Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h4kU3n0SPDvW9CkHKgZNw5CMrDo.roa
File: h4kU3n0SPDvW9CkHKgZNw5CMrDo.roa (raw, json)
Hash identifier: LD+ozBwIxDq7OYIRS3KQ26uxnH/VH6gUpU6UWt3/kmw=
Subject key identifier: 87:89:14:DE:7D:12:3C:3B:D6:F4:29:07:2A:06:4D:C3:90:8C:AC:3A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522939DA54E127413991AE6AD575B63
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h4kU3n0SPDvW9CkHKgZNw5CMrDo.roa
Signing time: Thu 02 Jan 2025 03:50:10 +0000
ROA not before: Thu 02 Jan 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216049
IP address blocks: 2a0e:97c0:be0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:93:9d:a5:4e:12:74:13:99:1a:e6:ad:57:5b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878914de7d123c3bd6f429072a064dc3908cac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:e9:79:af:fe:76:ff:6c:ff:ee:4d:7b:67:
96:ea:d9:f8:6d:7f:11:8b:46:c2:91:7e:87:c8:97:
5c:e6:64:56:d4:69:db:e1:f0:84:d5:07:d3:1f:ed:
48:73:f5:06:96:6a:3c:74:4e:b6:07:01:18:c7:3e:
34:aa:e9:d0:4b:30:8a:14:ca:6d:2e:2d:e7:32:0b:
1f:33:67:65:37:f3:d1:50:40:6b:24:87:09:39:b6:
0f:e1:e9:24:08:7a:19:7f:cf:31:9f:0c:6c:29:ae:
2d:97:a8:85:33:21:0c:47:99:70:d2:4d:fb:2b:d1:
8b:0a:68:13:92:63:78:8f:69:8c:4d:7f:99:ed:27:
0e:2e:0c:31:8b:f3:e3:41:32:95:59:c0:ea:30:19:
17:94:28:a1:ae:6a:00:b3:78:05:55:30:ae:0d:43:
c9:51:7d:e2:c4:a0:80:76:88:7a:99:97:9b:f0:fb:
f2:f0:3e:e1:4c:fd:fe:75:ee:12:06:81:3e:ff:11:
ef:d7:10:13:66:b4:96:19:fd:23:4d:a3:f3:27:a7:
ae:02:b5:39:98:18:15:26:34:5d:d3:f3:6d:1d:f2:
3b:ad:71:99:09:7d:3e:39:9a:92:bc:aa:df:5c:21:
57:24:8d:cf:19:0d:5b:ed:05:8c:4f:75:bf:ca:5c:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:14:DE:7D:12:3C:3B:D6:F4:29:07:2A:06:4D:C3:90:8C:AC:3A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h4kU3n0SPDvW9CkHKgZNw5CMrDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:be0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:ad:b8:64:fb:9f:bc:a3:fd:63:9a:80:7a:d6:2f:c2:b3:7e:
3c:e6:36:11:2a:1e:27:39:63:78:b5:63:3b:e3:b5:10:bd:60:
db:53:37:98:a7:1b:81:73:b7:1b:a2:d0:b9:68:00:a1:1d:92:
39:72:9c:b2:b7:bf:67:d0:bf:e5:5e:4b:7e:ed:81:66:2a:69:
b8:1c:0a:5b:81:bb:95:43:6d:46:e0:86:7a:15:00:4f:e3:08:
52:9a:b3:27:5c:42:c6:98:6a:50:26:00:83:a3:f8:21:83:9f:
be:94:52:69:ef:b1:44:96:49:df:59:19:35:d0:80:77:e1:5b:
ea:c3:47:ff:71:31:d9:03:f2:73:d7:88:b3:88:01:10:4e:dc:
ba:82:53:2d:3e:7a:0f:6e:dd:d9:62:a0:67:91:16:bb:cb:78:
3b:75:13:d1:19:01:10:6f:2d:fb:d5:05:01:7e:2a:22:2c:71:
0e:4b:07:db:6b:62:aa:d1:4b:16:97:fd:ab:6a:15:29:84:39:
0f:43:cd:ef:0a:4a:17:60:88:0a:a7:9f:8d:4e:c4:60:79:ed:
9b:71:4e:eb:cb:ee:12:fa:7e:10:53:63:34:95:1c:fa:e6:f0:
ef:21:e9:f8:e2:5a:d0:41:4c:11:e2:f7:77:14:bd:7c:d7:7b:
fc:d4:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:54:54 2025 by rpki-client