Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Smlnej5n6B69IkLJuHE_uEPKvkM.roa
File: Smlnej5n6B69IkLJuHE_uEPKvkM.roa (raw, json)
Hash identifier: ZGTm9kLyb+TVFfvRl0Z+2C+98Be3iA8+F42uOm7E6Cg=
Subject key identifier: 4A:69:67:7A:3E:67:E8:1E:BD:22:42:C9:B8:71:3F:B8:43:CA:BE:43
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B47DEBCDADBA3E6AF5C8DB660C7B7
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Smlnej5n6B69IkLJuHE_uEPKvkM.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10111
IP address blocks: 2a12:f8c3::/36 maxlen: 36
2a12:f8c3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:47:de:bc:da:db:a3:e6:af:5c:8d:b6:60:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a69677a3e67e81ebd2242c9b8713fb843cabe43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:24:1c:08:80:45:e1:07:73:64:1f:df:9e:
98:7e:e8:6c:bc:3d:18:34:ec:99:46:ed:8d:83:28:
a7:39:18:a9:86:a7:49:95:df:d4:9e:f9:ad:92:7f:
07:d5:43:0f:0b:56:8a:cc:8d:e1:02:cd:ef:58:dd:
74:32:fe:9d:5b:56:0b:11:98:bc:0d:df:04:c8:01:
f2:33:ad:57:e8:f5:9a:e0:16:40:4a:a6:e9:5a:68:
40:b0:57:52:24:d6:85:eb:86:6a:f6:a4:15:b6:d2:
c6:44:d4:bd:f8:54:79:12:5b:fe:76:2f:f3:07:db:
de:78:a3:1d:86:9c:6d:97:ab:03:0c:4f:c6:f5:d7:
58:bb:e3:4c:70:d2:e0:e8:70:5e:b5:5d:5b:ab:4b:
76:a8:84:d0:5a:75:d1:dd:dc:f7:4b:d5:df:a8:f6:
1a:db:86:75:0b:e1:d6:86:94:ec:10:13:96:46:64:
17:e6:d6:ef:db:b3:ab:20:62:99:92:6c:31:1e:41:
73:7d:a6:06:95:f9:0e:44:8e:fb:bc:4e:71:1a:cc:
f7:bf:97:1c:3c:cf:fb:ec:29:bf:a5:84:43:80:ce:
0e:05:66:ef:a9:7c:e1:2b:65:e5:33:ca:cb:b7:62:
e9:40:26:88:bd:79:2d:d8:61:36:26:ad:43:95:da:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:67:7A:3E:67:E8:1E:BD:22:42:C9:B8:71:3F:B8:43:CA:BE:43
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Smlnej5n6B69IkLJuHE_uEPKvkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3::/36
Signature Algorithm: sha256WithRSAEncryption
0b:73:30:e5:79:f3:0f:b0:cf:c8:ad:29:8a:03:b2:ae:fe:11:
cb:79:75:7b:c1:3a:27:49:91:fc:47:32:36:66:ee:c5:16:b3:
28:b5:28:0c:20:e8:d4:79:c3:10:8c:eb:f5:88:3e:f2:c5:4c:
5e:e9:97:5b:95:4f:b8:20:6b:10:a9:00:e2:4f:20:ae:0b:07:
a4:03:59:17:74:f0:c5:27:a9:b4:41:54:64:51:e1:91:06:27:
be:70:be:07:43:22:d7:26:db:a4:0c:24:51:e2:9e:59:63:00:
ba:05:1f:77:43:86:71:d5:0f:37:89:80:2c:30:1e:94:5e:ce:
51:95:d7:7d:ff:f9:40:49:68:19:05:1b:c7:e7:73:7c:72:85:
15:bf:28:2d:28:eb:36:2c:39:e7:be:c8:48:dc:a0:7b:e3:67:
0e:40:3a:da:45:7b:41:d7:c2:c6:0a:37:1e:f5:50:a8:ba:f1:
fa:51:46:4d:4d:49:0f:5c:42:45:8e:fe:7b:23:12:64:17:c0:
c0:bb:44:08:33:c6:88:99:9b:1f:3b:e2:8a:e6:30:9a:bd:2d:
db:4e:01:db:c2:06:76:93:64:37:16:35:a6:40:42:54:ab:63:
45:8c:52:db:a8:e7:17:d1:d2:0b:38:7d:03:e9:84:c5:4d:a3:
d0:b7:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:54 2025 by rpki-client