Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/4GuL2X1E_SLrYnVSCwy_ST-59To.roa
File: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (raw, json)
Hash identifier: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=
Subject key identifier: E0:6B:8B:D9:7D:44:FD:22:EB:62:75:52:0B:0C:BF:49:3F:B9:F5:3A
Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial: 019427B5485FAEDC35CE48C96254DC6B30AF
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/4GuL2X1E_SLrYnVSCwy_ST-59To.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204901
IP address blocks: 2a10:a642:aa00::/40 maxlen: 48
2a10:a642:aa00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:48:5f:ae:dc:35:ce:48:c9:62:54:dc:6b:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e06b8bd97d44fd22eb6275520b0cbf493fb9f53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:6f:1f:b8:bd:d4:0c:4d:ce:e2:d0:59:e2:
4c:a3:60:e5:1d:d3:b9:3d:03:1f:c4:3e:e2:57:7e:
ff:9c:3a:b4:be:f0:33:6e:80:77:7c:52:1c:49:d9:
d5:e1:d9:03:b4:30:2d:eb:04:02:66:3d:fe:bd:b6:
3c:78:52:42:ec:52:c3:24:f2:87:eb:c6:f3:30:63:
aa:17:6b:f3:1f:cf:43:26:08:69:f8:55:0d:c6:72:
7b:8e:51:18:e2:a9:54:52:56:20:94:4e:c5:5f:6b:
c1:cb:55:df:32:76:6d:c7:ec:d1:10:09:af:40:a9:
07:b0:50:b5:97:c5:72:9f:20:c8:6a:4f:67:3d:68:
52:86:9f:6b:17:c8:60:e3:0b:4f:ec:46:96:2f:8c:
19:1b:f7:ae:bb:ba:b4:37:17:a6:63:c9:7f:21:75:
2f:4f:c0:9e:27:1a:a9:37:79:80:a0:4a:86:07:ba:
84:2d:a9:c7:b3:31:53:21:9c:04:3e:13:d9:5a:f7:
4c:c0:d9:66:12:e8:56:7b:e3:81:1c:59:49:6d:e7:
fc:3b:12:34:ec:2e:9a:7f:23:37:bc:91:b6:da:16:
7c:7d:95:d3:9b:28:7a:9e:d5:b2:00:24:c8:ef:d2:
b8:a1:60:1a:34:17:11:0e:b0:e5:94:e8:02:00:01:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:8B:D9:7D:44:FD:22:EB:62:75:52:0B:0C:BF:49:3F:B9:F5:3A
X509v3 Authority Key Identifier:
keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/4GuL2X1E_SLrYnVSCwy_ST-59To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a642:aa00::/40
Signature Algorithm: sha256WithRSAEncryption
3f:61:d2:c5:84:4d:fe:d9:d4:91:2a:d7:d4:c2:6e:7f:b8:9f:
5c:84:2e:a6:1f:23:1c:29:cd:d3:31:63:ac:4b:35:91:a7:66:
8c:78:33:24:c3:b5:9f:4a:73:2f:0c:c3:c3:b1:1f:43:db:59:
68:eb:ee:d0:de:a9:17:4e:dc:f1:be:a8:19:e1:4d:ea:68:ef:
da:84:d7:8e:5d:d9:d2:e0:44:16:9b:69:3a:67:34:9d:7a:73:
17:67:af:37:b5:da:c7:9c:d8:ae:9d:c0:86:7f:36:59:7a:32:
48:47:8f:ca:f1:95:dd:18:c4:58:f6:dc:8f:f8:ad:ec:12:40:
3d:44:a4:34:4b:14:5e:6a:3f:ee:65:1f:c1:5c:83:67:bd:9e:
98:df:24:2e:ed:81:04:5f:b5:b7:01:d9:ec:c0:e7:e2:dd:0c:
1d:2a:b2:c9:3b:09:7e:89:49:e8:8d:8b:87:92:09:d2:0c:2d:
b0:e2:23:04:b4:e2:5f:29:fd:85:a9:99:ba:f5:7e:8a:94:45:
14:25:fd:65:f5:c5:46:af:a4:13:4f:7f:c5:b6:d2:f2:35:60:
7f:85:59:6d:05:b6:ac:0b:5e:89:44:24:b5:08:e7:50:38:b3:
00:b2:9d:92:e9:2c:cc:7c:49:d4:d3:b7:25:f1:3c:ab:ac:7a:
72:53:f0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:57:51 2025 by rpki-client