Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NYC86BBuEJcyVLt5_VRehOd7hug.roa
File: NYC86BBuEJcyVLt5_VRehOd7hug.roa (raw, json)
Hash identifier: m7PSb81ZDGrYxDgDJu51cqbSBphKmTOCScI5P4IhrtI=
Subject key identifier: 35:80:BC:E8:10:6E:10:97:32:54:BB:79:FD:54:5E:84:E7:7B:86:E8
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D76351E62930544E3B868573608145
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NYC86BBuEJcyVLt5_VRehOd7hug.roa
Signing time: Wed 01 Jan 2025 21:48:25 +0000
ROA not before: Wed 01 Jan 2025 21:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51699
IP address blocks: 5.1.64.0/24 maxlen: 24
2a07:6fc0:5::/48 maxlen: 48
2a0f:b80:4::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:63:51:e6:29:30:54:4e:3b:86:85:73:60:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3580bce8106e10973254bb79fd545e84e77b86e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:75:c3:dc:83:8e:dc:95:a9:8e:28:40:9f:
2a:4f:33:d0:93:bb:fc:75:73:1b:39:6b:69:a6:7a:
5e:ae:a7:25:74:21:68:37:c5:21:89:a4:dc:d8:d3:
2b:77:2d:d0:d6:20:1e:28:4c:c6:89:b4:ba:43:ee:
16:2b:27:f7:9c:ac:a4:17:67:b0:0e:e2:1e:39:76:
29:0b:83:66:54:64:20:a3:55:fa:61:b8:71:d1:40:
81:4d:21:2d:e6:0b:b3:78:a0:af:66:f8:ed:0d:72:
52:7e:e8:32:c2:e5:e0:b7:78:7f:0b:7e:ce:9a:44:
10:eb:42:f8:a0:d7:df:65:71:6a:25:1f:20:18:c3:
57:41:08:8e:7e:a6:04:14:a2:a9:2d:b8:6a:e9:91:
fc:6e:c1:1c:c8:92:c0:0d:7f:aa:f2:77:a1:b0:97:
32:0c:a9:fc:b5:19:96:62:06:a8:c0:42:ad:59:58:
93:c5:d4:0c:bc:80:ed:3b:e1:3c:7b:7a:4b:ae:a9:
eb:97:ce:bb:17:c0:81:92:67:a7:52:ad:6e:28:9b:
51:bc:90:2e:eb:ee:97:2d:02:21:77:1c:5e:d6:3c:
c1:16:45:97:f7:39:bf:46:49:57:2b:0d:0b:3e:93:
c7:26:08:d9:29:87:f3:39:fa:01:c9:7f:3b:0f:03:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:80:BC:E8:10:6E:10:97:32:54:BB:79:FD:54:5E:84:E7:7B:86:E8
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NYC86BBuEJcyVLt5_VRehOd7hug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.64.0/24
IPv6:
2a07:6fc0:5::/48
2a0f:b80:4::/46
Signature Algorithm: sha256WithRSAEncryption
99:dd:49:26:e5:42:91:48:20:cc:51:89:d2:88:44:c1:9c:6e:
df:59:5b:a7:5e:c7:d4:b6:3d:e9:5b:2c:2c:49:c4:6a:4c:19:
a4:ca:ef:89:1d:98:b0:1a:33:14:46:2d:cc:8b:88:87:8c:25:
af:ac:94:1c:46:97:8d:ab:0a:4c:4b:39:a7:3b:3c:36:e1:95:
1e:0e:13:d5:17:dc:bf:92:ef:4d:0d:a9:2d:a8:0e:e2:97:67:
b1:fa:00:19:e4:0b:b5:1c:85:d1:60:0c:b9:73:75:51:20:11:
84:f5:cb:bc:25:ef:07:e7:87:5a:c7:db:55:af:52:01:29:72:
23:be:5f:ee:c3:77:c4:3f:28:33:32:2b:bd:11:94:f7:10:4d:
b5:b1:af:99:c8:e3:b1:3d:c5:a8:61:61:ca:3e:79:46:cd:3e:
a7:e4:30:75:49:84:06:1e:3a:32:f0:c7:8a:c8:4f:8f:cd:d5:
95:35:04:07:d2:d8:61:c4:85:08:8c:ab:4e:a4:33:45:0f:e9:
7d:e3:dc:fe:7e:11:85:6e:b5:78:76:ec:e0:df:43:84:f9:c4:
ea:0d:bd:d4:18:71:db:ca:87:02:b2:11:b1:7f:5c:df:e1:da:
79:c0:1c:16:85:68:88:d5:78:7d:72:ce:fe:98:a1:e3:34:97:
65:f1:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:13 2025 by rpki-client