Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zMBA13I42hX4cXfRgX04dvubdCE.roa
File: zMBA13I42hX4cXfRgX04dvubdCE.roa (raw, json)
Hash identifier: gP8F+AVbbpJLCCaFiJggRKJsUDlyet/q7L1GS3/8WRs=
Subject key identifier: CC:C0:40:D7:72:38:DA:15:F8:71:77:D1:81:7D:38:76:FB:9B:74:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D8734DE392A9B4219426BAA24999
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zMBA13I42hX4cXfRgX04dvubdCE.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52177
IP address blocks: 2a10:2f00:136::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d8:73:4d:e3:92:a9:b4:21:94:26:ba:a2:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc040d77238da15f87177d1817d3876fb9b7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:25:6e:17:9c:0e:f8:d8:24:3b:24:df:5a:
59:d3:52:5f:c2:34:69:52:20:10:4b:c0:3b:03:51:
6e:12:2f:f9:c4:69:b7:09:d9:21:d9:25:e0:6f:5a:
65:13:67:db:45:c2:51:03:fc:e2:63:b5:20:4d:cc:
59:42:71:98:1b:49:48:9f:ac:02:c9:1b:b9:b8:6d:
c0:93:5b:3b:11:5b:93:1c:fe:e1:e6:69:d4:17:1d:
60:d2:10:6f:ce:8c:29:47:f7:31:f5:2c:e1:62:57:
85:e5:8f:11:a2:98:58:ac:dc:15:18:c4:b1:5a:19:
6b:32:c7:0a:25:72:fc:c5:9e:1d:ef:f5:e9:b5:eb:
b3:ca:2e:6e:be:59:33:21:d4:a4:dc:67:c1:c9:49:
b3:5c:d8:f0:f4:52:5c:70:df:60:8e:12:4e:b9:1c:
75:85:6a:74:fd:bc:03:ac:7a:00:1c:19:55:18:3f:
e1:ac:74:5a:12:5d:db:82:cd:7f:cd:e2:59:50:35:
07:e6:c6:4a:86:18:dc:40:73:b8:87:fe:90:97:41:
23:f1:ce:56:9f:a8:2c:fa:53:1b:38:ca:b7:23:02:
d8:60:4e:9d:b1:6e:bc:cc:bb:48:68:6a:f1:b7:2f:
06:b5:e6:49:6e:8f:b0:02:58:1e:be:0a:c0:55:5b:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:40:D7:72:38:DA:15:F8:71:77:D1:81:7D:38:76:FB:9B:74:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zMBA13I42hX4cXfRgX04dvubdCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:136::/48
Signature Algorithm: sha256WithRSAEncryption
51:33:38:24:7e:a9:68:b1:72:37:03:fa:88:3f:df:0a:99:71:
41:9c:c5:3a:d8:78:21:36:32:9b:e8:d8:fe:6c:f8:36:65:62:
db:62:ef:14:51:28:02:e2:d5:17:7d:39:b1:a8:1c:a6:4f:5b:
1c:fa:18:aa:f1:e2:de:c4:8f:81:37:e1:76:be:98:d0:8c:bc:
99:5a:6f:2d:eb:93:ee:58:6e:f8:ce:16:39:d4:89:ac:34:5a:
70:ca:39:a7:2a:4a:77:0c:78:0f:07:05:db:54:12:7b:eb:18:
e7:66:24:70:48:c0:30:27:a2:3c:66:40:2c:30:a4:9a:c6:b4:
25:85:f3:d0:92:49:fc:2a:2c:42:b1:cd:9a:84:66:e0:4d:8d:
00:f6:1f:ac:a7:c1:0f:cc:d0:9d:3f:3a:a6:8c:1e:b9:ff:1f:
92:97:88:7f:43:20:ab:3d:45:95:ee:06:31:83:5a:4d:c5:ad:
68:a8:bc:fa:d5:d0:f4:73:5a:95:4e:32:94:18:76:bd:fe:fe:
87:bd:f3:25:17:aa:9c:98:93:f3:4f:92:e7:93:aa:b7:d4:16:
7a:fa:eb:45:87:06:d0:44:ff:1c:f2:c0:0f:1a:72:ce:eb:0c:
55:07:48:1b:62:80:41:1c:f2:e7:c2:58:1d:d6:02:70:0d:d1:
0a:09:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:46 2025 by rpki-client