Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xy8QNtKmke1JaAMWzi5ATL9jQIk.roa
File: xy8QNtKmke1JaAMWzi5ATL9jQIk.roa (raw, json)
Hash identifier: v18od/h5PPy0+ttaBOSqN/TpKjtT5P3SfUrBWGVB2WE=
Subject key identifier: C7:2F:10:36:D2:A6:91:ED:49:68:03:16:CE:2E:40:4C:BF:63:40:89
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228FD2CFAEC8F20C22E213AFD6AB87
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xy8QNtKmke1JaAMWzi5ATL9jQIk.roa
Signing time: Thu 02 Jan 2025 03:50:09 +0000
ROA not before: Thu 02 Jan 2025 03:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:27d0::/46 maxlen: 48
2a0e:b107:27d4::/46 maxlen: 48
2a0e:b107:27f4::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
2a0e:b107:2800::/46 maxlen: 48
2a0e:b107:2804::/46 maxlen: 48
2a0e:b107:2810::/46 maxlen: 48
2a0e:b107:2814::/46 maxlen: 48
2a0e:b107:2818::/46 maxlen: 48
2a0e:b107:281c::/46 maxlen: 48
2a0e:b107:2820::/46 maxlen: 48
2a0e:b107:2824::/46 maxlen: 48
2a0e:b107:2828::/46 maxlen: 48
2a0e:b107:282c::/46 maxlen: 48
2a0e:b107:2840::/46 maxlen: 48
2a0e:b107:2844::/46 maxlen: 48
2a0e:b107:2858::/46 maxlen: 48
2a0e:b107:285c::/46 maxlen: 48
2a0e:b107:2860::/46 maxlen: 48
2a0e:b107:2864::/46 maxlen: 48
2a0e:b107:2868::/46 maxlen: 48
2a0e:b107:286c::/46 maxlen: 48
2a0e:b107:2870::/46 maxlen: 48
2a0e:b107:2874::/46 maxlen: 48
2a0e:b107:2878::/46 maxlen: 48
2a0e:b107:287c::/46 maxlen: 48
2a0e:b107:2888::/46 maxlen: 48
2a0e:b107:288c::/46 maxlen: 48
2a0e:b107:2890::/46 maxlen: 48
2a0e:b107:2894::/46 maxlen: 48
2a0e:b107:2898::/46 maxlen: 48
2a0e:b107:289c::/46 maxlen: 48
2a0e:b107:28a0::/46 maxlen: 48
2a0e:b107:28b0::/46 maxlen: 48
2a0e:b107:28b4::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:8f:d2:cf:ae:c8:f2:0c:22:e2:13:af:d6:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c72f1036d2a691ed49680316ce2e404cbf634089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:7e:d6:e3:ff:83:e6:0d:86:d5:80:5c:08:
91:75:5f:81:8d:dc:a5:ab:88:e5:4b:97:cd:9b:b4:
57:03:df:fc:a8:1e:e0:34:df:87:c2:5e:0b:a7:85:
67:de:4f:aa:45:7e:e2:ae:e6:99:74:59:98:3b:04:
d4:e8:75:81:12:2e:56:99:33:b6:3d:c0:a9:07:17:
7a:0f:1f:c0:3f:ec:a7:43:1b:1f:18:88:d3:bb:43:
fd:3c:f1:09:0c:91:b0:3f:69:b9:39:0e:c3:cf:cd:
aa:fd:7c:31:69:30:16:18:fb:47:56:47:03:91:70:
d3:e8:e2:66:3b:a9:44:46:ee:bf:0d:42:df:0c:92:
0c:70:8c:61:5d:cb:10:ed:36:60:14:9e:88:cc:33:
3d:c5:b7:9c:6a:7c:27:5c:b7:fa:20:89:3e:09:81:
ac:38:37:81:f2:66:c4:c0:a9:89:84:26:b9:86:8e:
a8:ad:be:05:d1:90:ce:9e:dd:8b:0d:e0:62:08:da:
68:8a:dd:83:94:20:3e:a3:b0:e1:cd:09:eb:8b:10:
77:32:4d:17:e3:c4:4d:8b:5e:28:42:8c:c4:d2:5c:
bf:7d:55:85:bf:9e:e2:8c:57:aa:70:6f:f7:dc:d9:
5b:13:64:fa:6c:49:38:69:b7:78:e4:e1:73:41:c3:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:10:36:D2:A6:91:ED:49:68:03:16:CE:2E:40:4C:BF:63:40:89
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xy8QNtKmke1JaAMWzi5ATL9jQIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
2a0e:b107:27f4::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2810::-2a0e:b107:282f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2840::/45
2a0e:b107:2858::-2a0e:b107:287f:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2888::-2a0e:b107:28a3:ffff:ffff:ffff:ffff:ffff
2a0e:b107:28b0::/45
Signature Algorithm: sha256WithRSAEncryption
0a:bc:94:c8:30:21:ef:da:5d:27:ba:18:f0:2e:bb:f8:47:fb:
4b:c7:d3:43:b7:5d:31:31:fa:f3:88:26:bc:07:bb:35:db:99:
8a:07:86:1e:2f:9b:b4:9f:48:14:20:94:2d:dc:49:11:92:9d:
aa:20:ad:60:e1:3d:bf:27:61:bf:0e:45:29:c0:25:f6:f5:01:
a0:16:bf:ee:5e:c2:3a:98:dc:09:fa:93:f4:97:16:e4:98:0b:
31:4a:dd:85:38:16:72:6d:df:d6:58:07:fe:f6:15:1d:b3:ad:
9f:8a:b4:05:82:83:d6:a0:0f:8c:c9:86:50:42:d4:3e:30:3c:
55:62:5c:61:ee:30:e7:22:e1:d9:5d:07:db:a6:bb:84:4c:f0:
fb:90:4e:84:07:50:fb:76:59:85:80:23:75:a9:7f:ee:fb:58:
a6:72:68:d2:e2:19:77:f1:61:0d:52:29:a2:f9:39:1b:a8:51:
be:06:12:c6:f6:93:96:76:84:8a:f7:c5:8b:f4:13:d9:72:df:
dc:d6:2e:9a:80:a5:5a:04:73:2f:95:ef:55:5c:c2:82:68:c0:
5d:62:ff:5a:aa:92:7b:62:cf:d8:bf:7b:07:95:99:82:6b:51:
31:c3:32:7c:e5:61:f8:a7:00:49:19:4f:5b:37:66:54:f5:ef:
1f:4f:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:24 2025 by rpki-client