Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y4NvqiQWf-khQ3PNlaMKnpUsxZ8.roa
File: y4NvqiQWf-khQ3PNlaMKnpUsxZ8.roa (raw, json)
Hash identifier: dWeCkbbDyZWFAM7/hf2/rzRZ/eMLkvKysu944J+qrdE=
Subject key identifier: CB:83:6F:AA:24:16:7F:E9:21:43:73:CD:95:A3:0A:9E:95:2C:C5:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521F525767777FEEECA0063E3A0925C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y4NvqiQWf-khQ3PNlaMKnpUsxZ8.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198219
IP address blocks: 2a0e:97c0:ab0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f5:25:76:77:77:fe:ee:ca:00:63:e3:a0:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb836faa24167fe9214373cd95a30a9e952cc59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:cd:56:6c:f4:08:3e:d3:b4:90:06:85:a9:
26:91:a7:77:02:57:f0:88:a8:0e:97:53:3d:b5:3b:
ed:63:a9:3d:79:e6:64:a8:3b:00:ae:df:8f:b7:53:
27:4f:67:eb:f0:3b:18:ea:8c:a4:c6:0d:b5:dc:7a:
9a:83:74:1b:3e:3d:66:07:b5:ad:fa:24:9f:01:47:
27:2d:1f:4e:93:12:cc:99:56:c0:86:f1:02:83:60:
33:fc:87:51:fe:66:c6:62:4e:32:52:3c:23:e6:14:
a1:b4:44:7b:97:91:dd:b2:d4:f5:b0:f0:7c:e1:d4:
0b:b8:48:8f:c2:c1:00:73:0c:5b:5e:40:d1:f2:c2:
83:97:cb:80:3e:10:a1:80:c0:7a:63:27:c1:9c:b6:
d1:8f:c3:48:d4:57:96:9c:33:2f:e0:0b:e9:d6:a2:
38:f7:7d:35:21:69:54:7c:13:7b:a8:6e:0b:b3:b7:
73:8c:35:3e:96:70:7f:e2:75:36:f0:45:b0:da:b8:
c5:6f:4f:f1:5a:8a:31:2c:0a:6e:89:ef:78:78:35:
f0:d5:6d:f2:ab:ec:b1:5c:ea:29:a9:86:dd:72:92:
e0:25:74:0e:83:eb:3f:45:1f:bb:d6:a1:a1:9e:2d:
7e:f2:83:d3:90:7c:d7:99:c9:ed:38:c5:e4:98:98:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:6F:AA:24:16:7F:E9:21:43:73:CD:95:A3:0A:9E:95:2C:C5:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/y4NvqiQWf-khQ3PNlaMKnpUsxZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ab0::/44
Signature Algorithm: sha256WithRSAEncryption
a3:a8:9f:a3:dc:12:bc:ae:b1:23:3d:fa:6d:13:4e:3c:3b:d1:
4a:95:f1:69:95:b3:3e:b6:ea:bd:fa:81:3a:9c:9f:ea:50:bc:
49:3a:fc:71:c1:52:c0:b4:88:04:3d:26:1a:00:48:e4:f1:05:
e5:c4:c0:b8:98:01:95:64:84:d5:bd:e8:e8:97:87:aa:64:b4:
73:56:40:1a:18:02:d8:21:b3:8c:1e:0c:42:aa:4c:59:ec:24:
dd:1a:be:60:45:c4:3c:7f:3b:96:30:f2:4a:e3:3c:9d:b7:d3:
87:94:76:29:72:55:96:76:c4:60:5d:f8:95:17:e5:c6:7b:82:
b9:13:e3:44:18:e3:c4:38:9f:a1:37:50:64:29:f1:56:72:66:
c3:3c:e0:e4:cc:9a:94:0e:25:e2:d0:bb:b6:74:af:4a:88:c6:
6c:1f:00:b3:81:04:1d:e5:9c:39:75:ca:bf:17:3b:dd:02:3b:
2b:be:80:0c:0c:65:25:26:23:ca:9f:e2:2b:ac:a9:d9:ac:c2:
9d:64:88:42:df:c0:5a:44:23:ce:03:8b:8c:bf:1c:39:fc:0b:
d5:c7:0c:f0:6c:4d:39:57:ee:ce:30:a7:7c:ff:fe:08:93:ca:
a0:13:0e:dd:df:20:e0:35:63:c7:59:c2:68:02:33:08:c1:5f:
46:cb:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:40 2025 by rpki-client