Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mGplVvylXauOFQ5F9osl4IWm3to.roa
File: mGplVvylXauOFQ5F9osl4IWm3to.roa (raw, json)
Hash identifier: FqgOixDLsgkTkda+H8Kc2i4hJJ0LJLhVdiWTQ/NZyOQ=
Subject key identifier: 98:6A:65:56:FC:A5:5D:AB:8E:15:0E:45:F6:8B:25:E0:85:A6:DE:DA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227C09B07724703058700F2949F443
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mGplVvylXauOFQ5F9osl4IWm3to.roa
Signing time: Thu 02 Jan 2025 03:50:04 +0000
ROA not before: Thu 02 Jan 2025 03:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214513
IP address blocks: 2a10:ccc3:ca70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7c:09:b0:77:24:70:30:58:70:0f:29:49:f4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=986a6556fca55dab8e150e45f68b25e085a6deda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:62:a1:38:82:60:50:ae:81:d0:83:16:dc:
c9:7e:62:3a:97:e2:c0:bb:68:d8:11:61:90:00:36:
31:85:ae:9f:14:93:e3:25:92:61:f3:dc:7d:31:7e:
4d:16:b8:d0:83:b4:6a:27:20:66:ed:02:0e:87:b6:
bb:2c:a0:98:b3:58:81:c5:45:ac:8f:71:3a:77:ec:
24:7e:fc:f4:4f:c9:da:87:74:b1:31:ba:90:29:3b:
fb:fe:1f:21:81:b9:f5:6b:79:23:8b:0a:10:cc:a3:
db:6e:33:dd:46:8a:c3:9f:62:7f:e7:99:49:c6:bd:
b9:02:6d:b5:37:61:4e:e8:e4:88:db:b3:0d:25:5e:
e1:01:a7:3d:ad:64:57:21:80:ee:36:3b:44:1c:07:
44:c7:0b:85:bf:d5:ca:c1:c7:70:98:25:80:ab:ea:
88:66:a7:1a:f0:e2:ef:00:da:01:b5:ce:a4:3d:01:
fe:32:e7:c1:bf:13:f8:6f:89:c0:1f:da:49:01:2e:
9d:3e:77:6c:7d:a2:fb:17:a2:d3:b4:9f:de:0c:dc:
9f:d9:8e:ff:1c:11:cf:91:9d:46:41:6d:ab:9e:aa:
65:c1:de:8a:e9:17:c6:c1:4f:e2:55:2e:94:7f:d1:
33:19:27:6f:03:be:89:3b:a0:ad:c0:9b:ef:93:a2:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:65:56:FC:A5:5D:AB:8E:15:0E:45:F6:8B:25:E0:85:A6:DE:DA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mGplVvylXauOFQ5F9osl4IWm3to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:ca70::/44
Signature Algorithm: sha256WithRSAEncryption
1b:30:bb:53:99:ed:ee:a8:c9:5e:8f:72:a2:6f:f2:bd:55:d7:
32:e2:f3:68:f7:0a:04:69:88:ab:02:ea:42:02:e8:3c:f8:7a:
f5:ae:2f:5b:64:df:6a:6b:30:6d:c3:63:cf:b1:07:8a:08:5b:
37:7c:d5:4e:ae:94:7c:7b:da:39:a0:03:f5:f9:1d:d8:54:3f:
10:13:a5:b9:81:05:ca:8c:71:6c:1a:be:0d:78:f1:94:28:83:
7e:61:bc:ed:85:c3:a7:6f:e2:e3:0a:1c:e4:8f:09:1e:3c:e1:
d9:c2:d5:1b:fc:74:fb:3e:d0:48:be:69:69:68:f6:27:8c:f8:
ed:b3:ff:51:f6:60:e9:b6:f2:af:74:b4:4b:07:6a:83:6d:50:
67:5b:15:22:29:6e:37:66:02:f0:31:85:65:d0:81:34:7e:d7:
8a:f4:e4:39:89:70:21:74:7b:c0:e4:30:1d:2a:90:d6:17:7d:
7c:82:68:c2:9e:46:77:21:0e:f7:a6:dd:42:cc:28:5a:7e:47:
f9:a0:37:48:27:9a:e5:1d:84:e2:4d:6b:b5:75:06:08:65:93:
8c:79:91:d2:93:be:06:d9:9d:0c:76:32:ab:68:37:bc:43:37:
75:99:cd:ba:81:00:25:a7:6c:f5:46:69:75:bb:e9:af:da:e0:
ff:cb:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:13 2025 by rpki-client