Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPIGC5iBHJ-7FdpAFUdEo6nSH5g.roa
File: iPIGC5iBHJ-7FdpAFUdEo6nSH5g.roa (raw, json)
Hash identifier: oWVOCIVEoKo4h+N+DjHLfZlsH7lUf8JxLochPjVfgWE=
Subject key identifier: 88:F2:06:0B:98:81:1C:9F:BB:15:DA:40:15:47:44:A3:A9:D2:1F:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252251023EE8974443AAB132E76EDB9A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPIGC5iBHJ-7FdpAFUdEo6nSH5g.roa
Signing time: Thu 02 Jan 2025 03:49:53 +0000
ROA not before: Thu 02 Jan 2025 03:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211479
IP address blocks: 2a0e:b107:1220::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:51:02:3e:e8:97:44:43:aa:b1:32:e7:6e:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88f2060b98811c9fbb15da40154744a3a9d21f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:8f:80:42:32:12:bc:88:3e:b2:5d:92:12:
18:87:73:bf:c5:13:1a:a4:33:ff:71:88:f4:bf:f4:
88:ce:54:b6:4e:05:9d:2e:4f:6d:da:30:ec:c3:62:
91:87:11:5e:ee:a9:87:84:ae:ca:ea:cb:cc:32:d8:
69:dc:0e:10:fb:33:53:0c:28:cc:a3:e2:17:a6:89:
77:d5:6e:4d:86:c8:39:ca:49:4c:45:ac:76:d5:75:
94:31:52:d3:a5:56:ed:83:45:f3:88:d5:4d:c2:4a:
f8:b6:3d:bd:47:ff:f3:14:19:67:2e:a6:6e:db:79:
dc:38:90:af:0e:1c:3e:cc:82:a9:ab:84:8a:1e:e7:
1f:7b:85:73:2d:de:f0:3c:db:cf:b7:af:2c:67:d4:
65:3f:c6:09:4f:92:bf:c9:1a:5d:bd:78:02:5f:79:
90:a6:9b:40:b2:9c:c1:78:fe:ef:f8:8a:0d:fa:d1:
f0:01:5b:56:7e:50:32:a2:ff:66:af:c6:fc:39:ce:
98:8e:c6:3a:c9:9c:21:e0:8f:11:2e:34:c0:5e:d5:
1f:4a:37:2f:72:89:29:50:40:21:e8:aa:42:0c:f0:
af:3f:a2:71:1c:36:97:99:6a:d0:20:a9:fc:e1:33:
42:a9:42:95:84:d2:04:0b:17:fa:fd:28:ad:ee:a9:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F2:06:0B:98:81:1C:9F:BB:15:DA:40:15:47:44:A3:A9:D2:1F:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPIGC5iBHJ-7FdpAFUdEo6nSH5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1220::/44
Signature Algorithm: sha256WithRSAEncryption
29:21:17:ba:1f:61:4e:6a:5b:4a:38:e2:f5:82:a2:b6:5a:23:
a3:e8:ef:6a:4e:60:c3:18:85:47:dc:fe:40:33:05:60:f2:67:
42:1f:5c:9b:3e:2e:ed:c2:3e:bc:2c:3c:c0:a5:8b:46:99:5d:
b8:32:17:4f:27:9a:62:7f:2f:36:71:cc:a5:75:23:73:1f:75:
12:f8:b0:27:90:a2:88:f7:7a:fd:7d:be:f2:4f:79:e1:06:d0:
28:8c:ab:95:84:3d:cb:9a:de:0a:fd:e6:ba:a2:39:77:47:de:
8c:24:31:e8:5e:6a:2b:d8:2c:68:09:05:4f:ba:5c:bb:76:e6:
d2:e8:46:85:c3:76:51:9c:c2:9c:4a:33:7b:0a:6c:33:27:5e:
7b:6b:a3:eb:2c:fb:b3:ad:17:9e:27:9e:af:1b:01:1b:83:a4:
00:35:d4:60:12:b2:cf:1c:e6:c1:80:c2:80:c2:23:8e:d7:d7:
da:7e:a3:84:a7:2c:d0:f5:66:c9:a9:68:b4:17:f2:c9:b1:0a:
c1:82:b4:33:f7:c7:de:92:86:b4:95:8a:f6:71:54:b7:44:68:
c2:23:db:40:38:b0:51:98:5f:6e:92:d6:8e:09:9e:e8:4e:e4:
e0:21:94:51:48:36:bf:39:fa:23:e0:2d:af:cc:bf:da:c3:8a:
a8:ca:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:47 2025 by rpki-client