Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l9NO8blkviH8zCG8e1f5jkhEs0Q.roa
File: l9NO8blkviH8zCG8e1f5jkhEs0Q.roa (raw, json)
Hash identifier: Pqy4XZzTeGZlj6kQU3ndl9iQV8nLWNfmZTxRRCUobMU=
Subject key identifier: 97:D3:4E:F1:B9:64:BE:21:FC:CC:21:BC:7B:57:F9:8E:48:44:B3:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225379282D3286026B73C66EFFA280
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l9NO8blkviH8zCG8e1f5jkhEs0Q.roa
Signing time: Thu 02 Jan 2025 03:49:54 +0000
ROA not before: Thu 02 Jan 2025 03:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211553
IP address blocks: 2a0e:97c0:2b0::/48 maxlen: 48
2a0e:97c0:2bf::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:53:79:28:2d:32:86:02:6b:73:c6:6e:ff:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97d34ef1b964be21fccc21bc7b57f98e4844b344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:29:15:06:50:a4:2d:03:0c:9c:4b:bd:60:
88:4c:26:d3:82:aa:ce:2b:03:45:66:89:56:8f:47:
e0:87:83:19:86:d8:05:69:4b:13:75:1f:55:fe:b0:
7d:11:f9:bc:cd:ec:46:7a:5e:f3:98:0d:dd:26:76:
82:2a:f8:4b:12:b4:fe:80:7c:96:35:83:db:80:50:
ab:c2:33:81:95:c7:96:82:3f:98:46:1c:a9:31:64:
5c:87:0d:94:cb:8a:b1:7d:82:9e:2d:52:d1:06:de:
3c:f2:a1:e2:51:4f:9c:0b:70:0d:93:d8:8d:30:93:
29:fe:ce:33:da:87:32:36:54:eb:69:09:88:8a:46:
75:c0:1b:83:e0:95:68:cf:43:fa:69:07:79:aa:3b:
d0:9d:3c:5e:52:dc:eb:a4:6c:dd:28:5c:6f:f7:20:
1f:c3:a6:1d:73:26:2b:fa:68:5d:dc:8d:c2:ad:c0:
ca:4b:ef:e5:60:02:96:82:cf:66:f7:75:a5:25:22:
1b:02:e2:ee:a9:a0:d6:80:ca:7f:17:ad:4f:3d:52:
20:8f:49:f0:49:ad:7a:2e:4c:45:e5:75:db:11:c6:
10:f8:7e:6f:41:d2:22:4c:58:78:a6:3a:34:2a:ee:
1f:bb:3b:4b:89:d2:96:f7:0a:79:be:8f:cf:89:70:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:4E:F1:B9:64:BE:21:FC:CC:21:BC:7B:57:F9:8E:48:44:B3:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l9NO8blkviH8zCG8e1f5jkhEs0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:2b0::/48
2a0e:97c0:2bf::/48
Signature Algorithm: sha256WithRSAEncryption
88:24:e1:c8:e5:f5:26:50:bf:d7:79:3a:71:3e:db:49:fa:c0:
78:e9:c8:7c:b7:78:e3:36:43:c9:43:07:a2:07:91:82:4a:11:
1a:14:f1:f3:ac:47:12:cc:b3:48:23:87:a3:70:d4:5b:ec:32:
4e:a0:9f:bb:0c:9a:b8:37:04:35:0f:3b:fb:a1:88:0c:b6:d5:
e5:47:26:7f:d8:6c:c9:d3:c7:a7:06:24:31:9e:49:ff:72:fa:
35:99:68:64:57:e2:1c:42:17:7c:a4:89:35:2d:cd:27:0c:f9:
3d:93:30:f8:b3:55:b3:f5:8e:92:4f:76:42:cb:65:f9:af:cc:
5d:c6:d2:29:96:3b:61:a6:75:4e:72:b5:95:31:f5:2c:17:1e:
6a:76:de:b7:ae:3e:2a:00:07:c8:9d:43:f1:ae:f2:e2:41:6e:
68:9f:f6:80:d3:08:f2:a7:15:17:fe:cc:4f:45:6f:72:57:68:
80:90:0a:45:d9:85:d7:95:24:5c:ce:f4:71:5e:8c:80:a5:ed:
c0:7b:89:29:ef:b7:91:c5:3d:a2:15:bd:67:27:4e:64:92:da:
1b:9c:e8:9e:c7:62:0a:35:7e:d2:ff:66:b8:04:c4:5e:c3:bc:
a1:17:bf:63:ef:19:83:3f:3e:e5:b1:f9:cb:08:71:30:ef:13:
70:79:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:40 2025 by rpki-client