Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z6jcb9eS-n45wvTxFFlJ8zKmtNo.roa
File: z6jcb9eS-n45wvTxFFlJ8zKmtNo.roa (raw, json)
Hash identifier: j1PrHvS6jdR2RytQqfQMb2ifrau6mgGClLEjUF+APto=
Subject key identifier: CF:A8:DC:6F:D7:92:FA:7E:39:C2:F4:F1:14:59:49:F3:32:A6:B4:DA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227C77DB1C8675FE5F8652EDD9873C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z6jcb9eS-n45wvTxFFlJ8zKmtNo.roa
Signing time: Thu 02 Jan 2025 03:50:04 +0000
ROA not before: Thu 02 Jan 2025 03:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214527
IP address blocks: 2a10:ccc5:5550::/48 maxlen: 48
2a10:ccc5:5555::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7c:77:db:1c:86:75:fe:5f:86:52:ed:d9:87:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa8dc6fd792fa7e39c2f4f1145949f332a6b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:eb:61:3a:f8:d4:0d:8c:ca:2f:eb:27:32:
af:a3:79:b5:ef:18:44:f9:d0:39:16:f2:40:c1:aa:
14:98:fc:9c:3f:81:76:d5:c7:b1:fb:76:51:67:3d:
eb:ba:96:42:f4:2c:08:44:1b:64:76:ce:b6:04:26:
66:f6:4e:7c:d4:8b:32:f9:e5:fd:de:cc:a6:4d:b1:
9d:14:4c:b1:06:43:62:c2:12:5e:ca:9a:c2:db:ad:
c8:e7:20:25:09:e5:fc:5f:08:b7:0b:1d:93:dd:bc:
98:31:1f:49:75:4b:f5:6a:e8:3d:36:6c:f6:07:3d:
d7:60:48:b9:fc:2e:f1:7b:b0:67:6c:17:2a:6b:83:
b8:6c:36:43:2a:3a:7b:b5:e3:d9:6b:a6:87:8a:2e:
d0:d3:7a:bb:18:95:ef:9b:4e:45:57:0d:ac:46:c3:
1a:5f:de:a5:2b:d6:80:d2:d9:65:32:a4:1f:5d:17:
96:eb:f4:83:fb:d5:b8:14:d9:bc:97:1b:f4:94:8f:
51:84:d5:a0:5b:b9:99:79:5b:7f:ac:18:4d:01:14:
ec:20:db:6e:c0:81:e7:23:e4:8b:27:d3:02:a5:2f:
af:62:5f:2d:8b:a3:ee:68:3b:fe:35:49:de:63:c8:
db:73:92:d5:d6:c2:05:cb:d4:a1:fd:7e:82:31:f3:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:DC:6F:D7:92:FA:7E:39:C2:F4:F1:14:59:49:F3:32:A6:B4:DA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z6jcb9eS-n45wvTxFFlJ8zKmtNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc5:5550::/48
2a10:ccc5:5555::/48
Signature Algorithm: sha256WithRSAEncryption
91:8d:df:da:db:c3:fe:ec:dc:98:9f:20:80:ae:ae:44:88:87:
c9:9e:3c:56:4f:2b:4e:a3:fc:1d:3e:99:8f:95:8f:1d:2d:03:
e4:00:d9:69:e3:e8:f3:15:1a:f4:58:ee:35:33:ae:81:97:29:
a6:30:51:2c:27:4b:fc:b1:c7:bd:40:98:da:14:46:67:32:20:
23:88:41:e8:7e:f2:8b:07:1a:5f:3a:33:dd:7f:2a:02:97:06:
b2:23:1a:2c:27:be:2a:4c:35:17:e4:a3:04:0d:c1:78:87:81:
1f:00:bc:30:04:22:8a:c8:95:d6:57:88:a6:2a:89:2d:17:68:
16:be:ec:a9:44:77:f1:a1:81:dd:17:1d:35:3f:87:7d:bc:4b:
34:f0:8a:b0:ea:9a:e8:63:0e:95:e3:82:09:09:01:6c:8f:1b:
63:1b:3d:eb:8a:f8:af:0e:cc:9f:80:f7:a2:d4:37:9c:97:42:
8b:73:df:3f:2c:78:55:22:94:78:dd:31:88:7a:e1:2c:ae:5c:
b1:35:c6:bb:bd:58:c7:42:ec:e9:7f:a7:ad:34:95:1c:bd:02:
bc:74:25:54:7f:5a:aa:18:55:4f:0b:17:07:bc:67:4d:87:ec:
38:98:d2:f5:d0:c1:5e:be:1c:12:8c:08:34:15:00:a1:10:c7:
4d:db:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:24 2025 by rpki-client