Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/etjLP8Yr-SunJhuOgl3EUexFjFY.roa
File: etjLP8Yr-SunJhuOgl3EUexFjFY.roa (raw, json)
Hash identifier: BBe8CwhhvNsXcgOnQqyptimMC3o+aDFM0ZfKgvy1FCU=
Subject key identifier: 7A:D8:CB:3F:C6:2B:F9:2B:A7:26:1B:8E:82:5D:C4:51:EC:45:8C:56
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220607AF2AB649790E01D136E9EB7A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/etjLP8Yr-SunJhuOgl3EUexFjFY.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202000
IP address blocks: 2a0e:b107:1c20::/44 maxlen: 48
2a0e:b107:1ca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:06:07:af:2a:b6:49:79:0e:01:d1:36:e9:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad8cb3fc62bf92ba7261b8e825dc451ec458c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:66:f6:4e:67:d3:0c:84:6a:5b:80:d0:f4:6f:
0a:d8:84:f6:d4:17:98:0e:93:70:03:4a:c2:7a:25:
82:f0:29:46:50:09:1e:ba:e8:5e:7c:a4:cc:56:f7:
44:0a:1a:18:67:c0:46:6c:ba:0f:d6:95:89:79:a4:
6c:e3:b5:21:ff:33:55:e3:92:73:7b:86:3c:29:a4:
85:21:58:40:dd:3d:dd:87:34:54:ee:e1:b0:00:42:
1f:d2:96:1a:46:9b:f9:6a:09:c1:6c:17:cb:c1:a0:
7d:df:95:9a:d0:a4:f7:0e:33:88:21:3a:88:31:21:
df:bd:0f:44:47:3f:c5:cb:6f:5c:19:52:a3:5d:1b:
7a:ad:c1:e9:db:30:44:08:1d:1c:5f:fe:ee:c4:60:
f1:db:b8:ff:ae:6a:60:87:62:9c:eb:39:33:f3:92:
2d:8f:7d:24:fd:5e:88:89:10:fb:30:2b:b0:47:e3:
b2:d3:4c:0b:68:ef:f3:81:7d:6c:88:4d:4d:ee:0b:
3f:4d:b9:6b:64:a1:0f:0f:02:f5:5e:cb:fe:4c:36:
66:55:64:24:66:fb:92:6e:53:b3:08:1f:fe:1e:4f:
f1:a5:46:99:a4:6a:cb:67:d9:f8:69:c9:88:0d:56:
39:ef:15:c1:e4:a2:d5:e0:70:87:99:12:fb:bc:77:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:CB:3F:C6:2B:F9:2B:A7:26:1B:8E:82:5D:C4:51:EC:45:8C:56
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/etjLP8Yr-SunJhuOgl3EUexFjFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c20::/44
2a0e:b107:1ca0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:5f:2d:4a:98:01:98:7b:b2:ae:58:65:b1:06:8a:92:8b:2c:
19:fc:e8:b3:49:b0:fc:ce:0a:25:59:e1:56:fa:56:76:e7:37:
ce:2e:ca:a0:a8:a4:8d:d2:46:ca:c9:6b:30:99:5e:23:35:4f:
49:c1:57:f1:94:71:22:29:47:e4:2d:ba:ac:5c:6a:3f:be:d1:
da:e3:33:e6:a5:24:11:54:4a:97:3c:e9:b0:77:2b:5d:9e:f8:
41:29:1a:9e:d8:f3:26:f2:db:c2:74:16:23:e0:07:f7:50:da:
32:33:02:9d:31:29:da:b8:4e:61:ba:7b:28:e5:53:6f:8e:c9:
d1:f0:d0:cf:c0:8c:c5:ad:fb:15:a6:94:71:13:f5:20:d3:5f:
5b:1b:2b:92:50:03:ab:20:2b:ad:56:be:8d:b9:6f:d8:21:3e:
ed:e2:20:1f:40:02:22:86:45:d9:81:c2:dc:ba:c3:ea:7e:6f:
05:98:12:82:c7:ab:99:9e:24:9c:d1:bf:e4:e8:05:32:b1:cf:
ca:9f:88:d8:e4:1b:e9:8f:b8:54:2d:c7:2d:c3:75:a7:01:2f:
37:7e:db:64:f4:b5:6e:30:be:35:e5:9f:d2:b1:f3:bd:4e:be:
37:8d:9c:1b:52:75:15:1c:4b:30:93:b8:fc:2f:e8:7d:bb:34:
a0:30:6e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:12 2025 by rpki-client