Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e7th2FYJmyobZ1ASQcOFLmPbIt4.roa
File: e7th2FYJmyobZ1ASQcOFLmPbIt4.roa (raw, json)
Hash identifier: onQdpxomwYiCdrKXU5HUOUuf5rms7U17Gvxk8Tk/59M=
Subject key identifier: 7B:BB:61:D8:56:09:9B:2A:1B:67:50:12:41:C3:85:2E:63:DB:22:DE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252249DD271709B5D59A6DBC3AB917FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e7th2FYJmyobZ1ASQcOFLmPbIt4.roa
Signing time: Thu 02 Jan 2025 03:49:51 +0000
ROA not before: Thu 02 Jan 2025 03:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211042
IP address blocks: 2a0e:b107:14c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:49:dd:27:17:09:b5:d5:9a:6d:bc:3a:b9:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bbb61d856099b2a1b67501241c3852e63db22de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:11:33:fb:b0:3e:1d:3d:1f:87:6a:ef:29:
22:f7:0c:6b:0e:2f:5c:87:36:a0:b0:ff:a2:15:d5:
6b:4d:b4:3d:43:83:87:cb:3e:4c:76:25:df:3c:7d:
c2:7f:18:8a:1c:ed:92:f9:5c:45:56:3e:3d:0a:c8:
0a:27:f8:73:f7:1c:55:0e:5d:de:7b:ab:8f:2a:da:
05:c5:e6:e4:11:94:f3:a4:ae:5f:c0:72:e1:31:33:
03:f4:1b:e3:41:54:ed:26:cc:f1:42:3a:5c:50:bb:
e4:9c:1c:70:37:31:dc:a0:2f:dc:82:2d:07:fd:12:
43:79:27:9f:59:94:68:98:cf:45:07:5e:ce:fa:2a:
ab:29:46:48:90:68:97:69:5d:08:5c:fe:c4:3d:f0:
3a:0a:f4:61:49:8e:75:d1:ed:6b:23:80:e9:b1:2f:
4e:e6:14:07:28:98:d9:4b:c7:1d:17:fd:ea:14:d2:
ac:dc:c8:fc:38:64:ab:1a:3d:d9:b8:93:d6:f3:76:
f2:e5:50:5f:ca:51:77:27:64:2e:ce:8a:2c:18:85:
db:79:b0:c1:4f:ea:6a:d3:f4:3d:f2:c4:95:74:1b:
74:e5:aa:df:c4:6d:4d:fe:ef:2e:02:26:c9:38:ed:
bc:67:51:98:29:25:fa:66:b6:86:e2:5c:1f:ad:dc:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:61:D8:56:09:9B:2A:1B:67:50:12:41:C3:85:2E:63:DB:22:DE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e7th2FYJmyobZ1ASQcOFLmPbIt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:14c0::/44
Signature Algorithm: sha256WithRSAEncryption
34:4c:62:c9:9b:17:4f:86:30:ac:1d:d8:1d:32:b8:9e:b5:41:
59:d5:46:7b:5d:01:c2:35:a5:4d:00:40:ac:e0:c0:0e:92:ee:
25:af:4d:72:8b:fa:16:eb:05:e9:ab:83:ea:00:c3:59:77:c2:
3e:3b:fa:79:41:26:31:24:99:d2:d5:e5:94:4d:3b:84:dd:f1:
23:ea:02:a5:54:05:2c:21:21:ba:98:ef:7f:92:4a:71:be:dd:
dd:72:92:8c:03:8a:dc:6e:1c:0e:7b:58:df:fa:a6:49:2f:2b:
e5:22:07:a6:d2:eb:4b:b3:74:62:bb:4f:f3:d9:64:0f:0c:19:
3f:1e:76:c0:12:23:c7:68:7d:49:fe:4c:e7:7d:25:5f:8d:f5:
da:f8:50:9b:e7:88:10:66:24:f4:7f:65:ac:e2:81:b6:ca:e7:
df:9a:7f:8a:b7:97:7d:a0:59:b4:d1:da:af:92:08:3f:a5:df:
46:18:bf:71:28:71:d7:f9:a9:68:9b:9f:4f:af:8a:69:b4:c0:
49:9b:62:b3:7b:7b:62:65:53:19:90:6f:d4:11:aa:60:3c:23:
44:ee:ae:d2:d4:f2:ad:01:b4:44:d2:d8:71:da:1e:21:6b:12:
b7:0a:ce:8b:ee:8f:ca:0f:b2:d2:a4:92:e5:77:e2:ef:97:d1:
a0:46:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:24 2025 by rpki-client