Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lBT5975t1A8b9draEObMzyNkHu4.roa
File: lBT5975t1A8b9draEObMzyNkHu4.roa (raw, json)
Hash identifier: 1tihMdDonTokCejknOHhWSHU8oPDH2wjElEwLtdLABM=
Subject key identifier: 94:14:F9:F7:BE:6D:D4:0F:1B:F5:DA:DA:10:E6:CC:CF:23:64:1E:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252261174A26BB2A2CA0B5F8E705EE50
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lBT5975t1A8b9draEObMzyNkHu4.roa
Signing time: Thu 02 Jan 2025 03:49:57 +0000
ROA not before: Thu 02 Jan 2025 03:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212360
IP address blocks: 2a0e:b107:1350::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:61:17:4a:26:bb:2a:2c:a0:b5:f8:e7:05:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9414f9f7be6dd40f1bf5dada10e6cccf23641eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:20:87:63:37:b6:24:f3:66:83:57:cd:03:
5b:03:4e:ae:de:3b:91:f4:ff:f6:ad:7c:b3:96:4d:
72:8f:55:95:0b:04:1e:cb:fa:e7:be:bf:79:70:70:
80:95:07:ec:8e:9e:34:9a:02:5c:8e:45:c7:8c:1e:
99:ea:7d:c8:55:08:96:76:82:c4:56:d5:d2:fe:6e:
49:52:f9:8d:15:90:05:1d:4b:e9:d9:7f:1d:16:11:
f7:fb:b6:33:34:ea:3d:02:fd:71:46:43:59:3f:7f:
9e:fb:ae:a9:77:a0:9e:2a:5b:cb:d7:d6:a4:c5:89:
1a:c0:8a:ad:cb:cd:71:2b:be:31:31:ad:a0:64:63:
bb:d2:4d:52:5c:57:a6:a9:1f:ca:f6:45:70:b5:b0:
f0:ce:f5:19:50:28:9b:05:24:77:df:8f:a6:a8:77:
aa:4a:57:79:66:98:7a:b4:91:cc:bb:be:be:35:b9:
78:5d:83:4c:3a:a8:f8:90:27:39:27:94:40:ce:fb:
e0:41:01:59:ad:02:c5:46:ae:21:8c:68:10:4e:c7:
0d:93:f1:3f:d0:78:f5:48:a9:c2:bd:9b:92:a3:4c:
ea:1b:61:87:4d:9b:82:4d:84:38:40:ff:62:33:75:
2e:49:53:2b:96:4c:8c:05:3d:d8:b4:ba:ee:6a:46:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:F9:F7:BE:6D:D4:0F:1B:F5:DA:DA:10:E6:CC:CF:23:64:1E:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lBT5975t1A8b9draEObMzyNkHu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1350::/44
Signature Algorithm: sha256WithRSAEncryption
b8:8f:4b:41:25:b3:72:2c:e3:3c:d1:e4:20:65:be:ac:c7:a0:
36:2b:aa:7a:f1:5a:37:f5:da:49:9d:ef:77:90:b2:86:cb:bd:
af:1d:cc:0c:ad:1e:e4:48:31:1c:1c:82:23:02:8e:85:2a:36:
59:4e:d8:f3:b1:73:6e:1a:12:01:e7:4f:d6:a4:73:fe:74:af:
23:00:a1:60:da:5f:97:fa:ab:ea:14:9c:ac:3d:bc:73:cf:4a:
97:87:85:3f:1d:17:c8:e7:71:2f:7a:7a:a9:f3:6c:2d:80:27:
bf:3a:86:74:19:8f:a8:6e:17:b3:24:94:0e:9a:b5:56:1f:0e:
8c:cf:27:13:eb:33:97:f9:0d:b9:83:a3:f9:0d:15:6b:1c:e3:
82:0a:f8:82:ed:73:da:8b:bd:bd:0a:64:39:66:ff:85:20:1b:
76:69:4f:4b:6b:72:db:31:6f:82:3f:80:74:c8:75:8e:c0:b2:
32:78:8d:68:01:d8:60:fe:16:c6:5b:3e:00:21:4d:bb:ff:73:
c2:9a:e7:aa:2d:6d:6a:5e:29:90:06:35:09:87:c7:e9:f8:70:
82:5e:2a:7a:20:72:d0:4c:48:9b:5f:6e:eb:1d:be:f9:fe:ed:
02:33:be:31:ee:e2:d7:89:a5:58:00:02:e3:a3:75:cd:9f:48:
c1:23:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:24 2025 by rpki-client