Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/roaTQBjBu12Ofp9wTqW3oNysTGY.roa
File: roaTQBjBu12Ofp9wTqW3oNysTGY.roa (raw, json)
Hash identifier: XaWK/abZ6g7A/DqcjoFx2OYfA33zihQVCXfkGTYj76c=
Subject key identifier: AE:86:93:40:18:C1:BB:5D:8E:7E:9F:70:4E:A5:B7:A0:DC:AC:4C:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D6645AD7FAA81CB0156755156DB4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/roaTQBjBu12Ofp9wTqW3oNysTGY.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49922
IP address blocks: 2a0e:97c0:b80::/44 maxlen: 48
2a10:cc44:100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d6:64:5a:d7:fa:a8:1c:b0:15:67:55:15:6d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae86934018c1bb5d8e7e9f704ea5b7a0dcac4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:6e:ff:62:c0:eb:64:ea:98:e6:b3:ed:b9:
fd:33:d8:68:a0:bb:9f:83:1d:54:23:45:05:e9:f6:
94:10:80:2f:99:0d:cb:dc:b4:81:1a:90:aa:38:37:
d6:59:e0:23:c9:12:f2:31:d0:b0:fe:b6:f0:ff:22:
cc:67:fe:13:9f:a8:ad:b4:08:38:8a:61:35:e7:71:
7b:fb:eb:a4:9e:c4:4b:19:7f:2a:01:b9:e4:da:70:
1f:d0:5c:8f:d2:f2:0c:58:ce:b7:e6:4a:07:a8:43:
f2:8e:2e:19:76:df:50:50:7d:db:6a:75:3f:dd:6f:
09:5c:2c:c8:5e:57:58:f0:14:89:79:0a:e4:0f:37:
5e:f6:48:8a:df:37:04:cb:3d:f3:5a:4b:e2:dc:1f:
24:b4:1b:52:cd:6b:f2:9d:41:19:65:f3:4c:3a:18:
03:bd:8f:83:4e:21:e7:af:38:4b:df:37:05:fd:a4:
3e:6e:24:fc:30:ab:16:17:d1:67:56:71:64:93:0b:
86:59:37:fe:df:b3:f8:ef:70:ef:c8:d1:82:5b:66:
08:31:ae:7b:d0:60:f7:2f:8e:e0:27:17:f3:c0:9e:
37:b7:0b:da:7b:65:86:0a:7b:91:23:35:9c:67:0c:
f6:8d:30:0d:07:96:13:dc:4a:aa:9d:1f:0b:e6:1e:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:86:93:40:18:C1:BB:5D:8E:7E:9F:70:4E:A5:B7:A0:DC:AC:4C:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/roaTQBjBu12Ofp9wTqW3oNysTGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b80::/44
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
52:ca:a7:d9:22:6e:32:d8:5d:8b:f4:4b:6d:f1:db:21:09:4f:
eb:be:18:fd:e6:e4:eb:55:24:52:ac:52:47:29:cc:36:9e:b3:
b6:c1:b2:b3:f9:26:ea:9e:17:a7:25:35:a4:25:21:0e:52:63:
83:2b:62:c5:8f:95:d9:e6:c3:8b:72:56:54:ff:53:be:f6:04:
df:ec:11:af:1e:d8:16:f4:c8:45:0d:27:2e:50:74:f1:52:c4:
9d:7d:52:57:ee:27:3f:97:dd:eb:3c:4f:68:be:d9:2b:1f:46:
49:e0:87:f8:55:95:b1:bf:1f:6e:40:24:2c:1c:f6:7f:78:73:
f3:e6:d3:c9:66:f1:57:d3:c2:17:e3:aa:30:59:58:ac:6f:31:
99:ef:11:0e:81:01:d3:3a:6b:8a:4a:4e:3a:43:4f:51:d5:39:
b8:a4:1e:00:68:6e:6b:27:76:2e:74:c1:a6:1b:dc:ba:52:1f:
fe:0a:c8:d3:ff:e8:46:4e:88:7e:6e:04:e9:76:c7:db:02:6c:
1a:d9:22:bf:01:69:82:dc:7f:33:c7:83:d4:a3:df:5c:74:c2:
63:db:b6:b8:c8:e2:ef:8d:db:cc:a0:53:4b:0d:62:c2:e1:fd:
34:f9:87:5b:4c:92:d2:ae:6c:a5:85:a1:6e:8f:41:04:aa:a2:
38:5f:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:40 2025 by rpki-client