Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i6VdFp6brXYZR6EPFyFsrVzGfJ0.roa
File: i6VdFp6brXYZR6EPFyFsrVzGfJ0.roa (raw, json)
Hash identifier: bnjpcbNUvr1hcIS8dgFMX1ftjfABodR67OuCjXHM24Q=
Subject key identifier: 8B:A5:5D:16:9E:9B:AD:76:19:47:A1:0F:17:21:6C:AD:5C:C6:7C:9D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01954D3F7B6EFF8C67079F40D7AC574B7524
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i6VdFp6brXYZR6EPFyFsrVzGfJ0.roa
Signing time: Fri 28 Feb 2025 15:49:20 +0000
ROA not before: Fri 28 Feb 2025 15:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 2a0e:97c0:3e2::/48 maxlen: 48
2a0e:97c0:3e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:3f:7b:6e:ff:8c:67:07:9f:40:d7:ac:57:4b:75:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 28 15:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba55d169e9bad761947a10f17216cad5cc67c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:ba:b4:e0:ce:3c:a6:56:80:5e:67:f9:40:
1f:77:64:eb:ac:4f:3b:1a:36:e7:15:0d:fe:d6:dc:
4d:46:53:85:28:22:f0:f5:5a:49:a1:13:3c:1f:ee:
35:38:4c:3d:fd:69:b8:45:8f:8c:c5:9d:27:f5:3d:
a7:d5:e2:68:c9:21:e1:13:96:84:45:95:8a:30:8d:
55:de:e1:c8:5a:9b:bd:ab:84:72:99:52:68:ff:5d:
4f:4d:80:04:24:24:4b:c7:40:e6:24:cb:e8:ec:b4:
d9:88:3b:ca:7c:e0:d0:5e:15:16:ff:f7:9b:15:88:
bf:6c:e1:4f:58:43:27:43:16:2b:03:31:69:9e:3e:
c4:00:36:b8:a2:50:78:9e:fa:66:47:52:cf:83:b3:
cb:70:85:de:b8:56:5f:4d:5a:12:dc:22:df:17:0d:
a0:bc:1c:83:fa:8d:81:88:10:31:74:53:98:8d:a2:
8d:c4:7d:9f:4e:15:b7:13:e6:30:2d:01:fb:75:ee:
f6:1e:13:0f:92:20:da:54:52:ca:42:24:6e:11:40:
fa:e9:73:6f:83:ce:18:fd:2a:d2:0c:f2:ee:b2:cf:
6c:af:84:66:25:2c:cf:10:e1:be:46:53:69:05:96:
0c:08:eb:cb:80:8c:e5:7e:35:20:e6:ef:80:ab:fa:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:5D:16:9E:9B:AD:76:19:47:A1:0F:17:21:6C:AD:5C:C6:7C:9D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i6VdFp6brXYZR6EPFyFsrVzGfJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e2::/48
2a0e:97c0:3e4::/48
Signature Algorithm: sha256WithRSAEncryption
79:2c:20:d1:68:4a:28:f7:93:f3:94:e1:7c:b3:46:c5:81:cd:
1b:1e:41:96:b8:84:2c:22:8a:a8:fd:3a:d7:9e:cf:a3:5a:ab:
0e:63:e6:30:9d:61:77:c0:0d:41:cf:d7:92:d9:de:dc:71:09:
c2:15:92:a5:8d:14:59:93:dc:40:58:73:bb:7e:7e:de:9d:73:
d9:eb:38:10:95:87:c9:a1:c7:9b:ee:b2:d1:20:9f:6a:5a:9f:
99:3b:e2:46:07:e2:b4:a2:f9:72:88:75:a6:8b:24:0e:3e:dd:
f6:30:8b:d1:91:22:86:09:fc:35:5a:2e:b6:1e:34:94:4a:bb:
43:6b:ed:4c:9e:53:b8:78:e5:65:f6:eb:99:0a:7a:01:66:79:
f7:35:0b:d4:c7:84:ff:4d:0b:ab:b0:05:6c:c6:09:cc:f4:4b:
a7:78:3d:ec:6f:34:d5:f9:83:bf:42:d4:81:68:4c:a2:17:6e:
a5:3b:e3:16:bb:8c:ca:f6:56:96:fd:98:b4:df:6d:c6:a5:f6:
9d:93:ab:b7:2c:8d:49:37:80:80:b4:8c:d6:7b:30:13:0b:cf:
15:42:c1:e3:0a:6b:8a:e5:43:38:4f:48:19:52:30:16:0b:53:
8e:6d:83:76:ea:09:61:15:db:25:29:5a:cf:8e:68:a8:0d:f7:
68:4f:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:31 2025 by rpki-client