Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eOeAqzx2khXrhlo5lF2YJdzAEH0.roa
File: eOeAqzx2khXrhlo5lF2YJdzAEH0.roa (raw, json)
Hash identifier: XoivtPyjVI9gskFYuBQHZZtdmURwk5g5/8kZmaN5BFQ=
Subject key identifier: 78:E7:80:AB:3C:76:92:15:EB:86:5A:39:94:5D:98:25:DC:C0:10:7D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425224A0C112CB1A677DB026499255430
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eOeAqzx2khXrhlo5lF2YJdzAEH0.roa
Signing time: Thu 02 Jan 2025 03:49:51 +0000
ROA not before: Thu 02 Jan 2025 03:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211044
IP address blocks: 2a0e:97c0:490::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:4a:0c:11:2c:b1:a6:77:db:02:64:99:25:54:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78e780ab3c769215eb865a39945d9825dcc0107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:c2:32:2b:9e:e4:f4:47:13:67:98:25:76:
9d:1a:3a:f6:86:8b:0c:45:19:14:ef:78:53:7b:ac:
63:8a:25:71:c6:d7:a7:81:49:54:e4:e6:d2:dd:45:
3d:c7:b9:ea:f0:cc:4b:ec:bb:f0:e6:6a:2d:bb:72:
51:11:eb:57:2a:a5:c7:73:46:be:16:0b:5f:6f:09:
87:63:93:bd:6d:af:05:49:a6:e9:38:b6:77:ee:78:
f7:25:d0:22:d5:9c:52:11:5b:45:5d:07:06:b2:fc:
27:4a:f5:97:5f:8f:6b:4c:3f:a6:98:c3:11:f2:35:
b3:09:a3:0e:66:10:ba:04:b6:f1:7a:16:dc:95:2e:
dc:e4:09:9d:73:32:be:2c:45:1a:15:ac:79:a8:b0:
ac:c4:72:e0:35:17:75:21:9d:d5:85:6c:77:2e:5d:
5b:a7:7f:f6:fd:ea:7e:4a:04:be:b7:5f:d2:fc:d6:
cd:68:9a:d1:61:24:cb:c0:0b:44:b9:2b:86:02:03:
42:7a:11:3b:b7:72:5c:7c:c0:58:2c:92:0e:2f:d7:
a4:eb:f4:64:4f:30:3e:0b:8c:30:9b:e6:67:31:98:
07:78:76:a9:8e:ac:e7:eb:a4:4f:50:f6:64:39:44:
56:3c:38:76:ca:d2:a8:76:a0:b1:72:9e:3d:62:23:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:80:AB:3C:76:92:15:EB:86:5A:39:94:5D:98:25:DC:C0:10:7D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eOeAqzx2khXrhlo5lF2YJdzAEH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:490::/44
Signature Algorithm: sha256WithRSAEncryption
a4:f3:1b:1d:50:a7:1c:a5:a5:35:1d:14:33:7d:44:48:79:62:
e6:56:b4:0b:55:de:14:0c:71:46:4e:a7:61:e4:93:76:31:33:
47:54:94:a1:8b:67:91:dc:c2:85:97:04:6b:75:0f:57:59:f4:
fc:df:88:03:ac:45:bf:8a:20:91:0a:d3:33:90:84:41:c2:48:
46:5e:b8:f1:5c:ef:a7:5e:3e:eb:d8:a2:31:12:13:9c:39:21:
0f:89:b8:e5:8f:83:e9:a4:80:9c:53:a7:00:b5:05:fa:6e:ce:
2c:23:1e:ac:b7:18:0d:48:32:85:dc:c7:95:51:b5:f5:b4:38:
d3:29:d3:2e:f9:77:98:a9:34:4b:a9:9c:eb:7d:e1:5e:bf:0c:
4b:11:46:46:d3:71:f7:a2:eb:4b:dc:df:27:ef:b8:fe:3a:05:
11:3d:5f:63:24:79:4f:b3:f1:60:cb:0e:ea:4d:d7:d3:86:d9:
41:55:58:15:8d:f7:98:90:9e:25:54:7b:cf:06:e9:88:b7:0c:
75:bd:df:ff:e6:f2:64:be:f5:af:da:08:48:1d:29:67:25:a5:
77:1e:48:d1:26:10:f1:99:f3:8c:a0:3e:99:d7:f0:75:b7:0c:
e6:5e:27:95:7d:f4:ea:3d:77:75:7c:26:67:4f:e6:ad:53:9b:
2f:e1:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:55:56 2025 by rpki-client