Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/leZq_IWX3i4ZKMFTaNWO3XdtO1Y.roa
File: leZq_IWX3i4ZKMFTaNWO3XdtO1Y.roa (raw, json)
Hash identifier: x1AnrQ7w/RsquiKu+QidBKRddLqYM2DTMWXRzzxhL/E=
Subject key identifier: 95:E6:6A:FC:85:97:DE:2E:19:28:C1:53:68:D5:8E:DD:77:6D:3B:56
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252249A42C1D1F8E891BC144D4C583CF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/leZq_IWX3i4ZKMFTaNWO3XdtO1Y.roa
Signing time: Thu 02 Jan 2025 03:49:51 +0000
ROA not before: Thu 02 Jan 2025 03:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211024
IP address blocks: 2a0e:97c0:4d0::/48 maxlen: 48
2a0e:97c0:4d2::/48 maxlen: 48
2a0e:97c0:4df::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:49:a4:2c:1d:1f:8e:89:1b:c1:44:d4:c5:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e66afc8597de2e1928c15368d58edd776d3b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:eb:f3:db:dd:5a:fc:89:82:7e:1b:a9:00:
2e:e4:14:0b:bb:d3:f4:26:c9:cf:38:9a:6d:7d:c6:
51:93:78:07:d8:de:9f:6f:20:59:e4:b3:6d:fa:62:
63:0b:53:c0:50:4a:37:a9:24:ee:90:a5:2d:d1:88:
9f:eb:62:d5:4b:4e:05:17:8b:fc:9a:1e:b2:fb:84:
d7:16:f3:71:50:30:9f:8e:7c:31:7c:f4:f9:32:b8:
3d:db:66:c7:d9:87:07:ab:0d:76:dd:48:19:b2:f2:
52:85:3c:a9:65:99:7b:a4:8c:79:e6:0e:a2:e6:cb:
0b:3b:86:85:4c:2b:56:0a:44:5f:d5:91:e6:a1:58:
7d:91:55:0d:bb:d4:5b:7d:87:18:9a:f4:46:9b:1b:
72:ac:42:ee:00:43:d0:34:5b:78:d3:2f:16:fd:73:
bd:6b:ba:97:c1:58:ed:6c:6c:29:55:9d:83:e0:d2:
74:d3:d6:c6:e1:15:0f:0a:a2:7f:e3:5b:72:5e:75:
42:4c:d5:e3:a8:ec:29:75:b5:b3:9c:94:c5:39:bc:
80:ea:31:18:57:c9:3c:6b:54:4d:f9:1b:4c:fb:5f:
45:a1:0d:d9:77:42:4c:da:13:5a:84:ec:dd:63:fe:
7d:50:60:67:6a:71:8e:50:6a:98:ad:9d:d5:4b:bb:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:6A:FC:85:97:DE:2E:19:28:C1:53:68:D5:8E:DD:77:6D:3B:56
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/leZq_IWX3i4ZKMFTaNWO3XdtO1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4d0::/48
2a0e:97c0:4d2::/48
2a0e:97c0:4df::/48
Signature Algorithm: sha256WithRSAEncryption
bf:fe:d7:b1:cb:b8:80:d7:d3:d8:78:13:23:a3:e2:ab:6b:b6:
6c:96:fa:28:c3:09:1a:ae:5f:17:7f:83:32:3e:5a:6e:60:97:
69:92:a0:9e:7d:18:f3:ef:4a:fb:33:4f:80:27:81:d3:d0:cc:
7a:ec:22:95:d5:f6:fb:b9:14:8d:af:5d:37:65:a5:73:ad:a2:
64:4b:83:68:02:0a:30:bd:b4:e2:08:3e:f8:8c:bb:ec:07:57:
6f:21:c9:11:c9:12:06:d8:97:8a:94:6c:b4:c4:1d:bf:71:93:
68:8d:38:dc:c3:4b:3a:38:91:d9:78:4b:e4:90:c1:48:89:dd:
33:fd:cc:ed:7c:6b:c3:e2:80:5d:d6:91:44:2e:d5:48:e3:7a:
ee:c1:2d:43:7e:96:57:ae:dc:03:b6:d8:d7:84:93:f9:76:25:
83:a6:df:84:94:9c:ee:43:f9:0b:43:ae:38:81:33:29:12:b2:
2a:9c:1e:f3:39:73:9d:90:ed:e6:9d:6a:fd:f1:50:1e:51:6e:
73:43:21:c4:a7:15:17:ab:6b:54:d6:f9:73:ae:58:69:83:c5:
ad:7a:cd:19:9a:34:23:f1:d1:fb:1c:d8:dc:91:c6:f9:f7:e0:
01:e3:19:e6:65:fa:e9:68:b6:28:ac:85:3c:90:b4:14:fa:6c:
d6:94:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:48:01 2025 by rpki-client