Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dYqbpqN5QVohNRtmNVFjWI2kbNw.roa
File: dYqbpqN5QVohNRtmNVFjWI2kbNw.roa (raw, json)
Hash identifier: mf8K2pZi/31WmPLz3WSHNFdAQ029ijqzVy7r/xz5r4M=
Subject key identifier: 75:8A:9B:A6:A3:79:41:5A:21:35:1B:66:35:51:63:58:8D:A4:6C:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521DF93E37C96C88CB4948AF2BA6E02
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dYqbpqN5QVohNRtmNVFjWI2kbNw.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 2a0e:97c0:7d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:df:93:e3:7c:96:c8:8c:b4:94:8a:f2:ba:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=758a9ba6a379415a21351b66355163588da46cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:4f:21:25:86:ac:1b:70:0b:a9:5f:80:06:
0e:db:7d:a0:bd:5c:8e:38:0b:bb:27:06:76:f0:a3:
9c:56:63:ee:ca:a5:60:3e:7a:f0:4d:ad:10:60:2d:
e2:f8:43:2c:52:08:7f:b4:cb:69:2e:94:f9:c4:e1:
a4:9b:d1:4c:bd:59:bc:ec:96:72:43:72:c5:38:fd:
3f:6e:87:19:c6:c6:40:e1:95:27:4c:22:e3:0b:7c:
3a:a3:f3:fa:ee:ff:fa:74:28:90:79:11:ec:35:61:
9a:f7:45:0e:83:c5:38:99:f8:90:70:34:47:db:6a:
09:f5:7c:0d:2c:45:04:ea:c5:77:98:d9:2b:00:53:
6c:c6:46:d2:65:d4:8e:b7:ea:f9:bc:ac:3d:90:89:
5f:d8:8a:f6:50:ed:5b:1a:0c:5f:ca:b4:7d:4b:66:
eb:2a:c2:9d:d3:74:a5:82:00:e6:de:d4:8c:90:cf:
82:6a:a6:a9:a3:bb:b3:34:06:61:bf:da:39:85:12:
49:16:4d:f7:d4:37:60:6a:e3:e3:08:51:f5:33:fa:
9c:b4:cf:dc:12:f4:5f:44:45:da:b9:fb:3a:c3:cf:
fd:27:c7:0a:b9:57:29:25:ae:cd:42:f6:56:6e:54:
dc:db:21:f6:48:95:a1:fd:91:d0:6b:5a:16:52:56:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8A:9B:A6:A3:79:41:5A:21:35:1B:66:35:51:63:58:8D:A4:6C:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dYqbpqN5QVohNRtmNVFjWI2kbNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7d0::/44
Signature Algorithm: sha256WithRSAEncryption
5b:43:1e:b9:ca:6c:82:b3:df:ac:99:43:eb:cc:65:f9:e4:6d:
33:0a:0a:38:9e:b7:f5:d4:3d:91:42:9b:5d:d4:eb:86:e5:53:
41:2a:4e:4b:f0:c0:5a:74:68:5b:63:77:f2:dd:2c:d3:fd:70:
a0:b9:2e:48:66:54:fb:f5:03:54:75:df:97:2f:4b:01:7c:74:
0f:a1:3e:6a:f8:86:60:4e:c7:96:8c:55:db:2b:8e:93:11:34:
f4:5a:b9:6a:30:9c:16:b7:5b:18:1c:aa:0b:5f:74:7d:f1:31:
ff:32:8b:b7:89:78:d8:d6:06:2c:a9:ee:b0:d7:a7:fd:29:56:
93:ff:4b:bc:66:6a:65:f4:12:79:53:a7:38:5e:47:bc:29:37:
26:c9:c1:b7:c5:6e:7a:ac:54:0b:35:76:8b:33:41:25:78:6f:
e6:10:39:5e:0c:d1:88:53:72:2d:5d:29:e5:36:18:bc:6c:6d:
c8:7e:7c:5c:52:db:ed:2e:94:7d:ea:55:73:79:ec:17:10:3f:
b5:8f:14:e1:33:5c:ff:61:d6:06:f1:15:8d:70:15:f2:70:4d:
1e:50:7d:53:64:99:59:c5:30:f4:26:40:05:4b:12:fd:dd:c8:
a0:1f:06:72:8a:e7:a3:64:2e:e2:cb:7b:5f:00:b1:db:3d:e4:
be:64:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:45:38 2025 by rpki-client