Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jLtrPxUIBNBoeYt7SCREdPlo7mo.roa
File: jLtrPxUIBNBoeYt7SCREdPlo7mo.roa (raw, json)
Hash identifier: q6Jsr6AGpVzN77bYKwgp+v8/ZvFx8EgdQ1O0r5XBOjg=
Subject key identifier: 8C:BB:6B:3F:15:08:04:D0:68:79:8B:7B:48:24:44:74:F9:68:EE:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226DD313A2E59658C59CD961EEFD33
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jLtrPxUIBNBoeYt7SCREdPlo7mo.roa
Signing time: Thu 02 Jan 2025 03:50:00 +0000
ROA not before: Thu 02 Jan 2025 03:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213164
IP address blocks: 2a10:2f00:18a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6d:d3:13:a2:e5:96:58:c5:9c:d9:61:ee:fd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cbb6b3f150804d068798b7b48244474f968ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:6b:e6:03:45:2f:0a:8a:a6:c5:30:6f:a7:
bb:c9:1b:5c:c1:c3:c0:33:86:ef:ba:14:9f:38:40:
7b:23:df:0e:10:7a:83:c8:02:a6:b6:65:c4:52:ca:
cb:1f:b0:d7:fe:8b:43:e5:db:dd:0f:9f:51:f8:b2:
75:90:f6:9d:47:89:94:b0:61:0e:c9:ea:06:b9:14:
13:34:10:ec:49:56:0f:e2:cc:5d:d3:c5:a7:fe:c1:
ec:f5:c9:0a:8b:f6:93:8c:54:d6:67:df:1e:79:44:
7e:d3:e0:9c:b5:b3:42:fe:88:06:87:9e:eb:03:31:
d4:29:c2:c1:ae:3d:67:69:f2:d0:38:af:05:5e:26:
24:f6:70:26:70:3b:4a:97:ff:59:ff:ef:c3:ac:49:
1c:65:7c:8f:52:49:1f:9a:f4:de:ce:38:c8:c9:bf:
36:db:b6:bd:a0:4f:34:12:a6:13:ea:60:b7:d0:63:
fc:62:f9:6e:e1:b6:a6:d3:51:59:79:d4:ae:c5:2a:
90:4c:73:9c:f4:68:32:d9:ae:17:43:80:d3:35:03:
ae:e5:87:06:08:eb:42:df:4e:32:45:55:80:f9:bb:
8f:6f:1e:9d:d7:30:6c:af:29:d0:1f:b2:aa:ec:89:
99:db:58:75:0b:17:a4:d8:7e:bc:8e:fa:03:e6:c1:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:6B:3F:15:08:04:D0:68:79:8B:7B:48:24:44:74:F9:68:EE:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jLtrPxUIBNBoeYt7SCREdPlo7mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18a::/48
Signature Algorithm: sha256WithRSAEncryption
25:58:64:0a:b5:35:ba:4c:6e:7e:a6:b7:c8:c6:f3:6f:17:46:
c5:84:59:4e:87:90:07:c0:b9:ed:64:08:c9:f0:24:e3:60:3f:
99:10:e7:3a:c1:64:a7:58:04:eb:00:4e:ec:1a:b2:d8:6b:fc:
bc:c3:fd:79:3a:43:09:c6:f6:07:07:de:29:70:75:9b:ac:a3:
73:c2:2c:70:0e:26:1e:b8:0f:bc:57:29:76:be:de:2a:6a:8e:
52:e4:e2:be:43:74:29:4a:0b:cc:1c:c0:11:1f:cb:75:b2:92:
f2:e8:ae:70:60:5a:dd:0d:fd:2e:df:de:e4:84:da:6c:37:88:
87:17:1a:04:49:7b:fa:e1:a3:0c:a8:3f:ca:e4:26:a2:a8:bf:
42:84:74:f8:5a:67:4c:1c:e3:ec:73:b2:51:5b:e8:c2:7d:01:
89:66:3b:92:ca:f4:3f:7f:a2:9d:2c:f8:35:8f:bf:e2:f8:22:
40:c3:c0:d0:a3:6a:34:84:d3:07:a0:cf:a5:fe:3f:30:4e:17:
99:41:28:28:21:9c:1b:68:ae:91:b0:b4:7e:62:6b:ef:a4:73:
9a:83:20:ce:94:c5:ab:2a:3c:e6:45:69:bd:23:70:13:d3:7b:
fa:fb:c8:6e:4b:01:3f:3f:4c:0f:09:86:30:b3:e7:0c:82:26:
31:dc:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:04 2025 by rpki-client