Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hg648hOYAYImLZQfeYy_xgIjzTc.roa
File: hg648hOYAYImLZQfeYy_xgIjzTc.roa (raw, json)
Hash identifier: eVMiAjkElxmCl8AXTdUYFXBJAxSIWFhn2E0zHZNV2yI=
Subject key identifier: 86:0E:B8:F2:13:98:01:82:26:2D:94:1F:79:8C:BF:C6:02:23:CD:37
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227707AEF576AD65A18E4C9E0BF977
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hg648hOYAYImLZQfeYy_xgIjzTc.roa
Signing time: Thu 02 Jan 2025 03:50:03 +0000
ROA not before: Thu 02 Jan 2025 03:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214147
IP address blocks: 2a0e:97c0:1a0::/44 maxlen: 48
2a0e:97c0:1a2::/48 maxlen: 48
2a0e:97c0:1a3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:77:07:ae:f5:76:ad:65:a1:8e:4c:9e:0b:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=860eb8f213980182262d941f798cbfc60223cd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:fe:a8:c1:25:ca:38:6c:9e:e1:f1:63:5f:
85:a0:1f:9e:94:a1:ff:29:0d:20:5f:de:40:e0:86:
47:6b:f9:d9:63:49:33:a6:86:17:e1:14:e2:24:d3:
1f:62:32:33:93:3f:2c:07:08:28:3f:34:db:3d:d9:
10:6f:da:45:64:10:3f:3e:ad:90:f8:d4:ed:6d:1a:
8a:5f:a2:01:f9:27:42:56:2b:84:f0:10:36:f2:6f:
88:1d:5d:b1:7b:56:4d:a3:c3:53:8d:98:b7:7e:06:
49:c2:96:26:0f:61:2d:2c:ea:e3:fc:b7:8f:3a:c5:
1f:81:89:cc:6e:08:75:a4:86:93:e8:5e:2a:39:fb:
cf:7b:17:00:a2:1a:a6:3a:ae:a2:bc:e3:a8:4e:55:
6c:8a:22:ea:23:13:0e:11:ed:56:a0:61:6a:f6:ec:
5d:74:2e:2e:41:1d:89:19:db:4e:85:8d:3c:a3:7d:
f9:b8:9f:fd:a6:90:bf:86:be:d0:de:0d:45:87:23:
b2:63:82:04:37:b4:a5:94:ed:47:43:0b:c7:95:e3:
c0:58:d6:2c:1f:f4:b7:f1:54:5b:c6:f8:91:d4:fd:
53:15:44:cb:12:a0:54:26:df:a8:05:af:da:93:32:
b8:4a:9d:3a:6f:e3:d7:46:d2:4d:72:7f:1a:d2:8b:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:B8:F2:13:98:01:82:26:2D:94:1F:79:8C:BF:C6:02:23:CD:37
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hg648hOYAYImLZQfeYy_xgIjzTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1a0::/44
Signature Algorithm: sha256WithRSAEncryption
b5:a4:ac:66:08:7b:f5:da:eb:fd:0f:d3:44:95:4d:19:0f:96:
53:90:8e:f6:86:2a:24:40:27:36:05:71:8d:fe:49:21:b5:b3:
8d:b0:cc:8a:76:59:6a:4c:d0:e6:54:bb:10:49:d7:eb:bd:27:
10:67:aa:64:e5:68:50:56:a8:81:b2:d1:cd:f7:d0:f3:14:3f:
f4:b2:62:cc:e6:df:06:c5:9f:ea:88:31:c7:1a:e6:4d:ed:b0:
e6:76:29:69:2f:33:41:f3:06:98:c7:41:29:2c:ff:ef:b2:9f:
86:df:21:dc:fd:0c:b9:85:03:a7:1f:d3:0a:f1:b6:46:95:a4:
12:be:a4:21:de:6e:0a:86:a5:5b:90:49:1b:87:6f:5e:af:fd:
0a:f1:e7:4a:b3:e2:ec:cc:17:01:2e:51:df:70:4e:b6:c1:4c:
95:67:be:46:58:6f:1e:d8:b8:60:5d:ce:b8:38:ec:17:f8:75:
c7:5e:7a:d7:f1:e2:d5:da:be:2f:94:ed:48:b1:14:38:0d:3d:
0b:a4:b2:31:c6:7a:de:0d:ff:07:3c:50:ca:89:5e:f0:0d:7a:
89:fb:18:ac:38:49:73:16:58:c6:ee:ec:53:0c:6a:53:56:96:
b2:b4:6b:3c:61:07:b0:84:7c:9c:53:73:45:58:0d:b7:bc:71:
9a:f8:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:24 2025 by rpki-client