Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rbZZO_GDQ9l6GhAe8bWml11blAA.roa
File: rbZZO_GDQ9l6GhAe8bWml11blAA.roa (raw, json)
Hash identifier: uB0j3lHvR4MBDy8D/h4oV6iT57NAxwth9ZpsQb7tBes=
Subject key identifier: AD:B6:59:3B:F1:83:43:D9:7A:1A:10:1E:F1:B5:A6:97:5D:5B:94:00
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252207A8EA68B48886187E3217404366
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rbZZO_GDQ9l6GhAe8bWml11blAA.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202184
IP address blocks: 2a0e:97c0:c20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:07:a8:ea:68:b4:88:86:18:7e:32:17:40:43:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adb6593bf18343d97a1a101ef1b5a6975d5b9400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:09:b4:5b:45:7f:13:31:02:a7:99:b1:4a:
fc:2f:1e:89:7b:c0:e2:7c:72:a7:93:6f:eb:2b:9e:
77:c9:40:45:ce:40:91:7c:52:8f:9c:c2:af:ab:09:
5f:e2:95:8f:a0:aa:f6:35:a7:0c:88:46:bb:e3:fe:
53:97:5b:4f:a1:b7:70:f5:34:9a:69:cd:9f:1a:1e:
ef:02:4b:32:ad:f6:a9:1c:4b:3a:3b:96:14:38:b6:
b6:de:a3:28:66:24:c5:a4:f6:33:60:67:03:e3:66:
4a:60:c1:88:dc:f5:8c:ea:65:fd:43:d6:4d:05:40:
af:5e:8b:a6:d7:c5:c2:b5:21:b9:c1:d5:c3:9c:14:
e0:2a:ae:02:69:5d:17:06:1c:5d:92:ab:af:2d:2e:
c4:aa:0a:d1:57:fe:f2:dc:9c:3e:90:ec:68:69:d9:
4a:ae:1c:9f:5c:25:a4:70:e9:04:ff:72:8a:98:9f:
af:a9:b0:87:7d:f7:cd:00:07:b0:3d:24:aa:ca:2d:
a2:d0:55:87:95:a4:56:0a:d9:7d:97:47:86:2f:6e:
f5:87:b0:bd:11:e7:7f:60:8b:a1:d1:47:0e:1b:13:
b2:6e:8d:2f:09:fc:06:7d:1b:d2:b2:ed:56:bb:75:
45:fe:bf:88:ad:c3:cb:4d:d2:37:71:30:f5:27:fa:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B6:59:3B:F1:83:43:D9:7A:1A:10:1E:F1:B5:A6:97:5D:5B:94:00
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rbZZO_GDQ9l6GhAe8bWml11blAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c20::/44
Signature Algorithm: sha256WithRSAEncryption
b5:33:5f:6c:81:19:14:d5:2e:fd:92:f1:96:da:16:e1:48:4a:
4f:35:43:28:d4:61:24:fc:4f:b4:9e:1e:41:12:4d:73:70:f8:
70:f5:fe:84:d5:ff:3c:53:ba:71:ab:4f:cd:18:1b:c0:ab:98:
16:f9:5e:b8:8f:7c:ff:37:97:6e:ed:9a:b8:50:9e:57:25:10:
b5:2e:e8:4a:47:ed:cf:50:7a:84:5b:7a:90:15:47:16:7e:f3:
b6:a1:ec:fa:9c:a7:f6:44:57:12:f1:be:50:7c:6d:0e:d5:d1:
82:a6:13:3d:14:c0:0e:ce:f9:90:70:9d:84:03:3b:eb:0f:d0:
53:4b:2b:ea:69:4f:79:60:62:85:91:80:80:97:9a:87:a4:ff:
98:3f:9b:45:13:04:ee:a8:ca:bf:ac:6b:48:8d:9b:56:b3:ad:
37:82:69:88:2e:01:a7:ff:5f:10:4e:e7:a8:9e:be:ad:e3:70:
2e:35:2d:f4:d5:d9:ed:b7:a1:ac:d3:e5:15:05:ca:c0:7d:a4:
9a:43:34:a5:94:cf:1c:34:36:af:b3:bd:84:2c:b9:40:c6:99:
4b:05:3a:89:84:86:b1:94:be:9a:60:0a:54:e5:b8:84:ee:5e:
d1:46:8d:72:97:dc:39:22:f6:35:fc:80:3c:fb:c7:05:36:6f:
3e:5a:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:03 2025 by rpki-client