Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kQ7GF5bwe7lHBY5UeZI6KxN0ouA.roa
File: kQ7GF5bwe7lHBY5UeZI6KxN0ouA.roa (raw, json)
Hash identifier: 0gsEVz/dIG4tAtQRbUexh1CRC1zsXfPktYY0ZDYFiJU=
Subject key identifier: 91:0E:C6:17:96:F0:7B:B9:47:05:8E:54:79:92:3A:2B:13:74:A2:E0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228F8130309BCEB3B05A1E167350E7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kQ7GF5bwe7lHBY5UeZI6KxN0ouA.roa
Signing time: Thu 02 Jan 2025 03:50:09 +0000
ROA not before: Thu 02 Jan 2025 03:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215795
IP address blocks: 2a10:2f00:19f::/48 maxlen: 48
2a10:ccc3:cc30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:8f:81:30:30:9b:ce:b3:b0:5a:1e:16:73:50:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=910ec61796f07bb947058e5479923a2b1374a2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:c8:fe:c4:17:5d:7b:1b:3f:29:80:68:4a:
91:62:28:22:60:23:63:8c:5a:3c:47:dd:e0:5a:a4:
bb:10:95:5b:36:21:df:93:c9:9d:06:84:cb:db:54:
38:44:a6:fc:fb:c2:89:93:5a:36:0c:26:2a:06:1f:
fc:9d:2b:b3:05:3e:f2:bd:13:93:a9:5b:ae:0c:a0:
56:5d:8f:8b:4f:b1:94:22:96:bc:3b:12:49:3d:f7:
17:08:96:23:9a:37:da:f7:2d:ae:17:de:e2:5c:88:
47:3e:fd:65:4e:a5:16:f1:fb:d3:2e:7c:d9:74:6b:
16:2b:3e:57:78:45:37:2c:08:1b:7d:4c:4b:3d:81:
75:b7:7d:34:7e:86:cf:2e:18:63:91:df:a6:6b:df:
16:63:32:67:8b:05:61:c0:d5:a0:2c:cf:8b:28:d5:
ec:65:07:49:1e:e7:64:8f:16:25:44:5a:92:8e:5f:
6e:93:01:7c:e1:d5:83:52:92:88:31:16:b7:a9:d8:
eb:dd:63:7d:db:d6:8e:65:78:17:e2:cd:d8:45:eb:
b8:bf:3c:53:58:7b:ef:0f:99:9d:52:6d:08:f5:88:
71:e5:a5:c0:5e:9d:24:10:cd:3b:dd:d8:88:04:55:
e7:6f:82:3d:66:49:3d:84:57:52:38:e0:03:b2:7a:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:C6:17:96:F0:7B:B9:47:05:8E:54:79:92:3A:2B:13:74:A2:E0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kQ7GF5bwe7lHBY5UeZI6KxN0ouA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:19f::/48
2a10:ccc3:cc30::/44
Signature Algorithm: sha256WithRSAEncryption
57:5e:9c:64:c4:4d:d5:e8:8c:7a:d6:cb:f8:ba:08:59:33:71:
d8:7d:71:6b:fa:da:1d:24:c3:9f:1e:f8:9f:cb:c1:e5:66:e5:
82:21:af:f2:26:86:0c:bd:5a:10:90:40:9a:bc:6b:11:6f:3b:
1e:c3:46:84:c7:e4:5c:ee:89:2a:0c:3a:16:68:b1:9e:ef:b6:
2d:56:3f:e6:9f:48:5d:95:14:09:a6:46:00:a5:48:5f:12:9d:
5b:cc:94:96:06:ef:26:9f:9e:b0:c9:78:bd:6e:8e:82:04:f7:
db:d2:56:66:e4:b2:78:6c:d2:ea:77:17:26:6f:fd:5e:59:d3:
65:49:7d:64:d9:13:7f:7a:b2:07:c1:97:9b:71:fa:d4:87:b9:
96:b2:4c:18:e3:0e:3c:3b:31:b7:61:82:78:15:9f:8b:13:75:
8b:76:fd:ec:cf:72:57:22:f5:d4:4a:67:88:a0:ab:15:be:52:
bc:c7:75:83:e4:c8:84:0c:28:16:c3:36:71:5c:83:fe:da:f9:
ea:2c:9b:c8:7f:c5:db:25:69:22:35:01:b9:ae:b3:33:d4:31:
37:01:2d:ec:de:67:19:06:21:50:39:42:3b:fd:3f:e8:f6:78:
57:05:87:66:33:a4:a9:eb:c2:bf:53:cf:84:79:9a:db:ac:8d:
4e:db:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:13 2025 by rpki-client