Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/83EOlWZrKO5WLCsH1uDGC8_UIug.roa
File: 83EOlWZrKO5WLCsH1uDGC8_UIug.roa (raw, json)
Hash identifier: dE0NgpwbEwFSGcpMTtwW5p9tcH+Ofugiyh6IAvXsg/Q=
Subject key identifier: F3:71:0E:95:66:6B:28:EE:56:2C:2B:07:D6:E0:C6:0B:CF:D4:22:E8
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0195AAB6528F48A27CA4C3B6DE2A882F8961
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/83EOlWZrKO5WLCsH1uDGC8_UIug.roa
Signing time: Tue 18 Mar 2025 19:23:50 +0000
ROA not before: Tue 18 Mar 2025 19:23:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a12:1543::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:aa:b6:52:8f:48:a2:7c:a4:c3:b6:de:2a:88:2f:89:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 18 19:23:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3710e95666b28ee562c2b07d6e0c60bcfd422e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:9c:59:28:07:61:5d:cd:66:4a:e4:26:5d:
78:09:3b:f8:7b:48:7d:1b:a4:95:17:6d:db:44:7c:
d4:4e:09:2a:66:65:67:73:74:18:e1:54:7e:de:dc:
30:13:cb:7d:d8:4d:ad:14:35:7c:7e:ba:33:ce:dd:
f2:b6:5d:a7:73:a7:94:14:fa:34:ee:82:c3:b2:cc:
2c:b1:e2:b2:a6:e0:e9:fc:73:c2:35:d4:cd:1c:fc:
3c:e7:9c:f7:e1:c1:1a:9b:f5:de:4d:95:d9:a7:d0:
e8:8b:7b:6f:70:0f:f5:c0:69:d8:29:f6:aa:ca:32:
d4:12:37:76:2a:1f:5d:e8:8f:94:52:eb:cb:53:47:
0f:7a:20:c4:d6:80:e8:09:2e:18:fd:44:f6:a0:e4:
f1:c3:6d:7b:99:e5:97:57:09:1a:eb:78:c3:57:25:
30:51:0d:3a:69:dd:63:93:7a:13:f9:e0:51:b7:f6:
db:76:59:5a:8d:c9:a5:1f:83:8a:d7:c4:86:3a:f2:
6b:ff:70:a0:5e:a2:a3:a8:c9:aa:d5:86:4b:1b:ef:
6b:de:5c:7c:6a:8f:fb:61:a1:7e:46:c9:c6:66:8c:
01:b3:b6:c4:b0:2d:ae:be:59:59:2c:ee:ab:e0:57:
aa:e9:0e:86:9c:34:53:b6:fe:0a:48:6b:83:e1:f1:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:0E:95:66:6B:28:EE:56:2C:2B:07:D6:E0:C6:0B:CF:D4:22:E8
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/83EOlWZrKO5WLCsH1uDGC8_UIug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1543::/32
Signature Algorithm: sha256WithRSAEncryption
5a:6c:16:1e:02:d1:1e:b6:12:d8:31:51:57:21:37:24:70:23:
55:c3:d5:8c:58:5f:e5:a8:a6:34:de:44:40:0b:ee:8c:79:cb:
2e:64:6e:ed:bf:68:36:4c:ef:92:35:42:52:e1:42:20:0c:1c:
c6:54:81:c2:dc:22:87:e0:3a:6d:e8:41:e7:a9:67:2c:15:86:
0f:b0:04:07:fb:4d:4c:6d:8f:5e:41:63:96:6a:b3:f7:ac:04:
84:b7:da:26:e9:ad:ae:4c:d6:5c:b4:55:50:9c:7a:08:09:69:
93:ad:c0:63:5c:63:92:90:c9:1a:0a:32:c9:da:25:fb:b7:97:
8a:5a:0f:55:68:c8:4e:7c:ca:16:c8:ea:58:93:92:b3:78:54:
6a:71:ca:ea:7b:24:c4:a0:0f:c8:91:56:86:a7:d6:b2:7c:48:
f6:a2:22:e5:74:61:2f:37:36:bf:67:25:77:1b:89:01:a0:e3:
06:01:dc:56:d6:36:7a:c8:3e:35:c6:9c:c5:eb:34:d1:d9:10:
be:e4:7b:39:51:48:28:6e:df:d2:2b:05:1d:0e:3c:6f:99:81:
5e:2b:cc:fa:af:a1:3b:0f:f4:87:49:99:bd:0a:45:82:d1:35:
8e:5b:e5:d0:f4:7c:40:ff:13:38:8b:be:34:e7:59:3c:59:19:
e7:9e:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:35:25 2025 by rpki-client