Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n5LZa3V3qS9Hyxu12iNH6Cq0sb4.roa
File: n5LZa3V3qS9Hyxu12iNH6Cq0sb4.roa (raw, json)
Hash identifier: lSOZTDzmTg6rAxlbYvqniCqMMi3Ae6KczsXOvYFKy4w=
Subject key identifier: 9F:92:D9:6B:75:77:A9:2F:47:CB:1B:B5:DA:23:47:E8:2A:B4:B1:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225B6A89599110232E3A8C1B3794E9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n5LZa3V3qS9Hyxu12iNH6Cq0sb4.roa
Signing time: Thu 02 Jan 2025 03:49:56 +0000
ROA not before: Thu 02 Jan 2025 03:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212184
IP address blocks: 2a0e:b107:20b0::/48 maxlen: 48
2a0e:b107:20b1::/48 maxlen: 48
2a0e:b107:20b2::/48 maxlen: 48
2a0e:b107:20b3::/48 maxlen: 48
2a0e:b107:20b4::/48 maxlen: 48
2a0e:b107:20b5::/48 maxlen: 48
2a0e:b107:20b6::/48 maxlen: 48
2a0e:b107:20b7::/48 maxlen: 48
2a0e:b107:20b8::/48 maxlen: 48
2a0e:b107:20b9::/48 maxlen: 48
2a0e:b107:20ba::/48 maxlen: 48
2a0e:b107:20bb::/48 maxlen: 48
2a0e:b107:20bc::/48 maxlen: 48
2a0e:b107:20bd::/48 maxlen: 48
2a0e:b107:20be::/48 maxlen: 48
2a0e:b107:20bf::/48 maxlen: 48
2a10:2f00:192::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:5b:6a:89:59:91:10:23:2e:3a:8c:1b:37:94:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f92d96b7577a92f47cb1bb5da2347e82ab4b1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:97:56:6b:0f:c2:fe:a2:fd:25:36:cd:c6:
8a:bb:36:9d:ca:a6:05:2c:9e:3e:34:b7:74:49:b7:
90:31:23:20:db:14:70:a6:e9:e8:7f:82:56:60:97:
a5:74:6b:a1:c2:5e:43:f7:2d:3b:ab:4e:32:85:f2:
55:c5:1d:91:b9:24:4d:28:7a:c2:13:c8:54:fc:91:
ca:65:82:8b:6d:c9:b0:0e:a5:68:7d:e1:a5:98:b1:
20:fd:30:f5:2e:78:3b:1f:a0:58:bc:e0:16:3d:fc:
cb:bd:cd:9c:8e:45:2f:3c:d4:bd:db:cf:1e:1a:de:
e9:15:be:c4:02:ec:4c:8c:8b:e7:89:71:20:32:d1:
04:ad:27:e8:80:b7:16:85:9f:0f:d9:9f:27:97:99:
46:ca:c2:d6:7f:86:99:49:e2:af:88:bb:01:0a:7c:
a0:29:d6:5b:d2:e3:af:7e:3f:89:2e:5f:3d:45:8e:
bd:c4:de:fd:76:05:4e:34:a6:c0:a7:4a:ac:4e:14:
23:66:c5:f9:06:35:6d:93:c8:6d:19:91:2a:6a:b0:
26:d2:3e:6c:e9:50:c7:a2:b3:39:8b:6c:83:d9:23:
21:48:6e:6c:17:c1:73:57:31:f7:9a:9c:1d:07:3a:
18:52:4b:89:a9:a3:42:76:f2:1d:72:21:e2:6a:cb:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:D9:6B:75:77:A9:2F:47:CB:1B:B5:DA:23:47:E8:2A:B4:B1:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/n5LZa3V3qS9Hyxu12iNH6Cq0sb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:20b0::/44
2a10:2f00:192::/48
Signature Algorithm: sha256WithRSAEncryption
62:b7:46:8b:bb:25:2e:4f:85:78:a9:0e:25:a7:58:7d:1f:9c:
a5:b3:13:aa:0e:13:b1:5e:e1:98:91:8a:6b:99:83:4b:1e:54:
a1:5a:a8:5f:cd:31:2a:a6:40:8c:8b:99:32:3a:a3:af:99:0c:
0c:ec:cd:9d:48:15:20:cf:92:4f:38:e7:7e:9b:ea:24:08:1e:
fd:98:a6:d5:ac:b9:b7:11:1f:ce:a6:30:3c:cb:44:55:3d:30:
8b:1c:15:b7:c2:dd:57:f9:2c:4e:47:12:8a:88:ba:ed:ea:ff:
28:02:c3:bf:01:b0:9b:cb:bc:76:c1:1f:1e:74:bf:73:ba:1b:
eb:76:51:66:75:c0:f7:1b:be:62:5e:94:83:3e:5b:b1:bf:8a:
60:71:de:98:1a:cb:5a:7d:2f:ca:ab:af:77:19:98:65:10:ee:
ec:4a:6b:1f:a2:4e:15:83:84:d4:37:9d:a1:23:cc:0d:55:e5:
90:3d:4d:96:53:e3:37:a7:9c:5b:7a:db:12:e6:83:ed:f6:f9:
0b:02:c8:8c:aa:3f:1a:60:4e:95:0c:d7:bf:95:6d:f2:87:11:
f2:1a:a9:7a:f7:d0:eb:8c:6a:c4:31:a4:9e:5a:09:b2:98:ab:
e9:d0:c6:66:ed:0a:84:aa:3d:68:44:94:13:38:34:49:09:f5:
21:78:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:14 2025 by rpki-client