Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W0YY0taNe1bveFRkqY1hdYYFwOM.roa
File: W0YY0taNe1bveFRkqY1hdYYFwOM.roa (raw, json)
Hash identifier: XHcMI5eH+t6E/vnjH0jp9TsP7ROQZPc2TjTp+ezX2r8=
Subject key identifier: 5B:46:18:D2:D6:8D:7B:56:EF:78:54:64:A9:8D:61:75:86:05:C0:E3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521FC745C8F9F3465168EE2FC016913
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W0YY0taNe1bveFRkqY1hdYYFwOM.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199956
IP address blocks: 2a0e:97c0:850::/44 maxlen: 48
2a0e:b107:1db0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:74:5c:8f:9f:34:65:16:8e:e2:fc:01:69:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4618d2d68d7b56ef785464a98d61758605c0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:c1:ea:f5:23:48:28:33:68:69:eb:22:be:
1c:bd:db:cc:43:78:47:94:59:f0:9e:ba:8f:7e:9e:
a8:41:f7:84:a2:61:3b:86:c4:97:5d:aa:02:d7:0d:
93:65:71:28:f0:5f:51:da:4f:96:d5:fb:ff:13:46:
be:9e:09:b8:cc:83:80:6f:6c:3a:06:d6:a1:35:b8:
32:75:92:be:83:13:aa:06:c7:25:37:2f:4e:63:42:
18:a8:b0:99:d0:97:e6:63:76:b3:bb:03:49:2f:3f:
40:e8:96:e9:30:4c:d4:8d:6c:14:ec:94:29:fa:4e:
1b:b2:6a:71:36:79:d2:6d:54:cf:34:3a:39:b3:b0:
3a:02:10:21:aa:52:1d:30:81:47:39:47:9e:d2:b5:
d1:ab:ee:08:ea:74:3b:1f:ea:d5:3d:f3:ca:ff:da:
09:90:01:ee:19:ba:3c:26:b6:24:26:c9:72:39:a4:
84:c8:0b:e8:e0:60:23:56:8b:81:d9:43:1f:46:a1:
16:0d:7c:4d:66:ba:52:66:b7:30:87:6b:4e:f9:c2:
f8:f5:d7:9e:43:c4:a3:ba:c1:64:3e:af:b1:72:41:
c6:36:a0:88:2b:7d:ed:ad:4d:32:78:81:72:e9:ed:
df:c4:f9:c2:9c:8e:de:46:30:3c:be:7b:22:d4:d2:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:18:D2:D6:8D:7B:56:EF:78:54:64:A9:8D:61:75:86:05:C0:E3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W0YY0taNe1bveFRkqY1hdYYFwOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:850::/44
2a0e:b107:1db0::/44
Signature Algorithm: sha256WithRSAEncryption
0a:8d:71:65:e3:93:67:30:ac:c4:13:68:2f:e2:3c:0a:11:d3:
ba:eb:70:e9:e7:33:7d:a3:a3:ce:33:c3:e5:d7:52:3c:51:bb:
1c:e9:43:54:c5:8e:a3:01:b4:b4:21:b8:d5:4a:5d:8d:dc:f9:
19:12:c6:85:8d:27:05:16:53:72:64:2b:81:3c:ab:2c:28:72:
d9:4b:4f:da:fd:a4:7e:dd:41:da:df:45:df:30:1a:07:1e:d8:
26:22:8a:1f:53:2e:db:80:f5:6e:2f:94:70:33:33:02:96:61:
cf:ac:ee:d7:de:11:21:3e:b7:5d:5b:7d:03:c8:d7:9e:33:33:
54:35:98:f1:bb:5e:5c:81:57:40:83:62:f7:6a:eb:cf:26:3d:
b8:52:72:f7:d6:f0:96:68:a2:74:8e:b7:88:fe:a7:47:f4:e9:
b5:33:e5:d1:f0:0a:12:69:89:22:45:60:12:3e:1b:c4:cc:fb:
8a:49:2f:2b:73:7e:4e:7c:29:79:f4:37:cc:fa:62:90:df:f0:
9a:f5:36:fb:ed:4e:0d:a9:1a:2d:a9:f4:02:e5:84:d0:76:0d:
63:78:ca:47:28:74:d0:c6:6e:03:75:53:3e:26:9a:38:59:bb:
0c:ab:dc:6a:8c:2b:0f:c4:d6:45:1a:af:84:80:8d:f4:ae:fc:
4c:68:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:56:10 2025 by rpki-client