Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fWThAsf08oeFt_yqtgm5FdrprYU.roa
File: fWThAsf08oeFt_yqtgm5FdrprYU.roa (raw, json)
Hash identifier: PKhznLKIog4Xj64pJOm26+yhowiI2HytvEXSrjAwhlc=
Subject key identifier: 7D:64:E1:02:C7:F4:F2:87:85:B7:FC:AA:B6:09:B9:15:DA:E9:AD:85
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522889FE1E3695FA0298FF597567AD5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fWThAsf08oeFt_yqtgm5FdrprYU.roa
Signing time: Thu 02 Jan 2025 03:50:07 +0000
ROA not before: Thu 02 Jan 2025 03:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215492
IP address blocks: 2a0e:97c0:8e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:88:9f:e1:e3:69:5f:a0:29:8f:f5:97:56:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d64e102c7f4f28785b7fcaab609b915dae9ad85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:a7:47:ad:01:a9:78:00:53:2a:00:b9:96:
10:1d:9c:93:73:57:4c:cd:ef:d8:d9:07:76:e8:28:
26:65:5f:64:af:0f:e3:cf:53:f7:c8:76:a3:68:57:
8b:ae:37:94:42:d4:84:58:6d:14:31:96:70:50:84:
3e:dd:f4:0c:6e:b3:c1:a4:2e:9f:79:c4:c6:cb:95:
f8:9d:d8:24:17:a5:eb:05:66:b1:70:c2:05:26:fa:
98:43:d9:b9:4a:25:bf:c8:35:93:78:98:f2:f5:ce:
4e:d4:14:a5:9f:96:a2:5d:3e:1b:e6:f7:df:12:8b:
c5:7e:2b:0c:7d:bd:bb:64:7b:ef:37:0b:12:6b:a4:
67:a7:51:bb:6b:43:30:e2:f0:5f:cf:29:f1:8c:f5:
e4:f8:46:03:46:1a:af:ce:b7:5e:e4:ed:f8:ab:31:
0e:54:6b:34:7e:cf:c3:e8:6f:d1:79:cd:b1:5b:6b:
99:24:f6:ba:72:2e:03:db:a0:c4:e4:a1:62:cb:22:
63:d2:3b:bb:7c:94:9f:72:44:2b:4b:ac:2c:1f:fd:
a2:93:cb:7f:9f:dc:16:b6:52:bc:55:3a:27:b1:04:
c2:70:6f:04:ac:f7:99:98:e0:4e:7c:17:52:c6:2b:
24:6d:71:2e:07:ca:8a:30:59:5f:33:58:d5:73:f6:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:E1:02:C7:F4:F2:87:85:B7:FC:AA:B6:09:B9:15:DA:E9:AD:85
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fWThAsf08oeFt_yqtgm5FdrprYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:8e0::/48
Signature Algorithm: sha256WithRSAEncryption
45:1a:fd:fe:2a:b9:8c:9f:43:8a:73:69:a8:73:84:19:a2:b8:
4b:79:ad:a6:d2:6a:3e:87:12:a2:39:9b:96:54:32:14:46:89:
35:30:70:8b:ab:e5:b5:89:7d:3d:a7:cd:b8:fa:7c:38:db:3b:
19:7f:3b:73:e0:ca:d1:8d:bf:a6:0a:02:aa:bd:25:a3:87:70:
7f:29:28:f1:46:28:18:6d:58:33:af:7f:99:99:65:a5:8f:ce:
a0:2d:5f:03:33:cb:6d:c7:70:37:af:10:28:2d:cd:6d:69:bb:
56:b4:f9:54:9a:e4:e6:8c:e4:73:ff:08:4b:42:2c:12:13:0d:
f3:d7:27:93:e5:f0:f8:f4:2f:04:c9:dd:a8:40:a0:db:65:df:
ac:65:c4:56:8b:ab:9b:f8:f1:e2:b2:db:9f:d7:c6:fc:dd:d8:
23:c8:af:c4:0b:ec:2c:1c:82:9e:91:eb:dd:d5:98:23:58:6d:
c7:bb:ef:9e:61:fd:fb:d2:be:57:b6:04:aa:31:3e:18:05:15:
4f:ef:97:e1:78:55:14:de:47:18:d0:77:9b:c1:3a:59:5f:6d:
d3:be:0d:d5:d0:d3:fd:60:71:c9:8b:d2:d8:86:10:bd:f7:9f:
98:7d:8f:80:22:02:17:62:00:b3:28:51:92:83:11:81:50:d0:
8a:e5:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:19:02 2025 by rpki-client