCyaQZ2k.roa (raw, json)
Hash identifier: oGcgfILcUwXIQeOYTvA46rJXOtgOLMBmnecZk9ap9Js=
Subject key identifier: 6D:9F:D1:19:02:31:6C:04:32:39:F7:37:4F:9D:E8:0B:26:90:67:69
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252229EB8CBEA321F52D09FE67554C10
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bZ_RGQIxbAQyOfc3T53oCyaQZ2k.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207726
IP address blocks: 2a0e:b107:560::/44 maxlen: 48
2a0e:b107:ce0::/44 maxlen: 48
2a0e:b107:cf0::/44 maxlen: 48
2a0e:b107:1050::/44 maxlen: 48
2a0e:b107:1060::/44 maxlen: 48
2a0e:b107:1060::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:eb:8c:be:a3:21:f5:2d:09:fe:67:55:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9fd11902316c043239f7374f9de80b26906769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:8a:18:78:00:f3:6f:cf:b3:b1:24:59:4e:
1e:4d:92:42:37:c1:da:e1:0a:13:3d:c2:f1:3e:92:
69:0e:da:63:93:2e:f4:32:43:d7:53:86:2b:51:23:
f3:6d:3a:3f:73:8f:2d:91:46:90:48:3a:ea:b6:3a:
1e:3d:68:fd:65:23:39:60:81:26:a0:eb:3c:b0:47:
da:d5:6f:b2:6c:7f:a4:65:e0:36:f6:8e:a4:29:d5:
22:41:08:e8:9f:a3:77:99:74:86:11:3d:39:54:2a:
6d:d4:f1:16:d6:52:26:8f:57:c6:85:f5:9a:06:3e:
75:dd:08:65:f9:9c:6a:aa:54:99:a8:27:da:fe:7a:
22:ad:73:aa:e1:36:d4:36:fb:a7:af:db:19:85:cf:
78:c1:29:b3:ff:5c:d4:22:84:72:ae:07:79:1c:dd:
71:5d:28:8e:ee:cc:94:47:96:a0:75:d6:60:e2:2f:
25:8a:07:d3:69:e4:2e:5c:3b:16:d3:6e:25:5e:fa:
07:f3:8c:b2:85:5d:e0:ae:73:9f:01:c3:db:b6:c8:
40:04:76:7d:ed:84:36:69:19:2d:88:6f:92:d7:77:
b9:fd:b6:e6:bf:50:5e:64:e3:42:db:1e:e0:4e:39:
d0:47:6e:c9:5c:ed:be:f6:29:29:7d:cc:e2:0b:a9:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9F:D1:19:02:31:6C:04:32:39:F7:37:4F:9D:E8:0B:26:90:67:69
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bZ_RGQIxbAQyOfc3T53oCyaQZ2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:560::/44
2a0e:b107:ce0::/43
2a0e:b107:1050::-2a0e:b107:106f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:b0:bd:58:2a:4b:45:21:67:38:ea:ce:bd:ee:8c:39:4e:2e:
4f:70:59:b2:37:37:95:d9:62:70:98:c3:c3:b2:e5:87:14:29:
e6:c9:ce:c9:94:20:30:01:37:a6:02:ab:84:df:8d:d8:a9:ed:
48:e5:7c:00:40:1f:96:28:6d:81:30:e0:93:35:51:80:27:7b:
71:e7:86:8f:23:70:1b:c3:6f:c6:f3:de:6a:da:88:1c:56:f7:
68:4e:a4:68:0f:2a:13:eb:3d:ce:59:3f:38:7b:88:72:2f:f8:
24:40:ce:7f:76:50:e5:e4:2a:fb:f9:3d:7c:f8:6a:4b:f3:d9:
85:0a:c0:40:d0:ab:f8:42:ee:f6:a7:eb:c0:fe:7a:68:d6:e2:
64:f4:1b:fb:b1:41:5e:a9:1e:66:b2:c5:f7:6c:a4:06:6f:9e:
e0:2e:f0:38:b2:c5:2f:fc:e4:7c:c3:d2:80:b9:48:55:c5:ee:
ff:f0:34:9a:04:bd:12:6d:07:70:3d:f4:cc:74:10:42:c6:3e:
79:de:b0:3e:22:3d:50:db:b8:37:78:97:59:52:d6:c0:28:01:
28:c3:39:1a:f7:d9:c3:8d:b9:86:f3:b4:af:6f:02:9f:0f:e8:
30:ac:23:42:8b:6d:f6:9f:40:61:82:5e:68:12:32:53:c3:bd:
32:f4:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:24 2025 by rpki-client