Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sLTVHXuK_NWf-6cmGsSPolq4hH0.roa
File: sLTVHXuK_NWf-6cmGsSPolq4hH0.roa (raw, json)
Hash identifier: sJ8t7mSYdJoRJJgaeoowWp5jMAb2cAKIk+YtBqDKjqs=
Subject key identifier: B0:B4:D5:1D:7B:8A:FC:D5:9F:FB:A7:26:1A:C4:8F:A2:5A:B8:84:7D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252270E6D063266B51FAF928D14F89F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sLTVHXuK_NWf-6cmGsSPolq4hH0.roa
Signing time: Thu 02 Jan 2025 03:50:01 +0000
ROA not before: Thu 02 Jan 2025 03:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213293
IP address blocks: 2a0e:b107:2180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:70:e6:d0:63:26:6b:51:fa:f9:28:d1:4f:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0b4d51d7b8afcd59ffba7261ac48fa25ab8847d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:47:8f:ab:9a:44:53:32:a1:e0:dc:50:dc:
b0:c2:ec:65:e7:f0:cc:ef:50:17:72:84:7d:da:0a:
35:0a:98:b7:0b:00:a8:99:24:6d:b1:f8:ef:b7:68:
56:27:13:d5:97:fb:17:cb:5c:3c:f8:a7:2f:a9:23:
74:65:2c:a1:c3:a4:25:34:4f:0a:48:87:96:4e:96:
5e:bf:81:e9:ab:b5:01:66:08:7b:94:4d:e9:d9:bf:
92:ad:50:f9:39:2f:41:0a:24:ed:d6:b3:0d:5c:b3:
05:8b:07:10:48:11:67:4e:2b:c9:fb:5f:0e:1a:24:
ec:2f:98:87:55:9f:3d:7a:2c:88:03:d1:05:fb:fc:
1a:d6:36:8b:ec:5a:7e:a9:d9:6e:c2:5d:de:4c:56:
e9:f2:33:c8:0b:90:29:3b:aa:f2:b4:18:18:dd:4d:
23:9e:56:80:be:f7:e6:40:72:2b:64:64:4a:d8:c9:
41:98:c7:8e:03:54:87:67:3d:3e:c7:a8:b2:5d:29:
04:cb:bd:5c:7c:95:53:dc:ac:e7:80:b0:61:ea:1f:
1c:39:65:af:f9:7d:b4:c6:f6:53:97:f6:4e:2f:ec:
57:db:37:b5:c7:9b:f2:a8:c7:bf:dd:3a:a6:ca:ab:
be:d2:a0:bd:9f:1b:c2:b6:c0:a7:dc:15:d7:3c:36:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:D5:1D:7B:8A:FC:D5:9F:FB:A7:26:1A:C4:8F:A2:5A:B8:84:7D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sLTVHXuK_NWf-6cmGsSPolq4hH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2180::/44
Signature Algorithm: sha256WithRSAEncryption
c5:ce:ef:67:78:3c:f9:96:35:78:ad:33:8f:a2:3b:d1:05:b7:
09:d7:fc:ec:f6:8f:73:86:84:2c:e5:66:5f:3c:73:21:c6:28:
4d:35:b6:fb:ae:cb:a3:95:6c:dd:83:53:5f:76:74:ef:99:10:
ff:ab:00:02:2c:cf:9d:41:37:57:72:1b:5b:76:8b:ec:b7:ef:
46:e1:83:1a:c1:c2:fc:89:7e:27:30:5c:7e:1d:c0:12:36:b9:
cc:5c:4e:3d:05:45:aa:ec:94:b8:34:14:75:97:36:8c:95:f0:
6e:06:23:5f:bd:80:d1:52:08:5a:d8:67:40:53:88:d2:02:03:
92:c6:91:c6:94:ac:98:8d:cc:af:19:b7:f0:c4:d7:55:50:30:
a5:70:ac:8b:dc:8a:13:aa:16:bb:b4:ba:50:5d:46:c0:2b:76:
b4:9f:3f:e9:97:2a:c7:a8:14:e1:3b:e8:8b:c6:c9:36:d4:79:
a3:44:55:58:d6:e3:fb:e2:18:18:5d:61:b1:10:d6:64:5e:49:
a0:48:15:e0:e9:77:fc:1c:ab:94:bc:de:b2:6f:07:97:cb:4e:
f0:23:d9:ff:7a:a0:f9:aa:cd:9f:21:0a:07:84:29:8f:17:c9:
ae:5c:ba:73:92:b5:89:54:29:e1:41:e2:96:3f:15:02:ca:42:
01:8c:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:43 2025 by rpki-client