Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wFNbSijNb4kA5ijr6rQCqPILe6g.roa
File: wFNbSijNb4kA5ijr6rQCqPILe6g.roa (raw, json)
Hash identifier: v8dwU4zdgcOmU2x8weQ7a8uzCtYHOA7PzNuHUvJ4h6E=
Subject key identifier: C0:53:5B:4A:28:CD:6F:89:00:E6:28:EB:EA:B4:02:A8:F2:0B:7B:A8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522274EEFAB7F3BB3822ADB20EEC9DD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wFNbSijNb4kA5ijr6rQCqPILe6g.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207466
IP address blocks: 2a0e:b107:770::/44 maxlen: 48
2a0e:b107:771::/48 maxlen: 48
2a0e:b107:772::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:27:4e:ef:ab:7f:3b:b3:82:2a:db:20:ee:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0535b4a28cd6f8900e628ebeab402a8f20b7ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:34:3f:6f:bc:25:3f:e6:bc:b8:7e:a9:c2:
3f:93:98:e6:07:55:be:67:29:2a:a0:18:eb:a5:dd:
17:f6:53:3e:67:3b:89:cc:c9:17:0f:ce:db:d3:a4:
ab:81:6e:03:4d:c5:30:2d:57:78:8b:4f:72:c0:17:
f8:aa:5c:91:67:0c:3b:c7:90:03:d4:3e:54:9e:d3:
f3:89:a4:88:35:e8:8d:de:4e:a9:13:40:fe:fe:19:
3b:b0:9d:4f:0b:33:e4:01:0c:11:8a:85:a1:0f:f9:
3a:69:2a:4a:31:70:35:69:81:ee:1e:cf:5e:71:27:
cf:7f:12:7c:36:aa:c2:4f:cb:f1:8d:99:cc:96:62:
8d:bd:38:34:e9:00:5c:26:66:89:1a:fd:24:e5:d5:
ed:f7:7a:8c:06:19:99:0c:33:56:52:21:57:a4:a4:
2a:a3:1d:94:c3:9a:20:a1:56:96:92:34:26:fe:dd:
fa:74:1a:5d:40:a3:8f:34:54:a1:fe:89:fa:a2:fd:
51:0b:fe:36:ef:c6:87:b1:65:99:b0:e8:78:3a:d6:
ec:e4:36:ab:39:a5:99:08:53:1a:4a:13:f6:55:33:
d1:3e:00:19:37:7b:03:0d:fa:26:55:90:12:10:a3:
e4:4d:b8:fc:8c:5d:67:88:ec:12:b0:3c:b1:b0:5c:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:5B:4A:28:CD:6F:89:00:E6:28:EB:EA:B4:02:A8:F2:0B:7B:A8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wFNbSijNb4kA5ijr6rQCqPILe6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:770::/44
Signature Algorithm: sha256WithRSAEncryption
11:93:d2:e5:57:0f:e8:97:5e:70:b3:be:4e:68:d3:c6:41:99:
26:8a:40:e1:a2:37:87:44:4c:24:60:bf:a7:ba:3b:43:9a:30:
c8:25:cf:b8:13:58:27:2e:51:61:c1:5d:06:52:f5:32:3d:16:
07:8f:59:c2:c4:aa:cf:fe:36:d9:dc:43:b9:2a:09:9b:15:c1:
0b:f5:30:2c:03:53:ff:6c:36:b1:31:35:96:60:98:dc:04:73:
18:9f:ee:10:c3:e3:28:6e:6e:56:c5:46:bc:7d:e9:b9:29:6d:
aa:ed:90:85:f2:71:e4:bd:c5:36:be:47:23:da:02:07:1f:4b:
bb:c7:d8:49:ea:ac:69:1e:eb:9c:63:02:c0:0d:db:87:68:7b:
9d:96:c6:bb:de:a3:a9:08:82:13:0d:51:f2:e7:80:c5:ca:3b:
b6:f8:f3:75:92:64:68:cd:ee:b5:14:52:96:f0:7b:3a:08:b2:
33:64:5a:15:1d:da:09:ce:85:28:51:3d:aa:0b:00:e5:f3:40:
9f:03:fa:00:68:98:a4:b7:36:31:0b:17:eb:bd:c0:3e:9f:58:
f7:20:f2:9b:a1:0e:e5:d8:03:d1:b2:6c:b1:52:3b:bc:1d:44:
0a:69:f0:f3:56:70:f0:1d:79:25:8e:47:4c:45:5c:7c:db:2a:
49:17:21:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:22 2025 by rpki-client