Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/o8SmEmd9IXJL65HEknYR8mBBPx8.roa
File: o8SmEmd9IXJL65HEknYR8mBBPx8.roa (raw, json)
Hash identifier: gK4DlElWeeCY0rfNgD0S9/ykq/8rnL/DTqxzJIgkXYE=
Subject key identifier: A3:C4:A6:12:67:7D:21:72:4B:EB:91:C4:92:76:11:F2:60:41:3F:1F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252221CAC17619A40CA682AF9B0BC796
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/o8SmEmd9IXJL65HEknYR8mBBPx8.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205635
IP address blocks: 2a10:2f00:124::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:21:ca:c1:76:19:a4:0c:a6:82:af:9b:0b:c7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3c4a612677d21724beb91c4927611f260413f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:d8:9a:6f:4a:60:dd:2a:b3:c0:8f:74:9e:
dc:4b:ca:a6:2e:e4:e7:13:1b:65:53:ef:94:14:c5:
98:07:83:3d:2c:27:ca:91:8a:49:69:e8:8d:b0:8f:
34:b5:6f:0f:fc:9e:80:b7:05:94:de:db:f5:0c:38:
b1:c9:d4:fa:52:d5:fd:6f:af:4d:1b:e3:f1:70:44:
90:c4:13:52:03:2e:ba:68:65:f6:71:91:ed:62:4d:
e5:5a:7a:d2:0d:59:74:43:85:6d:7f:d0:a6:8b:fa:
df:dc:3f:49:e4:9c:90:b7:36:4b:3d:11:e7:8d:9d:
23:b6:0a:b8:b8:f1:70:a9:db:5c:1b:03:90:86:5b:
7a:ce:10:43:01:86:23:71:b8:59:39:fd:6d:45:94:
71:86:14:f8:fb:0a:07:d6:de:dc:59:d5:e2:1f:61:
80:61:f2:92:ea:d4:c2:f7:92:f1:d1:df:7a:92:d9:
b4:9b:8c:d3:35:4f:67:ec:7a:89:ee:b1:ad:49:f7:
35:76:58:f7:9a:96:79:19:47:e8:ae:ab:43:a7:ae:
cd:35:27:8e:c5:ce:73:1d:be:7f:ce:32:d3:41:62:
34:6b:7b:b1:b0:14:ef:8e:f2:00:9f:cd:c5:7e:48:
4d:20:6d:ed:48:49:2d:d4:d4:c8:47:cc:c6:1e:00:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:A6:12:67:7D:21:72:4B:EB:91:C4:92:76:11:F2:60:41:3F:1F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/o8SmEmd9IXJL65HEknYR8mBBPx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:124::/48
Signature Algorithm: sha256WithRSAEncryption
74:6e:87:da:d3:de:e3:0f:6f:cb:f9:7a:9e:84:b3:1e:d7:51:
15:66:04:b8:d1:9f:d6:5f:b9:a1:ef:ab:eb:6b:cb:68:80:96:
cf:41:44:ce:66:56:cf:31:c0:3e:4e:4d:8b:91:61:24:29:6e:
89:6b:69:43:aa:7f:5f:b5:4f:25:b4:0d:3c:33:a6:be:60:dc:
8e:06:e3:3a:a9:a9:9a:2f:3f:c5:4d:07:d8:82:3f:e5:d1:8a:
20:21:1f:e1:bb:f2:39:03:60:86:e2:3d:21:fa:22:1c:2e:ba:
63:df:2d:00:0b:75:5a:8f:f1:74:29:eb:59:9b:8d:ef:39:66:
91:8a:b7:56:ef:14:85:0c:33:0a:06:ef:65:ba:2c:ac:88:ff:
e9:67:ca:ec:4a:09:d1:66:e8:8a:4c:28:63:99:43:95:2c:8f:
2e:4d:78:b3:f5:6b:1d:b8:2e:ba:fe:a5:ba:ad:cf:7e:3b:5e:
75:0d:09:c8:a6:32:68:2c:45:5d:06:2a:48:5b:37:d9:f8:33:
f2:ef:22:27:3f:66:de:dc:54:04:6d:35:b4:9d:0a:99:e2:9e:
b3:8f:c4:42:5e:ba:a1:2e:dd:87:52:61:a6:2a:38:14:45:70:
3e:46:e0:0a:da:86:96:df:aa:05:48:fc:75:90:9e:b9:15:5a:
bc:f7:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:21 2025 by rpki-client