Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xKv8YV7TXd-EXEb6CvzWeBFPNSU.roa
File: xKv8YV7TXd-EXEb6CvzWeBFPNSU.roa (raw, json)
Hash identifier: Gt8yxnVmR02iw0j0+NA0QqTgHdSEXFOyzaq9FovxDIQ=
Subject key identifier: C4:AB:FC:61:5E:D3:5D:DF:84:5C:46:FA:0A:FC:D6:78:11:4F:35:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252213E67E2045A8574055D286196707
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xKv8YV7TXd-EXEb6CvzWeBFPNSU.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203790
IP address blocks: 2a0e:b101::/32 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:13:e6:7e:20:45:a8:57:40:55:d2:86:19:67:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4abfc615ed35ddf845c46fa0afcd678114f3525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:ec:0b:8a:aa:f2:0c:0f:dc:69:04:5c:97:
51:a1:49:7e:1c:bc:eb:92:0b:af:22:9c:b6:fc:37:
c4:37:f9:9d:4c:ea:69:47:11:47:9a:b5:c8:5f:79:
fd:d0:10:bb:33:27:4b:22:24:89:69:51:35:6e:c6:
a7:93:6e:18:25:7f:4d:9d:da:cb:87:2a:ce:f6:7d:
09:1b:4c:e4:30:e2:e3:0c:16:b7:3d:19:f0:41:70:
0d:42:81:bc:ca:58:dd:f3:e9:9a:19:a5:d5:95:e5:
b0:62:cc:e0:7c:76:7b:72:e7:f5:07:60:9b:13:2e:
1b:53:5a:83:3c:27:2b:b8:d0:43:40:81:fc:10:68:
ef:48:dd:ec:bd:39:b9:0d:67:07:1c:5a:54:88:20:
83:6c:84:ff:a7:db:01:93:64:3e:bb:d8:b9:b5:95:
70:6c:36:c1:97:70:b9:7d:f6:a0:64:e1:1c:b2:a7:
14:ec:e1:21:4f:16:12:98:b5:f9:43:04:72:69:2a:
e9:8f:f9:e5:2d:c8:ab:cf:af:f4:44:a6:c6:e1:86:
60:be:4b:17:bf:16:a7:f4:eb:f0:c2:60:0a:ec:d8:
29:52:8b:f8:3b:b7:19:82:2a:1e:1a:f5:9b:ab:4e:
b2:4b:b1:ad:d1:f0:7f:8a:9b:1d:d2:ab:a4:02:fe:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AB:FC:61:5E:D3:5D:DF:84:5C:46:FA:0A:FC:D6:78:11:4F:35:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xKv8YV7TXd-EXEb6CvzWeBFPNSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b101::/32
2a0e:b107:12a0::/44
Signature Algorithm: sha256WithRSAEncryption
60:7c:fd:87:62:75:40:4f:cf:bf:8b:16:c9:f1:e9:ed:75:4c:
a7:00:4a:29:0e:61:5d:e1:d8:b6:68:4d:ec:48:2d:30:7d:1f:
24:73:8e:2e:7e:82:e7:81:98:01:97:2c:8b:b7:09:dc:b5:ab:
5e:7e:a9:7f:54:8c:97:45:a5:47:8e:24:41:27:76:35:87:ca:
c6:0d:5e:79:87:aa:a3:02:f1:6a:e8:ed:eb:1c:07:3d:f7:5f:
22:ff:0b:9e:90:ec:b6:10:c6:73:65:dc:b6:84:d2:26:8b:e6:
55:31:d0:59:ea:aa:a2:d2:a8:84:e3:d8:04:02:e2:2b:f1:25:
1f:a8:e3:b7:ab:bc:6b:fb:12:27:b7:19:7b:f4:e3:11:b0:f1:
7f:d4:9a:84:42:13:50:fc:ad:2e:b4:52:ce:b0:aa:5e:8a:ae:
15:3d:32:bb:f5:b9:81:60:85:ad:98:3e:d5:16:d2:87:28:38:
ae:c8:d6:13:58:23:3f:3a:6e:34:48:81:3d:90:56:ec:c5:8d:
30:ca:e5:eb:6d:71:d2:cf:f8:a3:c4:34:92:f2:ae:92:fc:fb:
0a:a0:8b:80:75:39:b8:42:28:30:a1:df:e7:b6:58:ee:95:fb:
80:e1:1c:e4:73:71:2a:60:02:04:bb:9c:9f:f2:47:ff:ea:9d:
1e:aa:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:01 2025 by rpki-client