Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lBCtxasl59S5qjwkgl5R9phxynE.roa
File: lBCtxasl59S5qjwkgl5R9phxynE.roa (raw, json)
Hash identifier: UXZMGwOVi0KiS0x2mCb2v0y+yEB/fUSHcMLNyfVUSnA=
Subject key identifier: 94:10:AD:C5:AB:25:E7:D4:B9:AA:3C:24:82:5E:51:F6:98:71:CA:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194EA793AAB14A3E0C326879D87349C21E0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lBCtxasl59S5qjwkgl5R9phxynE.roa
Signing time: Sun 09 Feb 2025 11:30:00 +0000
ROA not before: Sun 09 Feb 2025 11:30:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60240
IP address blocks: 2a0e:97c0:610::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ea:79:3a:ab:14:a3:e0:c3:26:87:9d:87:34:9c:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 9 11:30:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9410adc5ab25e7d4b9aa3c24825e51f69871ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:73:17:00:a9:db:74:36:04:c8:37:ac:a6:
8b:54:03:ee:8f:17:34:b0:92:a2:38:3d:58:3c:fa:
57:cf:2d:8e:df:d6:8c:9f:51:f7:4a:bf:9e:25:60:
59:5d:40:61:fe:c9:aa:2d:8e:17:3a:ee:34:da:e7:
ea:fe:7d:4e:bb:65:ac:b9:b1:c8:7b:c1:e5:84:34:
0d:c8:55:e4:bc:b7:72:4b:9b:3e:87:3c:04:95:49:
bd:9e:31:0f:00:2c:9c:37:ac:1b:ff:4a:40:47:fd:
9a:66:38:3d:7c:cb:15:7b:65:e6:e1:3d:9f:a6:3d:
db:ad:08:c5:5c:f3:93:06:f3:91:1c:77:04:60:31:
5b:1d:ac:60:d2:c9:84:ec:39:77:0c:5d:6f:d2:c9:
15:44:9e:8e:7d:03:25:b3:9e:7f:29:fd:35:af:b0:
1b:87:ca:2a:74:49:de:25:09:ac:71:fd:c8:e9:8d:
96:da:3a:69:8c:ff:79:81:26:60:e1:af:47:93:37:
f1:ed:85:d5:9a:e5:7a:05:5f:6f:3e:69:bc:5b:bc:
c4:43:82:eb:58:2f:68:d6:7a:41:f1:ce:31:7c:74:
4e:51:eb:5f:d2:dd:9c:d3:1d:00:36:e6:64:fe:4e:
03:73:be:9b:3a:4a:87:84:8e:79:dd:4d:12:67:8c:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:AD:C5:AB:25:E7:D4:B9:AA:3C:24:82:5E:51:F6:98:71:CA:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lBCtxasl59S5qjwkgl5R9phxynE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:610::/44
Signature Algorithm: sha256WithRSAEncryption
8e:6a:15:45:24:b5:f6:91:7d:4c:a6:49:89:6d:41:c8:7c:0f:
91:0b:a7:f8:4c:b2:ef:32:22:30:36:49:84:12:fe:ca:a2:c0:
db:a1:6d:a7:cd:b9:16:2a:26:05:9c:54:51:76:3c:9a:02:3f:
2c:5e:27:95:91:3e:fb:ed:db:93:b4:e8:15:c1:e0:85:a9:0d:
80:b5:71:78:24:e1:2e:66:92:13:49:52:af:24:e3:ef:0b:01:
13:31:5c:d7:10:97:39:a2:8f:94:73:df:7a:c5:3a:36:ef:cd:
dc:a2:52:1c:c6:fe:23:b5:15:cc:d4:e2:0e:db:f4:5e:0b:e6:
f4:a6:fe:e0:c4:b8:50:b9:2e:f3:c1:de:b8:cb:dd:ba:00:40:
7c:d7:39:6c:9e:46:cb:f0:fe:24:f1:3f:48:72:99:78:65:b2:
72:90:dd:07:27:1c:05:7a:e3:37:48:a0:94:71:e2:56:54:3f:
9f:03:f1:ad:c1:16:fb:40:3f:50:5e:a2:34:c6:17:db:8f:3c:
30:27:6c:b7:ae:91:66:87:07:c7:a0:4d:9c:e2:4d:18:e3:82:
57:ff:64:13:b4:71:0e:57:4f:2a:d9:1c:0c:33:90:82:73:c6:
8b:27:e8:f8:63:b3:0f:ff:6a:3d:38:21:66:d6:2d:24:63:3c:
33:52:27:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:45:32 2025 by rpki-client