Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bd4_FwyH2qgt0Lo_2X8HfDsVobQ.roa
File: bd4_FwyH2qgt0Lo_2X8HfDsVobQ.roa (raw, json)
Hash identifier: 92mF7deLp5gdVC5iShBJ2HXciI2LrVfJPvfHcMoGB2g=
Subject key identifier: 6D:DE:3F:17:0C:87:DA:A8:2D:D0:BA:3F:D9:7F:07:7C:3B:15:A1:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252243D579CD6ABC6DE3936EDA3291AB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bd4_FwyH2qgt0Lo_2X8HfDsVobQ.roa
Signing time: Thu 02 Jan 2025 03:49:50 +0000
ROA not before: Thu 02 Jan 2025 03:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210667
IP address blocks: 2a0e:97c0:a40::/44 maxlen: 48
2a0e:97c0:a44::/48 maxlen: 48
2a0e:b107:1788::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:43:d5:79:cd:6a:bc:6d:e3:93:6e:da:32:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dde3f170c87daa82dd0ba3fd97f077c3b15a1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:2b:a9:ea:62:43:ee:64:5c:85:dd:4f:1b:
4c:7b:4e:e8:1e:ba:cb:90:c7:4a:38:c2:85:1d:23:
58:55:d9:b8:1d:54:dd:1f:ca:fc:e2:91:ba:08:ee:
9a:24:d1:52:c5:4d:54:33:1d:c7:1a:be:81:eb:9b:
59:55:d0:1d:0d:05:e3:cc:c8:c3:bc:a1:2b:23:51:
8f:ba:28:6d:90:98:dd:6b:8a:64:72:b2:99:67:1b:
e7:41:4e:4e:c8:f8:59:d2:95:12:8c:18:2f:bc:b5:
7f:1c:67:4b:bb:1b:2d:a0:28:30:73:2b:ac:e0:f1:
2a:c5:f6:48:d8:76:3e:5f:64:93:26:54:90:42:cc:
d9:a7:2b:6b:7c:12:55:20:95:4f:75:c7:e2:00:50:
82:d3:a1:bf:c6:05:49:a3:43:c0:7e:41:59:11:24:
3c:e4:4d:1e:39:1d:d1:61:d5:5b:35:a7:66:bb:43:
e2:32:61:77:3d:da:5b:39:fe:dc:5c:03:53:dd:e2:
6d:33:5d:16:5e:10:f9:ef:d5:ab:5a:be:2f:c5:db:
ac:73:6c:90:5a:54:21:c2:14:4f:84:e4:14:f9:77:
2a:d5:79:9b:84:14:3a:35:73:57:27:2f:bd:ae:a9:
d7:d0:c4:c4:2b:eb:78:1b:35:ac:1f:d7:fc:e2:75:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:3F:17:0C:87:DA:A8:2D:D0:BA:3F:D9:7F:07:7C:3B:15:A1:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bd4_FwyH2qgt0Lo_2X8HfDsVobQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a40::/44
2a0e:b107:1788::/48
Signature Algorithm: sha256WithRSAEncryption
1d:dd:18:5d:e4:68:dd:e7:c3:e4:fb:c8:7f:07:40:3c:12:0c:
b9:84:46:1d:99:cb:d0:b2:0a:2c:9f:40:e9:b7:1d:de:ca:4e:
19:85:96:8b:a7:d6:07:75:03:8b:19:a7:1d:b4:9d:66:52:f5:
e9:4d:fa:a8:58:35:32:1c:80:b9:7b:93:b4:10:68:13:6b:06:
aa:dd:d7:d9:e5:bb:9e:82:3d:a5:41:79:b2:b3:e9:a5:ce:53:
26:ae:1d:2d:95:b2:0e:5d:1c:09:a9:17:f5:05:26:9f:11:86:
2b:2a:bd:71:50:c5:58:5e:e0:47:ea:54:01:f6:f8:84:eb:66:
5e:43:99:30:43:fc:da:95:4c:b3:a2:a9:1e:6d:78:7c:f8:80:
ac:7e:c3:b6:e5:1e:9a:4b:2d:29:4a:ad:9d:e6:28:4a:0b:f6:
1d:45:8e:fc:e4:f4:67:2e:2a:0b:10:01:b0:a3:fb:e2:c3:0a:
3a:01:98:68:cb:b2:39:6a:a3:d1:3c:a0:d3:af:27:51:79:0b:
7c:20:d0:c3:e9:ab:ba:7b:e0:6c:29:d4:d1:7c:64:34:4f:b5:
59:89:b3:41:e7:6c:e0:0f:51:04:25:34:c7:b0:48:dd:7e:17:
35:77:b6:3e:d8:54:7b:4d:28:dc:12:a0:e5:a6:58:58:28:1a:
48:26:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:09 2025 by rpki-client