Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uRcrpjZewWU2snE3PfIEAD1LwJg.roa
File: uRcrpjZewWU2snE3PfIEAD1LwJg.roa (raw, json)
Hash identifier: blry/JGm/ueF3B36f6Fq2kXANGHpKzcP32boowR+/ok=
Subject key identifier: B9:17:2B:A6:36:5E:C1:65:36:B2:71:37:3D:F2:04:00:3D:4B:C0:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C80E7254C66C50CDAAD9AD4A97AE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uRcrpjZewWU2snE3PfIEAD1LwJg.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 2a0e:97c0:3e1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c8:0e:72:54:c6:6c:50:cd:aa:d9:ad:4a:97:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9172ba6365ec16536b271373df204003d4bc098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:b3:25:44:82:9a:80:90:29:56:1e:e7:a4:
bb:bc:2e:c7:90:3e:6d:10:7c:33:da:79:bd:16:2c:
f3:44:87:b7:1a:7e:be:f6:d3:38:8c:89:db:bd:ad:
57:e0:4a:15:53:0a:e7:fa:92:2a:79:92:28:41:4f:
06:c4:56:f8:eb:9c:93:d1:0e:23:f2:d9:71:f2:40:
68:01:c5:44:89:d9:83:4d:27:7c:b9:37:23:ab:4b:
d1:97:08:a3:90:89:c7:62:63:02:04:5e:39:18:38:
48:55:d6:dd:15:29:80:1e:b5:ad:a0:65:08:a1:9c:
e9:6c:ac:f5:3e:cd:9d:b0:d4:fa:67:ec:4d:07:50:
f4:71:83:4a:fa:4c:56:e2:e5:e2:eb:d4:ee:d1:f3:
2c:b0:8e:af:a4:a4:44:78:6e:b8:e9:93:d2:5b:63:
62:c8:2e:cf:8f:92:dd:69:b9:c0:f5:7e:c8:15:05:
fa:1b:d1:92:db:9b:1b:c9:ff:e8:48:f2:7f:66:c3:
41:72:80:47:7a:b0:41:11:bf:0d:f7:41:2d:80:e4:
e2:48:18:50:cf:fb:f6:19:95:be:21:85:06:a9:38:
7c:66:64:65:ef:5e:75:83:b9:f4:70:0a:f2:6b:55:
8f:cb:45:22:b7:6f:70:b0:6d:d0:b1:b0:e7:2f:b5:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:2B:A6:36:5E:C1:65:36:B2:71:37:3D:F2:04:00:3D:4B:C0:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uRcrpjZewWU2snE3PfIEAD1LwJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e1::/48
Signature Algorithm: sha256WithRSAEncryption
b8:0a:c2:37:4c:57:09:6d:c8:bd:a9:b6:2a:a0:e1:db:44:98:
ff:8b:62:ff:53:1d:88:66:ad:8f:7a:18:8c:24:c1:55:ad:53:
0d:52:de:84:d4:81:48:d1:86:77:1e:fe:24:a8:c6:a3:1a:66:
ad:e5:7d:5e:6a:e6:43:24:eb:f8:b4:36:7e:15:16:51:67:3f:
ab:c0:1c:47:95:3b:04:d1:10:9f:41:8b:7b:f4:7f:d4:08:8a:
75:ec:9a:0c:83:f5:7d:bb:c3:22:dd:2e:63:6c:f9:c6:8f:86:
53:81:cb:67:9f:36:d9:be:70:0d:99:a4:e0:d8:7b:cf:55:4a:
62:a3:12:5c:14:d2:cb:c9:6c:55:a2:6d:42:98:ff:81:c0:7c:
68:61:8a:cd:f2:f8:af:6d:c4:27:7b:ec:63:26:3a:1c:28:71:
a6:10:ef:2e:0c:31:7d:67:ef:14:5a:5d:cf:7e:f8:f9:6f:22:
de:08:f2:97:c6:30:7e:7e:b9:df:67:74:fc:82:79:b6:aa:cd:
3c:7b:07:2d:98:95:aa:1f:96:74:12:44:f7:44:f5:21:13:be:
1a:48:82:e7:a3:c8:cd:96:65:b8:3c:a8:6e:c8:95:aa:19:e6:
da:63:bf:f4:02:aa:a4:35:da:77:0e:4b:05:d8:04:f9:3a:21:
d5:0c:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:24 2025 by rpki-client