Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pCxumEJ9ugb3xx3zn8WgjZluIKs.roa
File: pCxumEJ9ugb3xx3zn8WgjZluIKs.roa (raw, json)
Hash identifier: TAzlj05x+MypaQHZWrp1WjYmUqap3Qn4cc3ua4gKDUc=
Subject key identifier: A4:2C:6E:98:42:7D:BA:06:F7:C7:1D:F3:9F:C5:A0:8D:99:6E:20:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019528D9E3D64575322244230C449194ABF2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pCxumEJ9ugb3xx3zn8WgjZluIKs.roa
Signing time: Fri 21 Feb 2025 14:12:03 +0000
ROA not before: Fri 21 Feb 2025 14:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213443
IP address blocks: 2a06:de03:3691::/48 maxlen: 48
2a0e:97c0:840::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:d9:e3:d6:45:75:32:22:44:23:0c:44:91:94:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 21 14:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a42c6e98427dba06f7c71df39fc5a08d996e20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:cc:43:09:20:eb:d2:49:e1:f6:e6:c7:85:
71:fc:a1:fe:35:be:63:3f:66:e2:40:dd:40:11:41:
31:28:e2:6a:f5:7b:37:26:ea:e6:b8:e0:b2:f5:1f:
76:81:33:01:c6:32:de:04:be:14:5a:38:79:ba:03:
2a:5d:ae:41:c4:d0:c0:7b:07:90:2b:d2:91:21:c9:
52:03:a6:97:1c:23:4d:90:9e:11:db:eb:c7:7e:52:
c8:bc:89:48:3b:b2:b6:9a:76:63:da:37:e9:95:c9:
4a:54:8e:56:fa:2e:46:19:33:9b:ed:2e:6c:b7:dc:
bb:7e:32:3c:fc:8c:a6:b3:4a:7b:50:0e:50:ac:43:
ac:6a:4a:d7:67:e8:c8:4a:6c:83:52:9d:be:6e:3e:
5b:77:e8:73:ad:db:c9:fb:cd:8e:4b:30:a1:84:0e:
25:2f:ec:fc:3a:7d:f4:07:3b:30:97:50:31:18:09:
41:cd:7d:e3:1d:c3:e8:3e:74:57:c7:1e:34:73:3d:
35:ff:01:3a:a6:9b:28:c9:71:08:a0:7c:66:51:7b:
6f:6b:b6:10:54:a8:1f:f1:49:c8:8a:83:f7:c2:96:
9c:fd:a2:10:fc:60:30:c6:6d:2f:74:8a:25:ed:e3:
ba:38:ce:a5:eb:87:93:8f:e7:6d:fd:24:34:6a:f1:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2C:6E:98:42:7D:BA:06:F7:C7:1D:F3:9F:C5:A0:8D:99:6E:20:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pCxumEJ9ugb3xx3zn8WgjZluIKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de03:3691::/48
2a0e:97c0:840::/44
Signature Algorithm: sha256WithRSAEncryption
94:6b:61:24:7e:21:5b:d9:41:6d:19:1c:c4:08:5a:97:6a:39:
62:57:3b:fd:b2:4f:e7:13:c0:df:39:9d:e7:39:f2:18:87:30:
eb:0b:bd:33:7d:1f:c6:e8:88:14:c1:15:fa:61:00:f2:be:ff:
76:72:a0:0d:01:e2:ac:97:fd:71:f1:de:84:d9:23:d5:1a:42:
c0:67:67:00:90:db:91:05:e2:1b:a1:0c:16:e9:01:3a:23:a1:
01:fc:de:82:5b:55:e6:1d:9f:82:2b:df:39:fa:0c:5a:77:02:
a6:64:ba:1a:99:42:cd:d5:47:84:88:db:16:91:1a:22:09:34:
4d:b6:ec:48:9a:42:8a:95:1a:6d:49:dc:d5:60:0e:31:dc:38:
c8:de:4d:5d:f1:6a:d9:0e:47:d2:ca:16:e8:55:89:39:df:27:
4e:b1:c3:7a:bb:8a:1a:2f:00:6f:d4:16:c3:50:70:0d:08:e4:
4b:57:ce:21:93:f1:2e:01:46:30:62:ce:04:f7:ec:61:ff:43:
9a:91:c0:ea:cb:a3:41:1c:d1:40:03:b5:4e:34:12:bf:45:4f:
1c:ae:70:e5:50:99:44:25:da:c8:fb:53:3e:27:9a:82:1c:5f:
8e:1b:50:d5:ae:57:15:2e:22:4c:21:0e:95:7c:18:c1:1e:8f:
d8:5d:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:51 2025 by rpki-client