Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7PJyIGONOdcewJ4VGoWBHU9fak8.roa
File: 7PJyIGONOdcewJ4VGoWBHU9fak8.roa (raw, json)
Hash identifier: ZUZA17ygSBqsYYyFVPram+cHyul+F46EiTHBB+ik55c=
Subject key identifier: EC:F2:72:20:63:8D:39:D7:1E:C0:9E:15:1A:85:81:1D:4F:5F:6A:4F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522921F216E93825958A775388C9CEE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7PJyIGONOdcewJ4VGoWBHU9fak8.roa
Signing time: Thu 02 Jan 2025 03:50:10 +0000
ROA not before: Thu 02 Jan 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215855
IP address blocks: 2a0e:97c0:e60::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:92:1f:21:6e:93:82:59:58:a7:75:38:8c:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecf27220638d39d71ec09e151a85811d4f5f6a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:9e:1d:6d:cd:99:2e:52:01:59:3e:61:59:
e0:19:49:fc:3c:ab:e6:85:8b:f3:20:01:4e:d3:b9:
8c:5f:70:f4:56:dc:a4:f0:26:f8:64:da:bc:5b:e8:
7a:99:9d:33:26:1c:79:c4:16:62:87:91:b7:e0:79:
d9:7d:f4:f9:3c:81:0b:e6:01:09:cb:60:ad:2b:9d:
fc:f5:40:f1:68:70:2e:c1:a4:68:d0:25:97:08:89:
2f:a7:09:5d:8a:12:c8:73:d4:9b:e3:71:56:1d:cb:
10:cd:dc:41:76:ce:7d:a7:fb:59:04:d8:4b:dc:9b:
23:07:87:15:13:00:37:f2:95:6c:aa:8e:8f:b2:cd:
be:7f:a6:8e:53:5f:71:0b:a6:f2:e4:b4:1f:7c:c7:
fb:60:b1:c5:82:48:b9:16:82:79:0a:05:ca:ed:93:
0a:16:dd:ce:c0:b2:f9:39:2a:98:20:26:cc:31:93:
26:2d:55:49:2c:75:7e:68:92:e5:e5:e0:98:9d:d4:
2e:79:b4:58:f9:39:c9:6a:0a:82:58:f8:e7:b0:22:
70:ad:91:65:08:bd:23:5e:29:91:b3:6c:91:1c:cd:
2c:9b:b9:5e:7e:01:a7:ed:e9:c3:02:5d:03:07:52:
9f:16:00:22:e5:44:fd:66:31:4a:90:c0:0c:81:6b:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:72:20:63:8D:39:D7:1E:C0:9E:15:1A:85:81:1D:4F:5F:6A:4F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7PJyIGONOdcewJ4VGoWBHU9fak8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e60::/44
Signature Algorithm: sha256WithRSAEncryption
27:05:5b:80:40:14:8a:66:32:ac:7d:60:2e:62:d5:e4:65:55:
26:f5:98:59:a9:3b:ce:69:d3:0d:d1:a1:46:09:e6:8a:27:c2:
c1:20:f6:d2:7a:a6:89:6d:f2:86:07:e7:e2:1e:a7:44:1b:92:
6a:f4:59:29:a7:e4:74:23:b4:4c:60:6b:63:7c:4a:6d:53:81:
6a:d0:9e:ff:a2:7e:42:2f:80:e1:49:8e:62:48:1a:f0:c8:82:
49:81:55:48:0f:53:b5:bf:87:46:a7:d1:a6:d7:f0:56:dc:68:
95:47:43:87:8b:ea:82:32:5b:cf:65:dc:6d:93:a8:46:9c:cf:
fd:c5:99:16:6a:b9:fb:f1:92:94:15:42:3d:e7:cb:ca:83:33:
57:0c:21:81:09:2f:69:8a:7b:97:87:db:3c:9d:e7:76:0a:2e:
bf:fe:8d:59:1c:44:29:4c:0d:86:cc:b4:ec:39:72:51:79:95:
3a:42:48:d7:93:a0:4d:72:e6:68:c1:6e:2a:fc:c8:08:b5:e0:
62:b3:3a:c2:a8:ca:1a:31:3d:d4:91:aa:ae:e5:2f:5e:9c:39:
69:3d:21:70:d9:2a:e4:5e:25:58:6d:27:bd:f8:e7:28:ad:ce:
a8:fa:97:49:7e:bc:b6:40:9e:66:de:7a:57:c7:28:b3:f8:e1:
35:4c:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:31:27 2025 by rpki-client