Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0xNXD4StWOFjmopRk-suiZT5d68.roa
File: 0xNXD4StWOFjmopRk-suiZT5d68.roa (raw, json)
Hash identifier: C21yemS9uvuLDV8MpUgpNYgJtkteE6WGYVf86wDZLZY=
Subject key identifier: D3:13:57:0F:84:AD:58:E1:63:9A:8A:51:93:EB:2E:89:94:F9:77:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227B229AC6FC96A2A8797F8AB14E26
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0xNXD4StWOFjmopRk-suiZT5d68.roa
Signing time: Thu 02 Jan 2025 03:50:04 +0000
ROA not before: Thu 02 Jan 2025 03:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214383
IP address blocks: 2a0e:97c0:a80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7b:22:9a:c6:fc:96:a2:a8:79:7f:8a:b1:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d313570f84ad58e1639a8a5193eb2e8994f977af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:43:4a:c0:c4:f1:83:c3:2a:53:bd:2e:cb:
30:06:0f:df:a9:50:c2:e1:05:7e:c7:31:5a:7a:dd:
8d:5d:bc:54:2e:22:f5:b5:72:4d:66:c6:51:bd:27:
c1:03:fc:f2:22:18:d7:4c:0a:01:53:48:e5:e2:7d:
07:e9:3c:d8:66:90:f2:04:cd:03:de:4f:17:89:44:
ed:b0:9c:58:0d:42:ab:39:97:41:ee:43:b6:f4:b1:
54:ac:d1:9c:c1:11:6c:ed:75:e7:74:20:16:43:2d:
0c:8c:ec:fa:02:25:18:ea:a9:d6:e8:d6:2f:0f:61:
27:b3:f4:59:68:1b:01:44:85:9a:f2:cd:ed:31:0e:
77:09:2f:65:1e:20:8f:50:f8:a9:63:ce:37:a6:c6:
73:74:79:ae:d1:1b:5e:ae:be:08:9e:e5:f8:a8:8b:
dd:e0:5e:bb:b8:04:50:88:cc:d5:53:64:74:93:ca:
ea:82:f9:ee:f9:39:5c:b8:79:9a:b7:79:0b:45:e5:
f5:a4:7b:ee:6c:b0:d7:34:c3:91:95:07:12:84:41:
77:51:39:b7:c2:74:42:08:ee:78:2e:f1:8d:d0:20:
e5:a4:64:f6:38:4b:28:94:c2:58:87:1f:53:6a:c4:
88:55:96:d5:85:1a:66:ee:5f:3f:5d:6c:86:fc:b2:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:13:57:0F:84:AD:58:E1:63:9A:8A:51:93:EB:2E:89:94:F9:77:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0xNXD4StWOFjmopRk-suiZT5d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a80::/44
Signature Algorithm: sha256WithRSAEncryption
24:87:17:74:f7:cc:62:74:95:7a:c8:35:11:7f:cc:36:71:96:
5a:18:3f:73:fd:81:17:b1:ce:be:bc:ca:e8:61:3e:f3:5c:5e:
a7:fd:e7:a9:7e:80:fd:7d:ed:4a:37:8e:78:36:44:40:b5:03:
de:26:56:15:b7:b5:8c:4e:17:6a:61:ae:87:bf:f0:dc:e0:49:
f7:2e:97:78:c0:9e:e8:37:5b:48:6d:48:42:e5:79:b1:7d:ee:
ad:4e:5c:3e:6b:72:07:f1:8c:ea:1c:66:a1:89:f7:3c:6d:a3:
11:2b:d1:2e:fc:e1:00:8b:7b:c9:14:fb:eb:82:55:51:be:9b:
d6:58:1d:a3:62:97:c4:49:6e:00:5f:fa:35:ba:17:98:76:81:
b4:5f:ac:f9:b7:67:c6:25:4a:28:bd:bb:60:fc:0a:ce:04:7a:
1d:09:e8:53:f9:64:9b:55:d4:88:b0:56:6c:64:91:56:ee:cb:
58:88:23:64:ae:cf:b1:24:cc:35:6c:54:a6:64:7e:a2:1f:d7:
3b:5a:a9:86:d7:d9:b9:98:e6:aa:8e:35:8d:3d:48:fc:14:2f:
a2:f6:0b:22:4c:94:68:e2:e8:f2:65:eb:aa:1a:56:9d:89:19:
a5:58:16:3e:ca:bf:84:bd:a1:13:c7:a8:73:7b:8d:4b:33:6a:
de:57:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:52:10 2025 by rpki-client on console.sobornost.net