Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCdj-9UQByHm-7QdhYkOBsYF3tk.roa
File: fCdj-9UQByHm-7QdhYkOBsYF3tk.roa (raw, json)
Hash identifier: DEiQPSX5t2mXdHwPq21sj3ZTnj3Jyklic0bi0RQ0cSY=
Subject key identifier: 7C:27:63:FB:D5:10:07:21:E6:FB:B4:1D:85:89:0E:06:C6:05:DE:D9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195D68673C160D30FABD4D7E90495B67A0C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCdj-9UQByHm-7QdhYkOBsYF3tk.roa
Signing time: Thu 27 Mar 2025 07:34:50 +0000
ROA not before: Thu 27 Mar 2025 07:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209669
IP address blocks: 2a0e:97c0:a1f::/48 maxlen: 48
2a10:cc40:150::/48 maxlen: 48
2a10:cc40:151::/48 maxlen: 48
2a10:cc40:152::/48 maxlen: 48
2a10:cc40:153::/48 maxlen: 48
2a10:cc40:154::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:86:73:c1:60:d3:0f:ab:d4:d7:e9:04:95:b6:7a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 27 07:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c2763fbd5100721e6fbb41d85890e06c605ded9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8b:b6:00:85:f1:1f:47:29:97:6e:36:f2:3c:
81:4b:4b:3a:38:da:d7:a5:f5:dd:bf:ad:d0:7e:d4:
7a:5a:12:7f:20:8a:d4:7e:cc:f0:c6:29:e8:41:29:
cb:ff:4a:d9:cd:fc:48:53:43:e4:0a:64:71:69:e4:
a2:52:f2:4d:b2:ee:02:8e:66:9d:43:42:23:9a:34:
15:6d:da:76:d6:ac:9c:ae:fc:63:81:4c:cc:42:00:
f0:a4:a1:14:fe:f7:15:54:5f:da:95:1d:d1:9c:e5:
b8:3f:99:00:2c:23:66:bd:6a:c3:97:f6:4e:f5:d6:
8e:7b:73:ad:cd:23:22:d6:9e:05:a0:28:8e:b8:ea:
c8:76:1a:b7:eb:88:8c:9d:ae:82:b8:d6:d8:38:fc:
0e:a5:54:02:df:4e:c4:a5:7d:75:d8:1d:c9:3c:52:
cd:1a:b3:77:5d:df:c6:6b:9f:c4:04:6a:85:ba:4b:
2c:88:cb:ec:61:84:af:d9:d3:43:93:43:af:e2:53:
84:32:17:12:67:f4:ca:f2:ba:44:1d:85:1c:5b:54:
da:20:49:bf:86:09:a3:47:3c:1a:b7:0a:ce:42:95:
1d:d7:5f:f4:cb:88:c8:9a:c4:d8:0a:21:c6:3a:5c:
5f:84:0c:08:0d:75:94:bc:2c:44:43:b8:b2:24:e6:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:27:63:FB:D5:10:07:21:E6:FB:B4:1D:85:89:0E:06:C6:05:DE:D9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fCdj-9UQByHm-7QdhYkOBsYF3tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a1f::/48
2a10:cc40:150::-2a10:cc40:154:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:f6:b5:51:c0:84:31:d1:b0:c1:4d:ae:93:d0:da:a1:a3:a2:
ac:4c:68:61:99:ba:df:7b:d9:ac:15:da:52:50:db:c4:03:4e:
d3:a2:2b:72:f8:81:77:a4:32:aa:b9:b5:0a:bd:c9:07:6e:46:
43:7d:93:b8:96:69:09:91:4e:d0:e5:57:fe:90:28:cb:31:07:
d1:88:cc:4f:5d:6c:c4:4a:91:b9:a1:d3:cc:04:0d:1e:53:12:
61:7f:b0:54:99:12:10:19:29:8c:c8:3b:5d:f2:ea:ab:08:e4:
78:4c:aa:a9:b7:3d:38:34:40:1f:1a:cd:ec:cf:8a:9c:12:c6:
44:ef:e4:1e:b0:08:0a:53:63:45:2a:57:32:22:f0:99:bc:b6:
85:75:95:41:df:3a:37:51:dc:5f:20:a3:41:8d:9a:35:92:a2:
0f:24:ee:64:2c:fe:35:ca:81:5b:5c:ce:f6:df:48:ed:d9:c2:
67:68:05:76:bd:ae:6a:31:c3:1d:ec:cf:82:69:6a:24:b9:64:
e9:3e:72:e1:19:43:24:2e:22:eb:35:2f:b3:95:e8:db:5c:25:
de:72:26:b4:cc:ba:56:32:77:66:ae:3a:04:cc:85:12:cc:93:
88:93:6d:15:47:52:58:cc:c5:e6:f1:de:3d:a6:1d:82:d9:2c:
ec:0b:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:51:23 2025 by rpki-client