Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pZlbm8bTV62lM-CrT7T4e5RKgD4.roa
File: pZlbm8bTV62lM-CrT7T4e5RKgD4.roa (raw, json)
Hash identifier: x/NM1SFTAqUxBRpOLZtaIuW2AdoI88sjkuwASxqv39w=
Subject key identifier: A5:99:5B:9B:C6:D3:57:AD:A5:33:E0:AB:4F:B4:F8:7B:94:4A:80:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01949A202C3E4F201F03CDF44DFA0703FDA2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pZlbm8bTV62lM-CrT7T4e5RKgD4.roa
Signing time: Fri 24 Jan 2025 21:03:07 +0000
ROA not before: Fri 24 Jan 2025 21:03:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215738
IP address blocks: 2a06:de00:700::/44 maxlen: 48
2a06:de00:7f0::/48 maxlen: 48
2a06:de00:7f1::/48 maxlen: 48
2a0e:97c0:4c1::/48 maxlen: 48
2a0e:97c0:4c2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:20:2c:3e:4f:20:1f:03:cd:f4:4d:fa:07:03:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 21:03:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5995b9bc6d357ada533e0ab4fb4f87b944a803e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:61:88:14:13:96:43:ec:40:3b:06:28:43:
69:b1:f0:f7:44:c0:1e:05:28:27:99:97:b4:16:1f:
4c:3b:a6:5c:66:b5:96:28:c6:da:2f:4a:a4:99:a4:
75:a0:46:a2:20:f1:0f:37:9a:c0:1c:2e:f7:9e:01:
ec:f9:b7:90:e7:d5:31:57:bf:1b:ca:be:f3:44:c8:
37:13:63:47:a5:ac:d2:27:d6:15:b9:87:8a:a1:64:
61:d9:9b:1b:45:90:ef:e5:91:61:86:9a:12:a6:8a:
ee:20:8c:4f:4f:7f:ff:78:ed:78:18:3c:be:ec:5a:
08:83:ee:58:90:c8:5b:47:55:11:30:b9:aa:c3:37:
50:89:ff:ff:7a:b6:0f:58:bc:31:c9:8f:d3:86:d4:
50:47:fc:5e:4f:49:ce:87:5b:24:09:a3:f8:a5:ac:
a3:7a:98:f9:77:02:12:8f:19:c5:e5:4b:ca:f2:e6:
4b:5e:b4:66:6d:20:63:7f:b1:c7:b3:2c:15:11:e1:
a3:7a:15:a3:16:15:bc:02:65:88:95:a2:7e:f6:de:
53:b4:77:3b:89:87:be:89:f8:eb:95:63:62:fa:56:
cc:9b:75:d8:51:ca:ca:d1:0c:b9:d5:84:66:11:b4:
78:79:c1:6f:79:43:15:de:b7:86:e8:fa:38:b7:f3:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:5B:9B:C6:D3:57:AD:A5:33:E0:AB:4F:B4:F8:7B:94:4A:80:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pZlbm8bTV62lM-CrT7T4e5RKgD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:700::/44
2a06:de00:7f0::/47
2a0e:97c0:4c1::-2a0e:97c0:4c2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:5e:5c:7e:27:6a:16:fd:76:d8:11:76:ce:0d:b3:cb:63:87:
f6:71:10:60:d7:dd:f0:0a:be:77:88:32:55:f9:72:14:e8:93:
dc:aa:7a:e1:b4:f8:cc:44:ae:2e:40:68:c6:d1:67:92:d1:8a:
86:27:36:1f:52:02:db:2c:a8:87:20:2a:85:93:6b:6e:f1:60:
9e:02:cd:ed:d2:bc:99:b1:0f:22:74:00:72:18:99:e2:95:ad:
a5:b5:f3:63:17:48:1c:b5:cc:fa:ab:51:82:a4:14:36:0b:ca:
f2:0d:22:24:0e:5a:db:26:e7:ea:5a:e8:7d:a0:3b:e5:03:93:
da:e1:42:f0:12:ef:29:2b:35:d6:85:42:68:c1:3d:30:3e:d9:
59:e4:d6:9a:c4:21:84:07:4a:90:60:df:c1:ee:7c:6d:95:e3:
79:23:1d:58:5a:f7:c8:a9:f2:43:0b:c0:f9:79:6d:c8:0b:3f:
1b:a5:23:62:f5:87:6a:95:c1:1b:79:15:1f:9e:e0:ad:4a:91:
bb:d6:84:d4:cb:34:f5:3b:43:5c:ac:d9:ab:b8:e1:59:d8:be:
ae:61:8b:d7:d7:50:a7:23:65:70:d6:fc:0d:e1:43:39:0c:8e:
7f:d8:fb:b0:dc:cb:5d:bd:df:5e:79:14:1d:9f:69:e0:67:59:
12:a5:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:25 2025 by rpki-client