Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ofVvFGFW_-2xoaA9df-XjfT-e5g.roa
File: ofVvFGFW_-2xoaA9df-XjfT-e5g.roa (raw, json)
Hash identifier: 5/shXSKYzbf8kHfqmZ72Wx8b4fozkYIWG+FtexsghTY=
Subject key identifier: A1:F5:6F:14:61:56:FF:ED:B1:A1:A0:3D:75:FF:97:8D:F4:FE:7B:98
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C67B7C6C0B9223960C7A1EED46A4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ofVvFGFW_-2xoaA9df-XjfT-e5g.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:de01:140::/44 maxlen: 48
2a06:de01:141::/48 maxlen: 48
2a06:de01:142::/48 maxlen: 48
2a06:de01:143::/48 maxlen: 48
2a06:de01:144::/48 maxlen: 48
2a06:de01:145::/48 maxlen: 48
2a06:de03:3690::/48 maxlen: 48
2a06:de03:3691::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c6:7b:7c:6c:0b:92:23:96:0c:7a:1e:ed:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1f56f146156ffedb1a1a03d75ff978df4fe7b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:f9:29:34:c5:91:f2:6e:e8:36:2e:3b:64:
2d:35:b3:15:2a:2f:0c:51:c8:ee:01:14:5c:c9:55:
28:a2:e1:97:84:4d:ea:67:f0:cf:ab:9d:48:69:f5:
a4:74:f4:fe:82:93:d7:bf:69:65:05:78:cb:2a:09:
97:b3:e5:c6:14:b9:ca:9a:68:54:e4:fb:70:f0:25:
49:01:3e:d4:90:f4:1c:da:ca:4d:1f:08:76:ee:84:
9c:91:5e:22:c1:33:2d:99:ac:9c:29:46:4e:a7:21:
29:fc:7e:e2:83:d7:a0:8a:5a:86:8d:71:fb:84:48:
9a:ef:e5:43:2c:40:ab:a5:77:a8:bc:94:87:5b:0b:
a9:ad:95:63:b6:fe:07:a4:c8:98:9e:61:c8:a9:f6:
0a:37:29:4f:ff:1c:bb:f9:95:e8:8e:c5:fe:f3:99:
19:31:c7:71:e8:27:d2:2b:64:82:62:b1:9e:c6:d4:
67:79:63:cf:9c:f2:44:b4:f3:7b:13:26:c8:51:52:
48:f9:51:21:46:a3:6a:61:1f:57:c2:57:05:46:bc:
fd:7d:09:bf:57:9d:67:20:10:98:55:58:d6:5c:16:
3a:10:eb:50:2e:18:55:a1:11:38:60:e3:2a:64:f9:
e9:f2:b7:5d:bf:b9:1e:1d:e2:02:a6:12:0c:29:9e:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:6F:14:61:56:FF:ED:B1:A1:A0:3D:75:FF:97:8D:F4:FE:7B:98
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ofVvFGFW_-2xoaA9df-XjfT-e5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:140::/44
2a06:de03:3690::/47
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
3c:ca:60:9d:23:20:81:69:74:52:1f:8d:04:30:d0:1b:32:52:
99:50:54:eb:e9:5e:4b:02:d4:e9:ac:0d:ef:eb:b8:6b:af:fa:
a8:7f:3f:91:20:f8:4d:17:56:81:a7:9a:b3:24:a2:cc:67:62:
4f:53:36:f8:f7:bb:83:d6:d6:b2:4d:0f:1d:96:9d:db:cb:7c:
4f:c8:07:31:7a:97:3b:bd:89:fe:90:4b:6d:ab:9a:8e:32:da:
13:59:d6:90:ec:f6:cc:2d:b4:b9:7a:13:a2:4a:14:9e:c0:89:
b7:05:bf:ab:51:e5:5b:63:05:2d:27:a1:c0:cf:70:09:26:8b:
55:c6:3d:28:41:4e:3d:d6:21:ba:cb:62:d1:87:55:ee:4e:aa:
78:41:8b:0d:59:7b:c7:17:82:ae:20:b1:d2:d4:c3:0b:00:f4:
b3:30:60:bf:1c:33:0f:83:32:7f:58:3d:4a:43:15:b5:de:56:
54:7d:14:79:98:ee:4a:07:db:c4:58:f4:8c:b4:59:08:cb:91:
99:a1:4d:c6:ca:a5:9d:e7:6a:07:ce:70:5e:74:54:8e:08:16:
94:cc:c9:f6:b2:39:4c:44:06:c6:33:2d:36:40:ee:73:be:14:
57:31:24:28:f3:4f:f2:a2:40:7b:05:d4:89:d9:0f:1d:d0:55:
68:e8:9a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:26 2025 by rpki-client