Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fFsLJxCfH5v5sKFN10dMRGeNg2I.roa
File: fFsLJxCfH5v5sKFN10dMRGeNg2I.roa (raw, json)
Hash identifier: KifbBz47LGn1IqC5dNGrJszwnbfxxNBT76FwPEccr9c=
Subject key identifier: 7C:5B:0B:27:10:9F:1F:9B:F9:B0:A1:4D:D7:47:4C:44:67:8D:83:62
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252219BC2AA8BD053E16AAA8952EE65B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fFsLJxCfH5v5sKFN10dMRGeNg2I.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204693
IP address blocks: 2a0e:b107:1ad0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:19:bc:2a:a8:bd:05:3e:16:aa:a8:95:2e:e6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5b0b27109f1f9bf9b0a14dd7474c44678d8362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:8d:62:9e:e5:11:3f:f3:ba:ad:c5:e8:5b:
fa:f9:6a:c5:2a:a9:bf:ef:1c:72:39:a9:cd:96:f8:
93:aa:fd:1e:b5:f1:c8:ae:bf:1a:96:f0:40:18:8c:
66:eb:1c:7b:bd:52:83:08:2d:28:ab:7e:39:f2:df:
ab:19:07:7b:1b:f1:cf:2e:db:d4:d9:0d:ca:0a:62:
6a:5f:7d:d3:af:47:6f:c1:22:49:23:2a:8b:69:6f:
ef:c4:28:8a:35:87:48:11:ac:11:80:9a:42:8c:26:
d6:8a:b5:0a:91:72:48:4c:b2:9f:5a:a9:fa:85:bf:
f4:88:2a:2c:f1:51:e9:30:9a:2f:b4:73:4c:4c:68:
3a:88:17:9d:e3:3b:1d:72:cd:8f:f8:dc:42:e5:22:
71:20:42:bd:e8:f2:16:43:81:8a:c7:43:6d:47:14:
5c:9b:3a:19:08:7b:81:8d:37:74:66:fd:4b:79:76:
e6:91:da:8e:8c:3a:a5:4d:a8:56:05:75:d9:25:ec:
e9:83:e7:43:f3:cb:2e:b8:7c:c3:19:09:7b:eb:55:
de:d5:34:d0:c5:94:6d:48:6f:64:3d:d7:74:f5:2a:
ed:59:27:f1:a1:57:23:f8:73:a7:f6:2a:9b:cc:2d:
c2:59:33:ae:27:92:8f:c1:94:7b:ad:40:ef:ca:4b:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:0B:27:10:9F:1F:9B:F9:B0:A1:4D:D7:47:4C:44:67:8D:83:62
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fFsLJxCfH5v5sKFN10dMRGeNg2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ad0::/44
Signature Algorithm: sha256WithRSAEncryption
a6:8d:6d:e6:30:c8:28:9f:ef:92:d2:71:59:9c:6f:b4:0c:2b:
78:e8:a0:e0:2a:37:43:d6:c1:8f:bb:ab:64:4c:85:9f:6c:8f:
9e:6f:1f:25:00:60:89:a7:eb:ee:43:af:35:01:57:06:f0:8b:
88:ee:69:52:fc:1d:36:cc:2e:95:67:77:12:1b:10:e0:36:08:
78:34:35:ea:28:8a:95:90:37:ef:57:bc:a1:0b:da:4b:1b:ff:
77:c0:ad:48:6f:e6:4f:2b:13:03:50:b4:9a:93:0b:48:73:d6:
e2:69:92:7a:60:ee:ed:5e:2e:78:5e:74:8e:13:19:85:cc:77:
18:ed:62:3d:2f:e3:48:b4:76:91:f2:7f:09:99:28:d2:fb:e4:
ed:84:a8:87:6e:fc:04:ac:e7:4c:d5:50:c0:91:d3:9c:a0:66:
1d:c7:69:92:3c:46:85:4e:8f:6d:d4:21:de:94:bf:ad:48:f9:
67:b1:26:cc:b2:a7:09:0e:10:8d:98:8d:d4:fe:0d:3c:d5:76:
e6:b0:3b:01:ea:ef:cc:9f:c0:68:0d:eb:dd:a8:ad:55:1f:d8:
67:3d:ee:7d:51:8e:77:f3:ef:6c:7e:10:89:6d:6b:46:55:09:
31:cc:b9:fb:43:55:15:e6:64:64:f9:2e:38:59:04:3f:59:6b:
15:48:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:55 2025 by rpki-client