Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_S1HFXREVi-_Hx5mUEzdkbvj-68.roa
File: _S1HFXREVi-_Hx5mUEzdkbvj-68.roa (raw, json)
Hash identifier: MXyqV3EBRYDbIAxVjVnwlbxw1wOrc8WmRyq0xi26sVo=
Subject key identifier: FD:2D:47:15:74:44:56:2F:BF:1F:1E:66:50:4C:DD:91:BB:E3:FB:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225745216B7F6645D50032872F976B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_S1HFXREVi-_Hx5mUEzdkbvj-68.roa
Signing time: Thu 02 Jan 2025 03:49:55 +0000
ROA not before: Thu 02 Jan 2025 03:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211840
IP address blocks: 2a0e:97c0:1b0::/48 maxlen: 48
2a0e:97c0:1b2::/48 maxlen: 48
2a0e:97c0:1ba::/47 maxlen: 48
2a0e:97c0:1bc::/48 maxlen: 48
2a0e:97c0:1bd::/48 maxlen: 48
2a0e:b107:861::/48 maxlen: 48
2a0e:b107:862::/48 maxlen: 48
2a0e:b107:86c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:57:45:21:6b:7f:66:45:d5:00:32:87:2f:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd2d47157444562fbf1f1e66504cdd91bbe3fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:98:31:19:ea:3a:ec:ea:00:8a:ec:4b:a9:
6a:ed:2c:0e:38:6f:f4:c4:bc:e3:38:09:08:23:2c:
b6:96:0f:9e:c4:13:f7:fd:ae:cd:fb:f1:90:d6:0a:
32:13:e8:fc:5e:fa:4c:89:a1:49:b0:02:2e:80:8f:
2e:a8:0f:df:d5:42:97:6c:3e:39:46:70:f7:28:0f:
dc:f1:64:40:7d:1f:f1:aa:89:f0:ff:4d:20:e1:84:
75:a7:81:b1:fc:49:2f:c1:9e:78:26:cf:78:8d:5a:
f5:5c:14:e5:1b:9f:91:1f:ae:62:12:18:00:d2:5f:
16:5c:64:47:a0:c3:67:d1:04:7b:bc:6f:41:c9:5c:
f9:a8:28:60:7c:33:13:1c:99:e4:6b:59:2b:b5:a4:
d3:96:f2:cc:2b:39:1e:73:f1:ac:fa:65:c3:52:ea:
12:84:ef:54:87:39:94:67:a3:a8:65:8c:b8:81:dc:
18:27:f4:4f:69:e5:69:52:d0:61:f4:f0:48:68:0e:
8f:22:87:2a:cf:59:81:60:21:49:3f:59:28:e1:9b:
d8:bc:bb:1a:d2:6c:06:01:cd:f8:57:59:b2:57:c8:
a4:53:b5:72:f5:ac:c0:10:f7:db:98:ff:32:2a:f0:
c6:50:ac:e4:79:f1:e0:d4:b8:00:8c:78:79:4c:b0:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:47:15:74:44:56:2F:BF:1F:1E:66:50:4C:DD:91:BB:E3:FB:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_S1HFXREVi-_Hx5mUEzdkbvj-68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1b0::/48
2a0e:97c0:1b2::/48
2a0e:97c0:1ba::-2a0e:97c0:1bd:ffff:ffff:ffff:ffff:ffff
2a0e:b107:861::-2a0e:b107:862:ffff:ffff:ffff:ffff:ffff
2a0e:b107:86c::/48
Signature Algorithm: sha256WithRSAEncryption
2d:5e:86:f1:ab:1e:33:e0:e4:3a:47:3c:92:9f:22:0f:6d:cd:
5a:c0:ce:9b:5e:ed:88:f3:c6:04:14:20:5b:4d:2d:11:f2:10:
bb:cc:a6:62:61:e8:37:82:13:86:2d:20:c7:0e:c8:46:75:a5:
2b:f1:f5:96:54:2d:08:aa:39:32:d8:ec:37:38:32:09:74:6b:
6c:32:99:ea:6f:e2:29:f3:b8:7c:35:b4:19:1b:8a:c5:ae:9e:
e1:89:6a:0c:7a:ab:47:2c:2c:9d:a0:c2:01:69:0f:1e:f3:05:
8a:1c:7e:b5:f2:bd:6a:9b:a2:79:01:73:07:d6:d1:f7:c9:2d:
19:33:38:17:63:0b:f2:29:82:cb:dd:c8:9a:1d:a8:85:2e:63:
1d:2b:08:99:09:13:83:67:db:21:37:bb:6a:e3:7e:87:cf:dc:
fb:bb:0b:ed:2f:f8:c9:0b:03:03:26:1a:ec:bf:f0:81:5e:c6:
30:50:b2:f9:49:f6:b7:4a:34:9d:cd:11:c4:86:5a:39:50:96:
56:7c:92:58:4d:07:f9:af:b8:a0:54:8e:df:07:e3:71:f4:73:
80:00:f9:84:e7:0b:f1:50:c5:cc:11:ca:49:3a:50:26:aa:36:
23:0a:af:b2:f8:f4:4f:97:98:a9:05:3a:3d:e4:a6:3f:bc:28:
74:2f:94:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:51 2025 by rpki-client