Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kgEodCXl26kw-e-6IcX_0uSrbLo.roa
File: kgEodCXl26kw-e-6IcX_0uSrbLo.roa (raw, json)
Hash identifier: mBQSn8nje4O35P1aNFV6Nd8QkFa0NbXIQ/9zdaMtu2Q=
Subject key identifier: 92:01:28:74:25:E5:DB:A9:30:F9:EF:BA:21:C5:FF:D2:E4:AB:6C:BA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425224E9F971D909CB9C27F2364CD7C40
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kgEodCXl26kw-e-6IcX_0uSrbLo.roa
Signing time: Thu 02 Jan 2025 03:49:52 +0000
ROA not before: Thu 02 Jan 2025 03:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211267
IP address blocks: 2a0e:b107:1370::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:4e:9f:97:1d:90:9c:b9:c2:7f:23:64:cd:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9201287425e5dba930f9efba21c5ffd2e4ab6cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:f2:84:72:09:6d:6d:78:6a:4c:c1:76:06:
b7:f4:4a:61:e8:a8:21:2b:f2:d1:80:d7:f0:40:16:
3d:16:4c:96:a4:b1:d8:0c:e4:1b:40:4c:1a:25:31:
a7:c4:e9:0e:9d:39:59:0d:d2:5b:be:84:25:cd:64:
ac:d3:12:a8:d3:c5:c2:2d:7d:69:98:b1:72:7d:4d:
fe:97:4c:1c:28:44:f2:3d:97:b9:62:1b:ce:74:2a:
ad:84:fe:e5:ad:d3:6d:4e:e7:7a:cc:da:e4:f2:67:
6c:47:f7:42:b8:1f:2e:05:91:8b:40:59:56:e6:f2:
af:12:d3:92:a7:f9:5d:5d:97:78:48:fb:be:1c:f8:
d1:17:ab:d2:95:71:35:6a:6b:07:0e:62:9b:ae:00:
fa:f6:21:00:5b:1f:d3:dd:67:20:a6:c2:56:88:51:
b4:84:3f:6b:14:c2:68:29:2e:b1:ac:db:22:d7:8a:
01:9e:0e:3c:2f:55:61:ff:9c:dd:63:7b:f5:f3:ad:
97:f9:1a:08:44:c4:f8:d2:b4:85:3e:1c:4a:31:89:
4d:45:20:e2:51:4b:5d:1f:07:01:80:ca:9c:fa:cb:
f8:79:37:e0:7a:5b:5c:1b:f0:88:df:08:b3:12:ab:
ad:5c:7c:bc:87:9f:65:d1:e3:f6:12:47:f6:84:44:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:01:28:74:25:E5:DB:A9:30:F9:EF:BA:21:C5:FF:D2:E4:AB:6C:BA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kgEodCXl26kw-e-6IcX_0uSrbLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1370::/44
Signature Algorithm: sha256WithRSAEncryption
8c:13:29:f9:41:15:bb:f9:45:fd:3e:21:f7:6b:e7:37:e6:8c:
1e:a5:f4:7b:30:24:a6:22:9c:a3:6d:3b:ec:35:46:b0:24:9c:
75:01:f0:4f:29:08:47:71:b1:e1:b3:3c:19:d9:7e:f2:c1:d7:
32:87:ca:1d:c3:6a:71:44:ca:d8:7c:62:f1:17:7e:cf:2c:3f:
e2:12:44:ed:cf:4e:72:44:ad:a1:8a:6a:06:fe:4a:73:38:0d:
ca:4c:c7:19:bf:63:a6:06:dd:e1:ff:0d:c9:8b:fd:01:73:d7:
5f:38:ed:cd:f3:96:07:46:e1:91:96:a6:8b:64:8f:ee:44:9e:
93:9d:0f:01:81:19:cd:b3:ae:6d:92:04:f7:46:ad:1d:ad:af:
8f:3c:78:ee:f5:a2:ff:6d:12:fa:71:91:66:c2:35:d1:28:ab:
08:cf:b4:37:a1:2e:06:62:a7:4a:d4:39:7c:c5:da:28:9e:54:
fb:5b:9f:f0:05:fc:32:ad:23:5a:65:db:65:f3:3c:24:f1:3b:
de:04:19:01:f6:9b:e3:81:0d:05:36:da:df:ad:65:7e:e0:3e:
ba:2a:14:45:81:75:20:e7:6a:7f:03:0c:de:96:2a:c4:7c:e6:
68:21:50:14:89:8b:a3:27:9e:a2:04:70:64:11:e5:e2:e9:84:
7a:73:c1:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIk6flx2QnLnCfyNkzXxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjAxMjg3NDI1ZTVkYmE5MzBmOWVmYmEyMWM1ZmZkMmU0YWI2Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7jyhHIJbW14akzBdga39Eph6Kgh
K/LRgNfwQBY9FkyWpLHYDOQbQEwaJTGnxOkOnTlZDdJbvoQlzWSs0xKo08XCLX1p
mLFyfU3+l0wcKETyPZe5YhvOdCqthP7lrdNtTud6zNrk8mdsR/dCuB8uBZGLQFlW
5vKvEtOSp/ldXZd4SPu+HPjRF6vSlXE1amsHDmKbrgD69iEAWx/T3WcgpsJWiFG0
hD9rFMJoKS6xrNsi14oBng48L1Vh/5zdY3v1862X+RoIRMT40rSFPhxKMYlNRSDi
UUtdHwcBgMqc+sv4eTfgeltcG/CI3wizEqutXHy8h59l0eP2Ekf2hESaIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJIBKHQl5dupMPnvuiHF/9Lkq2y6MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEva2dFb2RDWGwyNmt3LWUtNkljWF8wdVNyYkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNw
MA0GCSqGSIb3DQEBCwUAA4IBAQCMEyn5QRW7+UX9PiH3a+c35owepfR7MCSmIpyj
bTvsNUawJJx1AfBPKQhHcbHhszwZ2X7ywdcyh8odw2pxRMrYfGLxF37PLD/iEkTt
z05yRK2himoG/kpzOA3KTMcZv2OmBt3h/w3Ji/0Bc9dfOO3N85YHRuGRlqaLZI/u
RJ6TnQ8BgRnNs65tkgT3Rq0dra+PPHju9aL/bRL6cZFmwjXRKKsIz7Q3oS4GYqdK
1Dl8xdoonlT7W5/wBfwyrSNaZdtl8zwk8TveBBkB9pvjgQ0FNtrfrWV+4D66KhRF
gXUg52p/AwzelirEfOZoIVAUiYujJ56iBHBkEeXi6YR6c8Fx
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:52 2025 by rpki-client