Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n-2knK_njDhxO9Fk_tp4c5us6a0.roa
File: n-2knK_njDhxO9Fk_tp4c5us6a0.roa (raw, json)
Hash identifier: KhZXQYr8pGVG2hjZQxqd3SlVp7sc3/mnKh5CmIYNlU8=
Subject key identifier: 9F:ED:A4:9C:AF:E7:8C:38:71:3B:D1:64:FE:DA:78:73:9B:AC:E9:AD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522035865188C6E37DC786FA9313917
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n-2knK_njDhxO9Fk_tp4c5us6a0.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200959
IP address blocks: 2a0e:b107:1a40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:03:58:65:18:8c:6e:37:dc:78:6f:a9:31:39:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9feda49cafe78c38713bd164feda78739bace9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:09:7d:29:df:c4:16:2c:bd:96:7b:d8:ee:
f3:1d:bd:91:e3:d1:7f:34:79:08:9c:12:df:e2:50:
f4:60:79:5f:cb:18:71:44:19:df:84:9a:a8:67:cc:
f2:dd:64:7e:c4:23:4c:7f:46:24:4b:0c:a7:78:2e:
cb:4d:b2:e8:20:cf:f5:ca:84:e8:88:50:21:fd:93:
1c:21:4d:c5:0f:70:c6:d6:02:89:03:52:6d:da:34:
c0:09:9a:a0:27:7f:40:ca:a2:55:a5:c3:aa:76:db:
3c:59:ff:0c:a3:cf:b4:30:c0:0b:06:5c:8c:49:da:
e4:5e:69:71:64:00:4c:17:36:5e:61:41:95:df:2f:
d9:6d:37:58:4e:1b:15:68:40:d5:97:50:b9:2f:57:
d6:a3:66:a9:39:38:f3:2f:1e:01:7a:ce:c7:ea:55:
17:bd:cc:e3:05:1e:01:14:7d:68:f2:39:76:e6:19:
7a:94:5a:bb:30:dc:1d:d0:3b:4e:5d:40:b7:88:fd:
31:46:9f:29:b5:2f:ba:75:66:d4:d7:ae:c9:64:57:
c6:af:18:c0:dd:1c:d9:59:4b:07:68:57:ce:03:8b:
97:95:bb:b8:cc:5a:fa:9c:2b:79:8a:e8:6b:1b:b5:
12:b5:1e:11:dc:e2:e8:24:9a:35:e3:2c:45:0f:c2:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:A4:9C:AF:E7:8C:38:71:3B:D1:64:FE:DA:78:73:9B:AC:E9:AD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n-2knK_njDhxO9Fk_tp4c5us6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a40::/44
Signature Algorithm: sha256WithRSAEncryption
01:8f:0b:03:19:4d:b6:3b:3a:99:61:4d:a3:0a:f6:1e:5e:27:
97:bf:c8:74:88:a3:4c:bb:ef:00:b5:01:81:5e:c9:83:92:04:
34:1b:e1:13:fb:cf:be:c6:f8:9d:1e:a3:31:a9:50:59:68:ed:
68:b7:f0:5c:0e:11:7b:64:66:15:07:51:8f:83:57:3f:d6:3e:
f8:18:eb:fe:d5:d7:a2:92:5f:3d:33:8e:70:b2:2f:2e:2d:d2:
5f:6d:06:b2:04:4a:c3:a2:1c:34:7a:10:51:29:a1:39:19:8a:
6e:89:39:df:f6:7a:a3:bb:8c:60:49:c7:41:14:55:61:19:0b:
34:f2:f8:b4:e8:5e:4c:bf:47:ca:39:f4:52:23:7a:0c:a9:0a:
f5:c1:f7:2d:f6:88:a9:3b:36:06:85:4a:92:28:88:a2:16:a8:
50:9b:28:1f:c3:c4:f1:1c:a8:68:6f:fd:41:bb:f6:bc:33:87:
f8:84:7a:95:fa:4e:a9:2e:7c:a8:ed:86:a3:3d:7c:fb:3d:56:
70:bd:2d:56:44:ee:f0:39:49:20:77:83:94:f8:c4:59:23:38:
4d:da:9e:f8:ab:9b:86:8b:01:3b:99:75:1e:e5:62:5e:54:f5:
19:99:f5:57:b6:88:db:b4:e1:7d:79:bb:ba:db:d5:0e:30:d7:
86:97:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:42 2025 by rpki-client