Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Xze2R9-sOBECZdCde_QwgYYySyw.roa
File: Xze2R9-sOBECZdCde_QwgYYySyw.roa (raw, json)
Hash identifier: Eof9zCgJLAKEwohvvpjoVSRzIDkhM7fYYllS9yRW9mg=
Subject key identifier: 5F:37:B6:47:DF:AC:38:11:02:65:D0:9D:7B:F4:30:81:86:32:4B:2C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194F14778E6BA8A4FEACF1237318BBE35DD
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Xze2R9-sOBECZdCde_QwgYYySyw.roa
Signing time: Mon 10 Feb 2025 19:13:00 +0000
ROA not before: Mon 10 Feb 2025 19:13:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152565
IP address blocks: 2a12:bec4:16e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:47:78:e6:ba:8a:4f:ea:cf:12:37:31:8b:be:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 10 19:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f37b647dfac38110265d09d7bf4308186324b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:4c:d5:78:6d:cb:b2:18:f9:bd:0f:d7:68:
86:83:a4:e3:fd:95:52:58:b6:0b:74:99:e2:fc:6e:
dd:4a:2a:f5:34:b6:6c:83:ef:b7:f8:b2:86:5d:d7:
83:ec:c7:6f:fb:a5:d3:3e:2e:7d:bf:cf:87:03:d8:
e6:8e:2d:40:d8:f0:42:0d:d1:fb:0b:bc:e7:11:3b:
b1:73:4d:50:fc:0a:51:ef:d9:a8:17:18:b2:21:06:
3d:a6:a3:60:f8:a4:fd:84:1e:b9:22:a0:30:af:8c:
ff:2c:02:89:5c:fd:4c:d2:3e:dd:c7:f0:51:04:97:
ee:12:5e:5b:be:ca:99:c6:7b:49:22:37:34:0c:89:
78:63:c5:2b:17:58:7d:27:a7:b3:6f:63:a2:5f:7f:
ce:28:9e:39:d3:f8:34:47:73:8c:6f:1f:08:d6:cc:
4d:aa:f3:ab:01:55:10:1c:0a:23:a0:7d:d5:26:67:
bc:05:53:47:e8:7b:a1:33:ef:11:1b:af:a9:fa:be:
07:7b:cc:6d:99:88:2e:e9:88:a4:da:7c:f6:be:2e:
3c:81:85:15:b8:52:8b:f4:2e:05:2e:09:c3:99:46:
a3:7a:17:3a:5f:65:fb:93:aa:08:a3:f0:37:3e:08:
6e:e9:60:d1:f7:6f:b4:a6:a0:aa:2d:fd:40:c8:08:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:37:B6:47:DF:AC:38:11:02:65:D0:9D:7B:F4:30:81:86:32:4B:2C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Xze2R9-sOBECZdCde_QwgYYySyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16e0::/48
Signature Algorithm: sha256WithRSAEncryption
75:14:15:ab:b2:c4:8d:fc:d7:d3:19:32:08:c0:de:e9:3a:f5:
40:72:ba:30:19:fc:58:4d:73:31:38:f1:b0:96:9b:20:4a:4f:
a9:63:ac:30:61:69:95:31:68:b8:ab:5b:78:fe:4c:bc:de:9b:
93:bc:7e:5b:3f:9d:30:81:9a:2f:b5:9c:fe:0a:84:9e:61:a6:
91:dd:1a:84:57:90:8f:31:eb:8b:2c:ac:b9:79:af:96:d0:8f:
28:cf:2f:7a:b5:c8:b1:b0:f6:15:ab:20:cc:f5:87:a8:03:65:
3e:36:db:d0:d4:f0:6b:b8:6a:39:72:d6:7d:a3:b0:6b:fc:40:
dc:28:8f:bd:e7:1e:0c:97:f9:8e:22:b1:7a:81:f6:52:d0:29:
38:90:3d:62:8c:f9:43:c2:27:98:5e:10:ed:1f:af:f3:7e:2e:
26:aa:5c:bd:69:35:41:3e:75:73:96:f8:d0:89:d2:de:95:54:
76:86:86:21:83:08:db:21:c3:bd:92:6e:32:ee:0d:15:9a:07:
b6:84:79:f6:96:95:bc:b4:86:41:4c:4c:4e:4a:b0:3e:c2:56:
b7:06:a1:92:c9:c4:31:b4:e7:03:5c:5d:fc:3a:6a:ba:1a:5e:
39:ef:95:40:1a:8a:b4:06:08:57:5e:05:d4:fa:2d:5b:19:c6:
f5:ff:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:48:54 2025 by rpki-client