Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wHKu9AahPw6XSj7Gqdz74WmBN5M.roa
File: wHKu9AahPw6XSj7Gqdz74WmBN5M.roa (raw, json)
Hash identifier: Uh0O86epSPmROQ+7ka7a91LwbnpufY0HTPccss3qcBI=
Subject key identifier: C0:72:AE:F4:06:A1:3F:0E:97:4A:3E:C6:A9:DC:FB:E1:69:81:37:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228B51A32697DD0145FFD897830F20
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wHKu9AahPw6XSj7Gqdz74WmBN5M.roa
Signing time: Thu 02 Jan 2025 03:50:08 +0000
ROA not before: Thu 02 Jan 2025 03:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215642
IP address blocks: 2a0e:97c0:5b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:8b:51:a3:26:97:dd:01:45:ff:d8:97:83:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c072aef406a13f0e974a3ec6a9dcfbe169813793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:1c:c7:c0:54:34:b7:9b:f2:41:ef:11:1c:
89:ba:0f:39:8d:a2:a1:43:7f:a5:59:28:b5:bb:5f:
ca:18:1a:ae:fb:ab:d3:93:28:25:c9:b1:b8:d5:01:
c6:f2:06:6b:a2:85:fa:50:ff:10:b7:ca:72:5e:60:
87:22:3f:8d:fd:cf:52:d6:93:84:22:28:70:88:53:
ba:09:06:f4:63:22:4a:d7:c8:98:b4:33:71:c0:65:
9e:ce:67:f3:7b:c4:fb:90:06:cf:ff:38:7c:d0:2b:
94:29:cb:01:a2:a8:c1:7d:07:dd:08:4d:b5:a7:8d:
47:60:80:95:df:7f:02:79:49:2f:cb:10:66:83:5b:
07:dc:8f:ea:65:29:60:16:0d:cd:0d:49:e5:4f:15:
85:4c:2f:3d:e5:43:d7:b7:cd:9a:fb:68:b8:8a:2f:
de:e4:c6:eb:54:cf:1d:9a:a0:f4:70:bd:f3:a1:ba:
13:e9:3d:3c:15:de:5d:df:55:2c:cd:b1:6a:7a:5f:
14:f8:58:96:54:3f:59:4a:44:46:73:61:7e:08:24:
38:7b:62:c7:ae:26:87:0c:1d:8f:c0:ff:24:17:0a:
54:7a:07:ec:d2:bd:9b:97:2f:44:8d:c2:e5:34:a1:
41:95:07:5b:b0:d9:70:a1:f7:7c:17:35:4b:76:89:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:AE:F4:06:A1:3F:0E:97:4A:3E:C6:A9:DC:FB:E1:69:81:37:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wHKu9AahPw6XSj7Gqdz74WmBN5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5b0::/44
Signature Algorithm: sha256WithRSAEncryption
97:8a:62:60:60:a1:dd:f5:b9:26:37:19:20:ad:62:6f:6f:00:
73:d1:01:89:29:6e:aa:d8:ae:b3:6b:69:c1:61:29:25:91:67:
25:01:b3:20:d8:ac:ba:6d:11:83:22:15:98:17:84:9d:74:e3:
d7:af:9a:7c:ef:e3:c6:86:70:ac:e0:4f:30:04:dd:6c:1c:5a:
d1:3a:bd:20:e9:02:05:ad:1b:9f:1f:fb:f1:24:ee:b7:4d:43:
b4:91:30:31:5e:9f:c5:90:74:e9:2e:dc:f6:2b:3e:54:d9:da:
a4:5a:f9:9f:2a:90:73:3a:b3:53:68:44:6f:50:19:c6:32:e2:
77:54:ae:6a:a5:89:55:2d:a8:f4:4e:bf:33:fd:d7:a8:63:41:
9a:12:c0:6d:b0:5d:4f:f3:ee:ba:05:64:ec:1b:2a:f9:61:0b:
f1:ae:ae:d4:b7:f1:dc:10:a7:78:c2:19:e1:cb:df:c7:b9:80:
c4:83:19:66:92:e2:18:b7:62:52:dc:d9:09:0c:b5:83:36:a2:
40:49:43:0b:08:4d:a2:d0:e2:8e:0c:33:ed:d8:9f:34:93:fe:
b4:12:bb:89:fd:b7:fc:9a:03:bc:7c:c2:82:4e:e0:a4:bc:31:
62:b3:95:26:6e:c9:03:c4:59:8c:57:d3:7f:b2:4b:11:0f:fc:
72:78:d6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:54:50 2025 by rpki-client