Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c0jqZvXQl9AnIUuAk_yR0j7KM5s.roa
File: c0jqZvXQl9AnIUuAk_yR0j7KM5s.roa (raw, json)
Hash identifier: cQHhaIfCj24/FTOSj+jzJFuxucUT0V8KoLRelPeePh8=
Subject key identifier: 73:48:EA:66:F5:D0:97:D0:27:21:4B:80:93:FC:91:D2:3E:CA:33:9B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521F468C67B864CCA4F9A2919E8B645
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c0jqZvXQl9AnIUuAk_yR0j7KM5s.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198071
IP address blocks: 2a0e:97c0:cf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f4:68:c6:7b:86:4c:ca:4f:9a:29:19:e8:b6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7348ea66f5d097d027214b8093fc91d23eca339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:ae:82:4d:ba:12:69:cc:66:66:01:96:85:
7d:85:03:6b:51:41:97:19:6d:8f:da:a8:c7:ec:4b:
c6:d8:8e:f9:a7:1e:44:8f:a7:49:91:c2:38:21:90:
12:e9:c4:8b:5c:e5:49:ab:42:d8:89:7b:fa:f0:f5:
37:3f:c2:ad:6f:14:c6:c7:df:06:ef:aa:db:78:95:
6e:80:23:3b:6f:e7:9e:21:16:96:b1:06:a8:64:1c:
b1:fa:b9:9d:31:2c:94:b5:37:4e:ff:e8:97:6c:2d:
2e:70:1d:dd:0c:07:6d:eb:c7:3c:9c:48:e7:55:3d:
33:cc:f2:70:a3:03:a2:7b:03:d6:72:57:5f:66:14:
8f:fb:0d:47:7e:cc:f5:13:e5:d8:ec:66:e9:66:bc:
4b:15:39:43:46:aa:f1:05:e4:84:ee:1a:bd:4b:66:
6b:6d:f0:5f:2a:8b:72:e4:e3:9a:99:4b:8f:30:91:
54:23:ff:53:96:01:06:95:99:cb:ba:89:2d:5d:9a:
14:8b:93:b0:8e:01:67:af:80:46:1f:12:fd:f9:d3:
2e:db:3f:6f:d6:90:53:b9:73:55:fc:dd:8b:39:f4:
ca:4a:3f:8e:08:5b:ce:1d:e1:b9:77:82:07:6c:5d:
35:e1:07:13:bd:bf:8b:43:43:f1:8c:ef:b0:18:e1:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:48:EA:66:F5:D0:97:D0:27:21:4B:80:93:FC:91:D2:3E:CA:33:9B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c0jqZvXQl9AnIUuAk_yR0j7KM5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:cf0::/44
Signature Algorithm: sha256WithRSAEncryption
32:a7:91:c5:7b:b3:4e:2d:99:b3:2d:f9:32:2d:47:2f:bf:fc:
d4:0f:3e:db:91:74:03:9b:9e:74:74:de:77:25:40:2b:ed:95:
bc:7d:d7:e9:13:36:a6:d3:f6:07:51:02:bd:1c:3c:cb:a7:1f:
78:76:1f:71:3c:6d:d8:50:77:85:4d:cb:1b:6d:58:bb:a7:2a:
71:25:d3:c6:54:de:63:21:2e:32:2f:2e:9d:41:3c:81:1a:1a:
c8:e1:66:87:99:f2:82:f7:d1:14:25:a0:2e:b9:d4:9c:c0:c4:
28:8d:c6:fd:fe:83:61:cd:dc:17:68:89:a3:7d:3c:b9:a4:ab:
29:1b:da:1c:fe:2b:16:49:50:1d:70:b7:2d:e9:8a:3f:c4:ff:
5e:b3:43:b4:74:4e:80:c8:7c:6f:00:50:85:c0:5b:93:95:ea:
08:ef:be:e4:7e:4b:92:b4:91:19:b7:fb:7c:e6:92:0b:2c:ce:
95:11:87:30:ea:3e:11:68:7d:32:b8:1d:2a:6b:97:9c:09:90:
a0:d1:eb:bf:96:62:7f:1e:e9:08:14:49:4f:ef:71:f2:01:7c:
fe:12:80:fa:41:b8:40:0b:31:c2:5c:92:73:8e:22:1f:d0:a1:
5c:e3:11:ae:27:0c:81:86:d7:bc:da:94:b0:6d:71:1b:03:18:
19:c0:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:55:55 2025 by rpki-client