Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/navuCd43GFkJ1-LiqZBlwwZLVDM.roa
File: navuCd43GFkJ1-LiqZBlwwZLVDM.roa (raw, json)
Hash identifier: B9WpUaW9ZzEbvMTSmr2GYMvFFEnYe0kYLkQ1ZB4QvzE=
Subject key identifier: 9D:AB:EE:09:DE:37:18:59:09:D7:E2:E2:A9:90:65:C3:06:4B:54:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221F52AA41528F40A5CD240FEE18B0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/navuCd43GFkJ1-LiqZBlwwZLVDM.roa
Signing time: Thu 02 Jan 2025 03:49:40 +0000
ROA not before: Thu 02 Jan 2025 03:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205152
IP address blocks: 2a0e:b107:e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1f:52:aa:41:52:8f:40:a5:cd:24:0f:ee:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dabee09de37185909d7e2e2a99065c3064b5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:6c:27:42:66:5f:c5:7a:43:97:07:90:83:
06:4a:20:3b:d8:b7:c6:c0:71:41:37:14:e2:cc:ef:
f4:9d:8f:83:5b:f7:b7:31:08:6b:f1:6e:73:7d:6e:
98:3a:fe:17:f9:7e:23:0c:6d:70:e8:5e:27:d8:93:
b2:7b:aa:17:4c:18:1b:35:b5:b9:78:4b:bb:78:15:
06:c0:a0:1a:84:46:66:b0:b5:2e:a6:0d:25:c1:08:
04:7e:5f:1d:92:6b:80:d4:d7:cb:3d:52:60:24:1f:
b1:18:d2:fa:b9:f5:53:3b:df:7a:9d:3f:2a:b3:49:
dc:3b:6a:e7:d6:5d:ca:64:72:b4:05:c0:f9:ff:39:
6a:30:4f:3d:b3:3a:d2:fa:cc:2a:34:06:1b:cb:70:
1a:b2:97:5f:e1:63:60:2a:f7:5f:c8:5d:c7:b6:f6:
70:fa:6a:03:a0:c4:75:46:74:d2:8a:65:53:50:54:
1a:bd:a2:7f:88:21:c6:62:e4:cb:a1:ff:f1:d4:d7:
59:96:6f:bd:bf:ab:6a:25:7d:19:98:14:d6:63:7a:
b7:1f:a3:2b:62:54:83:0f:f2:36:b2:1f:be:b3:41:
60:58:97:93:b9:c1:54:ee:4f:f1:fc:7e:7a:5e:18:
81:64:05:90:a7:a3:b3:64:67:93:d3:1c:ea:c0:ee:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:EE:09:DE:37:18:59:09:D7:E2:E2:A9:90:65:C3:06:4B:54:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/navuCd43GFkJ1-LiqZBlwwZLVDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:e0::/44
Signature Algorithm: sha256WithRSAEncryption
8b:6f:dd:15:13:3a:dc:10:65:4f:7b:6d:fa:d6:a4:6b:12:de:
f0:5b:3f:07:9e:1d:12:b2:29:52:46:fb:2c:66:ab:5e:11:f8:
73:69:28:a7:f4:b9:dc:a8:22:76:95:d4:fe:c2:c0:7a:94:aa:
f8:50:bd:58:e6:68:59:0c:48:a0:47:13:7c:9d:1f:7e:99:e6:
b3:eb:a1:27:cd:7d:dc:7f:15:df:bc:7d:bc:a6:78:17:ed:c2:
7f:30:6a:b8:1a:51:be:16:fb:38:9f:10:72:62:40:b3:e6:c4:
72:ca:98:ea:cd:88:95:2b:94:04:26:6c:e5:32:66:e7:57:ef:
26:98:0f:4b:12:41:45:e0:41:17:66:8d:fe:78:76:5b:16:15:
63:ed:2d:fd:68:da:8a:1d:84:3f:57:f1:95:91:dd:a9:00:8b:
c7:08:71:37:ea:da:cf:5e:19:7d:56:09:ce:18:e8:1a:31:7d:
e8:79:4f:0f:8f:96:9c:48:ab:cd:a7:86:28:55:52:bc:6b:87:
f4:f1:73:bd:ed:19:dd:9b:54:7f:be:fe:cc:2e:c4:9d:6c:a7:
d8:be:9c:30:df:61:8f:e3:a2:a4:35:37:77:8d:2d:19:83:44:
c2:fb:e2:53:cc:77:d2:60:f3:9e:67:94:56:21:6c:4e:5a:b0:
47:89:68:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIh9SqkFSj0ClzSQP7hiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGFiZWUwOWRlMzcxODU5MDlkN2UyZTJhOTkwNjVjMzA2NGI1NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnplsJ0JmX8V6Q5cHkIMGSiA72LfG
wHFBNxTizO/0nY+DW/e3MQhr8W5zfW6YOv4X+X4jDG1w6F4n2JOye6oXTBgbNbW5
eEu7eBUGwKAahEZmsLUupg0lwQgEfl8dkmuA1NfLPVJgJB+xGNL6ufVTO996nT8q
s0ncO2rn1l3KZHK0BcD5/zlqME89szrS+swqNAYby3Aaspdf4WNgKvdfyF3HtvZw
+moDoMR1RnTSimVTUFQavaJ/iCHGYuTLof/x1NdZlm+9v6tqJX0ZmBTWY3q3H6Mr
YlSDD/I2sh++s0FgWJeTucFU7k/x/H56XhiBZAWQp6OzZGeT0xzqwO7oZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ2r7gneNxhZCdfi4qmQZcMGS1QzMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbmF2dUNkNDNHRmtKMS1MaXFaQmx3d1pMVkRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwDg
MA0GCSqGSIb3DQEBCwUAA4IBAQCLb90VEzrcEGVPe2361qRrEt7wWz8Hnh0SsilS
RvssZqteEfhzaSin9LncqCJ2ldT+wsB6lKr4UL1Y5mhZDEigRxN8nR9+meaz66En
zX3cfxXfvH28pngX7cJ/MGq4GlG+Fvs4nxByYkCz5sRyypjqzYiVK5QEJmzlMmbn
V+8mmA9LEkFF4EEXZo3+eHZbFhVj7S39aNqKHYQ/V/GVkd2pAIvHCHE36trPXhl9
VgnOGOgaMX3oeU8Pj5acSKvNp4YoVVK8a4f08XO97Rndm1R/vv7MLsSdbKfYvpww
32GP46KkNTd3jS0Zg0TC++JTzHfSYPOeZ5RWIWxOWrBHiWi0
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:26 2025 by rpki-client