Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/3vuRA4bTal1NGJUpBAq-8NtD-5I.roa
File: 3vuRA4bTal1NGJUpBAq-8NtD-5I.roa (raw, json)
Hash identifier: aFbO8zmhgTjPywC6BROXxsCZP8KWB1oTo6RnronHG4c=
Subject key identifier: DE:FB:91:03:86:D3:6A:5D:4D:18:95:29:04:0A:BE:F0:DB:43:FB:92
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 018803A8BA7C26D4052A79E43620B9C50E46
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/3vuRA4bTal1NGJUpBAq-8NtD-5I.roa
Signing time: Wed 10 May 2023 03:16:09 +0000
ROA not before: Wed 10 May 2023 03:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198924
IP address blocks: 2a12:f8c3:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:a8:ba:7c:26:d4:05:2a:79:e4:36:20:b9:c5:0e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: May 10 03:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=defb910386d36a5d4d189529040abef0db43fb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:1b:2b:4e:d6:b3:fb:e9:61:8a:b8:b9:51:
a5:85:08:29:ef:0b:40:19:da:dc:05:c3:2e:39:bf:
59:71:b2:06:c1:36:ed:07:97:fc:cd:7a:e1:c9:44:
ff:29:92:e9:8c:7e:49:cb:13:90:da:70:db:aa:bd:
a6:dc:3f:b8:90:d2:05:cd:40:a0:f7:34:d0:42:81:
10:65:f4:61:cb:e4:a9:e0:0c:c2:46:8a:61:eb:07:
f4:22:c1:8e:59:56:8a:3b:43:38:81:01:78:96:c5:
3c:b7:c8:0b:4d:5d:e9:bb:70:4e:ac:db:91:42:b5:
38:37:13:d9:19:d5:b8:2d:9e:37:4b:e3:85:ac:59:
82:8e:75:58:94:20:4d:2e:55:b1:df:d0:b2:58:10:
ba:c1:1b:bb:4b:1d:39:47:cf:2c:d2:84:2e:95:51:
a5:81:54:7a:75:e1:f4:43:d2:2f:54:cb:d1:fe:e5:
b9:65:e7:49:5d:9b:c9:b1:90:84:47:41:23:d1:13:
e6:bd:f1:41:2b:cd:28:8b:3e:4d:26:4c:24:84:ce:
81:4f:4c:b0:a3:a0:47:67:15:3a:cd:6f:42:2c:40:
44:f0:d0:1a:e5:2a:bf:18:b0:41:a3:24:dd:03:79:
c3:9f:78:dc:7a:1f:38:8d:c1:0c:a5:1d:77:96:4c:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:91:03:86:D3:6A:5D:4D:18:95:29:04:0A:BE:F0:DB:43:FB:92
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/3vuRA4bTal1NGJUpBAq-8NtD-5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3:3000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:e8:f8:54:c1:27:1b:4c:0a:b5:a7:dc:0a:59:94:53:85:de:
98:a8:b7:fd:85:e2:f4:d3:85:8d:ee:5f:fe:e8:23:71:c8:2b:
4a:83:99:47:2d:de:3c:02:97:fe:8e:5c:52:fc:59:cb:18:be:
5e:34:cb:40:67:6b:e4:4a:91:6a:db:e1:9b:fa:4f:17:6e:8c:
77:9a:2a:21:47:95:3a:4d:e5:c3:e7:f1:c3:6d:ca:b7:78:5c:
ac:f5:bc:7b:c4:e1:71:6b:2d:e8:54:60:26:70:8d:a1:9a:e9:
60:70:e1:be:66:43:ff:8d:3d:3b:5b:06:ed:e9:7d:3e:e0:27:
32:cb:ba:7c:ed:4e:31:36:2d:7c:f7:72:e5:ca:08:f5:40:f7:
a6:77:e8:d0:fc:de:e6:12:95:a8:36:2a:fb:6c:1f:04:30:1e:
94:a9:bd:bc:93:41:79:bc:16:b8:b5:56:48:fa:a1:ef:21:ee:
44:9b:0e:ec:55:d1:31:0c:0d:f7:28:7a:3c:03:b8:91:1b:82:
6e:81:8a:0d:53:46:bd:49:4d:13:17:96:20:bd:a8:b2:38:17:
9e:70:24:07:14:aa:7e:b0:2a:57:ba:02:10:fc:f3:06:d0:f3:
c0:f4:be:7a:ec:3b:a3:6c:f1:41:7f:41:aa:09:a7:8b:39:1f:
be:9f:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:42 2025 by rpki-client