Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rsNM6CICDfuOAs78JwjMe8lTXg4.roa
File: rsNM6CICDfuOAs78JwjMe8lTXg4.roa (raw, json)
Hash identifier: X0V/+ViV2ZNN+ZtMd4FNY3Dg/R2QqqM4tpy8gCoMFEY=
Subject key identifier: AE:C3:4C:E8:22:02:0D:FB:8E:02:CE:FC:27:08:CC:7B:C9:53:5E:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522505ABDBA5823EFCDE02327F45BD7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rsNM6CICDfuOAs78JwjMe8lTXg4.roa
Signing time: Thu 02 Jan 2025 03:49:53 +0000
ROA not before: Thu 02 Jan 2025 03:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211350
IP address blocks: 2a0e:97c0:1c0::/45 maxlen: 48
2a0e:97c0:1c8::/48 maxlen: 48
2a0e:b107:1660::/45 maxlen: 48
2a0e:b107:1668::/45 maxlen: 48
2a0e:b107:1670::/45 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:50:5a:bd:ba:58:23:ef:cd:e0:23:27:f4:5b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aec34ce822020dfb8e02cefc2708cc7bc9535e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:e9:83:9b:e2:f6:79:be:af:e2:63:e0:ca:
99:53:36:7c:11:1b:d9:a2:d4:d9:bc:4a:91:16:89:
42:d1:c0:7b:22:67:3f:fb:a5:71:e3:67:7d:db:46:
a1:3f:db:93:a1:2c:50:62:c2:d7:9a:cc:94:fc:27:
7f:73:b8:f9:be:e5:27:b5:3a:d9:c1:45:7d:e6:94:
b4:03:5b:7e:11:07:b7:f7:06:f6:ba:62:a9:d0:43:
c9:d4:3d:1c:20:ec:7c:6d:96:fb:6a:a4:e1:96:06:
b2:f8:83:68:90:f6:7a:ac:ce:b4:19:b0:fa:e6:ab:
c6:3b:b0:ca:4b:b2:0c:4b:d3:7c:83:eb:64:d9:63:
ac:29:08:49:b1:c8:b7:f4:d5:54:38:9f:5f:5a:c9:
2a:63:5b:bc:57:69:2e:43:f4:13:05:29:e9:d5:4e:
ad:66:af:55:2b:1c:ba:e3:40:10:01:9c:b8:54:dd:
59:59:e4:1b:8e:c9:e0:3a:f8:8e:7a:4c:45:5b:7f:
7b:b6:5d:6c:1e:d3:e4:18:81:ad:5f:7f:02:5b:7d:
ef:a0:9f:83:b8:73:cc:c0:d3:e2:1d:51:56:bc:2d:
51:1e:a6:9b:09:c1:fd:1e:08:62:de:f3:eb:01:24:
b6:dc:eb:3b:85:35:ca:cf:78:75:f8:42:89:c3:20:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C3:4C:E8:22:02:0D:FB:8E:02:CE:FC:27:08:CC:7B:C9:53:5E:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rsNM6CICDfuOAs78JwjMe8lTXg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1c0::-2a0e:97c0:1c8:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1660::-2a0e:b107:1677:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:44:2f:34:09:88:eb:7d:ce:2f:50:1f:0d:c6:79:af:ed:0e:
b3:6e:2f:a2:1c:ab:f0:a6:93:10:4e:5d:99:6e:a3:6e:6e:c9:
b1:8d:4d:6c:54:3c:c3:05:c4:90:e5:9e:37:fd:a0:d6:b7:1b:
6e:ba:65:8f:a9:c7:2f:3e:ca:4d:1b:11:f0:97:b0:63:28:9d:
61:6a:f3:d4:2e:7c:04:76:1a:df:84:cd:ad:07:d1:5a:a7:f5:
f6:73:7f:63:dd:ec:4e:1d:bc:95:39:c4:9e:cb:09:61:40:2e:
9e:b1:b5:38:4e:51:0f:82:de:0b:bc:48:9e:c9:a4:89:4a:14:
aa:66:02:4c:af:ea:29:87:9e:26:50:99:49:ca:0e:a0:25:70:
f7:9b:bf:c4:92:31:30:6b:52:80:22:8e:62:d3:57:9a:11:44:
7c:5c:b4:24:4a:f8:5a:69:2c:b4:0d:ed:66:28:9d:6c:32:5e:
e6:a2:2c:fe:bb:1c:5b:42:9a:4d:9f:73:10:9f:df:e3:81:14:
98:5d:0b:98:8e:81:06:e6:59:c2:bc:07:a6:81:ea:fa:1f:a8:
c6:f8:1a:84:50:2d:c1:1c:e3:5b:1b:1a:dc:87:52:65:fa:26:
92:0a:f4:62:98:b8:95:06:28:36:0c:c7:28:68:3b:f8:ae:91:
ce:c4:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:02 2025 by rpki-client