Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u6cFx4kDLpazvWEc6Twpbsx5wc4.roa
File: u6cFx4kDLpazvWEc6Twpbsx5wc4.roa (raw, json)
Hash identifier: YrTMOl4fGFp72JPiQ43VnwzxaWjckqbMpYl57HgN8lw=
Subject key identifier: BB:A7:05:C7:89:03:2E:96:B3:BD:61:1C:E9:3C:29:6E:CC:79:C1:CE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425229284E6F185BD962F231F4D40CD6A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u6cFx4kDLpazvWEc6Twpbsx5wc4.roa
Signing time: Thu 02 Jan 2025 03:50:10 +0000
ROA not before: Thu 02 Jan 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215887
IP address blocks: 2a06:de06:e660::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:92:84:e6:f1:85:bd:96:2f:23:1f:4d:40:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bba705c789032e96b3bd611ce93c296ecc79c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:3c:c2:e3:4f:3d:5e:88:2a:3c:0f:c7:53:
ba:14:6b:5b:25:07:83:e8:c8:72:b2:9d:0d:c4:b8:
9a:d5:20:84:4c:d1:65:ba:68:0a:7f:2e:06:69:ea:
6a:3c:ba:cb:b2:cb:ca:66:0f:c5:44:2e:44:68:ed:
d5:c1:7b:83:48:0f:0e:d4:ba:20:c2:53:73:c2:38:
5b:30:79:09:25:c9:2b:e6:62:37:74:35:ee:77:c9:
9e:b3:bd:c1:62:17:1f:0b:8e:ae:45:af:4a:7c:af:
aa:b7:3d:b3:a2:aa:d4:59:92:20:a8:98:e0:c5:fa:
15:a1:ad:29:03:22:6f:9e:c2:32:0d:8e:e1:46:a3:
79:44:ad:3c:17:c5:a1:af:a2:85:44:fa:b6:4e:00:
36:bb:c4:40:1e:2c:6f:d7:7a:4d:ea:4c:93:d3:22:
ef:1d:5b:6f:42:8b:b3:80:ed:ef:95:a6:aa:c1:9d:
a1:66:6c:58:fb:85:43:f0:d1:6f:6c:87:26:09:a2:
32:7a:6e:50:6c:23:3b:9e:42:d2:c8:f2:cc:69:0c:
b3:6f:3c:f4:d8:65:80:4a:25:06:60:23:af:26:f6:
96:0b:05:ac:70:35:73:fb:c4:66:a7:2a:77:20:46:
27:b9:33:64:18:55:28:36:6f:ff:49:fd:bf:16:a9:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:05:C7:89:03:2E:96:B3:BD:61:1C:E9:3C:29:6E:CC:79:C1:CE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u6cFx4kDLpazvWEc6Twpbsx5wc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de06:e660::/44
Signature Algorithm: sha256WithRSAEncryption
3a:03:a6:bb:00:1e:6e:1c:fb:8f:9e:f8:8c:b8:46:9a:67:d5:
0a:c1:e8:aa:17:5b:ef:38:1d:d3:91:3f:20:66:33:51:b5:ef:
7d:14:a8:6a:b2:00:c9:23:72:8c:75:90:e7:7e:ae:07:25:fd:
a4:32:a0:7f:f3:57:08:2f:12:6c:6a:58:a8:71:48:75:f2:d3:
18:64:67:40:9f:bd:9a:41:8c:eb:51:75:97:3e:21:bd:75:77:
5f:3a:ff:fb:f0:19:5e:f7:8f:d9:a0:f7:71:99:fc:e7:c1:f1:
a1:db:a6:35:d7:d9:7c:4c:6c:b8:0b:4f:e1:b7:38:1f:ff:08:
8d:38:8e:d0:eb:b7:ca:86:d3:79:32:c8:5f:d2:a8:b4:14:28:
c1:ac:6c:6e:65:28:f4:93:64:a0:df:1e:3c:37:e0:71:da:9f:
74:08:89:15:8d:c8:e3:d0:77:97:75:c2:15:d0:89:8c:45:e3:
9b:0e:43:2d:00:89:80:3e:b7:8d:18:43:a4:f3:be:b2:51:83:
a8:8b:c3:94:2d:40:bd:da:e0:9e:ae:df:08:b1:20:28:35:df:
68:e8:df:5b:d6:e4:83:87:4b:9f:0d:df:38:f9:48:92:ee:2a:
f9:35:1c:6a:f7:7e:1a:34:41:40:2b:20:02:10:a9:5d:78:19:
6d:f7:82:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIpKE5vGFvZYvIx9NQM1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmE3MDVjNzg5MDMyZTk2YjNiZDYxMWNlOTNjMjk2ZWNjNzljMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKI8wuNPPV6IKjwPx1O6FGtbJQeD
6Mhysp0NxLia1SCETNFlumgKfy4GaepqPLrLssvKZg/FRC5EaO3VwXuDSA8O1Log
wlNzwjhbMHkJJckr5mI3dDXud8mes73BYhcfC46uRa9KfK+qtz2zoqrUWZIgqJjg
xfoVoa0pAyJvnsIyDY7hRqN5RK08F8Whr6KFRPq2TgA2u8RAHixv13pN6kyT0yLv
HVtvQouzgO3vlaaqwZ2hZmxY+4VD8NFvbIcmCaIyem5QbCM7nkLSyPLMaQyzbzz0
2GWASiUGYCOvJvaWCwWscDVz+8Rmpyp3IEYnuTNkGFUoNm//Sf2/FqnFswIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLunBceJAy6Ws71hHOk8KW7MecHOMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdTZjRng0a0RMcGF6dldFYzZUd3Bic3g1d2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeBuZg
MA0GCSqGSIb3DQEBCwUAA4IBAQA6A6a7AB5uHPuPnviMuEaaZ9UKweiqF1vvOB3T
kT8gZjNRte99FKhqsgDJI3KMdZDnfq4HJf2kMqB/81cILxJsaliocUh18tMYZGdA
n72aQYzrUXWXPiG9dXdfOv/78Ble94/ZoPdxmfznwfGh26Y119l8TGy4C0/htzgf
/wiNOI7Q67fKhtN5Mshf0qi0FCjBrGxuZSj0k2Sg3x48N+Bx2p90CIkVjcjj0HeX
dcIV0ImMReObDkMtAImAPreNGEOk876yUYOoi8OULUC92uCert8IsSAoNd9o6N9b
1uSDh0ufDd84+UiS7ir5NRxq934aNEFAKyACEKldeBlt94KA
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:50 2025 by rpki-client