Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxVVlHCeiFP36ZfHVFQUw9Ju4V4.roa
File: fxVVlHCeiFP36ZfHVFQUw9Ju4V4.roa (raw, json)
Hash identifier: FUF3UaTwqbUtmUae5GI2floQ5KwyHry2QkpFOmt12XU=
Subject key identifier: 7F:15:55:94:70:9E:88:53:F7:E9:97:C7:54:54:14:C3:D2:6E:E1:5E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252267C219DB3994F8DEE22D87BFC408
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxVVlHCeiFP36ZfHVFQUw9Ju4V4.roa
Signing time: Thu 02 Jan 2025 03:49:59 +0000
ROA not before: Thu 02 Jan 2025 03:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212858
IP address blocks: 2a0e:b107:88b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:67:c2:19:db:39:94:f8:de:e2:2d:87:bf:c4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f155594709e8853f7e997c7545414c3d26ee15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:cf:c0:f3:ef:67:bd:28:59:90:9b:22:08:
bc:3e:70:fc:6c:79:31:0c:51:fc:82:5d:86:35:df:
88:69:43:05:b9:04:94:a0:23:e4:3f:ec:f3:11:89:
b9:38:b7:d9:87:57:83:4e:31:a3:88:fb:9d:4d:3c:
84:cf:c2:19:dd:af:e3:15:2d:82:1d:28:1e:bd:47:
28:83:99:92:f6:9d:04:4a:23:52:ce:2e:a8:a5:69:
a6:b0:e7:7c:d9:d4:52:db:49:db:78:85:e2:06:a5:
0d:55:5c:58:93:d9:4e:93:48:b0:79:e6:94:0b:0f:
d0:67:08:da:c9:1a:0a:12:3d:31:58:b1:51:0c:b2:
43:a6:ad:1e:ac:f8:de:d0:20:1d:37:69:9a:47:b1:
a3:2a:ea:10:a6:12:47:27:e6:1c:0b:b7:1b:83:db:
57:d7:6b:cc:09:90:6b:95:2c:0c:57:23:4f:3d:b1:
1a:19:fe:1d:72:58:72:ac:3e:83:6d:3a:c5:02:9c:
04:03:ff:80:6a:ab:bf:03:0a:b9:00:99:43:da:40:
61:45:ac:fa:cc:7d:3c:a9:76:64:4d:fa:a1:46:de:
d4:54:74:55:82:50:f2:58:4c:d2:c2:9a:2a:32:0b:
2b:9c:f3:0c:fc:5e:64:56:a6:0c:c4:6d:08:31:f9:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:55:94:70:9E:88:53:F7:E9:97:C7:54:54:14:C3:D2:6E:E1:5E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxVVlHCeiFP36ZfHVFQUw9Ju4V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:88b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:8e:72:4b:00:9a:ae:bb:fd:44:c7:34:34:83:2c:6f:4e:74:
f9:d6:4b:95:fb:78:58:56:c0:2a:a7:b4:9e:48:65:2e:54:74:
d6:d3:ec:c1:a8:ac:b7:ba:00:c9:f7:33:d3:a5:6c:f2:88:52:
01:22:cc:18:04:7b:60:7e:41:cf:4f:91:92:65:0f:e1:fa:0a:
e2:62:c2:92:fc:e1:db:13:76:4a:03:28:c8:06:49:4a:b1:53:
f5:3d:f6:5d:b1:f6:be:15:40:10:a8:87:80:66:62:e5:fe:7d:
a3:d2:85:1a:0a:d3:b0:8b:ff:ac:21:ab:88:fb:d0:3a:a4:cf:
f0:c6:29:08:ae:2b:e7:f0:e6:02:54:e1:9b:35:d1:56:ae:4e:
08:97:3b:30:87:e0:99:b7:ee:73:5e:47:af:72:c6:75:1c:b4:
49:d4:b9:1c:a2:95:ed:69:3e:8d:64:1b:9a:61:c8:29:af:2b:
11:23:d7:59:1f:7a:39:df:6b:86:d4:38:8b:75:70:dc:0b:9d:
ec:e2:15:a4:cf:30:af:8c:6a:93:b8:9b:f4:d4:ed:3a:b2:26:
be:57:80:6a:27:98:da:c7:3c:27:9c:86:e8:86:b8:c0:31:f4:
01:3c:ae:50:eb:2e:c0:f6:5f:50:3a:80:ec:80:e1:fb:27:c1:
ad:97:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:25 2025 by rpki-client