Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bs7GziLox9peGF2yvnXKRWa8CtM.roa
File: bs7GziLox9peGF2yvnXKRWa8CtM.roa (raw, json)
Hash identifier: cBuRaE10dL+zgAwaQff5Gg3RICxaLuAu1aSi+XkcBE4=
Subject key identifier: 6E:CE:C6:CE:22:E8:C7:DA:5E:18:5D:B2:BE:75:CA:45:66:BC:0A:D3
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019423D7BC145FBBCCB373F57B741F81C62F
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bs7GziLox9peGF2yvnXKRWa8CtM.roa
Signing time: Wed 01 Jan 2025 21:48:48 +0000
ROA not before: Wed 01 Jan 2025 21:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51396
IP address blocks: 2a12:6740::/29 maxlen: 30
2a12:8ec0::/29 maxlen: 30
2a12:ccc0::/29 maxlen: 30
2a12:d3c0::/29 maxlen: 30
2a12:e240::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:bc:14:5f:bb:cc:b3:73:f5:7b:74:1f:81:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 1 21:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ecec6ce22e8c7da5e185db2be75ca4566bc0ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:64:a7:d2:87:dd:3b:e1:4f:49:41:3c:9d:
4a:1e:05:9d:3c:da:75:19:9e:6e:60:c0:d0:05:7e:
54:88:64:87:f0:04:4e:e1:42:68:c5:ae:69:40:eb:
cb:19:ab:3d:36:0d:92:ee:ea:dc:af:55:09:04:a8:
ba:f9:d0:20:93:25:d5:e4:57:78:cb:b2:64:4a:b2:
f0:b3:13:23:6d:c5:2a:d8:80:0a:58:64:a3:c0:f0:
29:c7:55:a9:70:42:59:47:8f:82:aa:90:02:c1:07:
ae:ac:12:6d:6a:ae:6e:6f:f3:68:75:08:60:be:78:
6c:12:29:a3:79:dc:3d:d4:33:3a:c2:6e:61:2f:f8:
0e:00:61:b4:f7:19:dd:ca:34:08:73:4d:ef:49:a3:
e1:83:b7:9f:45:1c:f4:1e:28:51:e2:e7:59:e4:8c:
8e:0c:84:f4:17:01:11:c3:58:29:d6:3d:a5:aa:da:
c3:10:9f:2e:1f:58:c7:10:61:ad:68:df:c0:39:d7:
b4:3f:e2:55:ca:d1:8a:25:f1:bc:13:cf:df:b0:79:
21:04:e9:13:1d:d2:1a:1c:e2:3c:82:b3:3d:59:76:
96:b6:ae:12:3f:a4:20:c5:9f:cf:9f:96:f3:f6:be:
e7:fd:94:e2:7d:d3:2b:d3:70:2f:c4:4c:2c:5c:19:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:C6:CE:22:E8:C7:DA:5E:18:5D:B2:BE:75:CA:45:66:BC:0A:D3
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bs7GziLox9peGF2yvnXKRWa8CtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:d3c0::/29
2a12:e240::/29
Signature Algorithm: sha256WithRSAEncryption
87:f9:cd:3a:4f:aa:13:9b:68:c9:99:62:cf:ea:8f:6b:30:f7:
cb:ad:35:79:a2:ee:fa:0d:c8:cb:bc:dc:c6:be:51:f3:01:7f:
1e:b5:07:42:ab:12:8f:9f:83:9f:18:1d:2a:6a:5d:dd:e3:c0:
b9:7f:e2:49:fe:e1:61:0f:cb:15:7f:6f:b9:d8:77:be:d0:76:
d0:1a:83:6b:6d:4d:94:a3:4e:8d:4b:c0:c5:7c:73:65:51:11:
3c:4a:50:60:13:4f:3e:71:df:4e:2b:63:a0:f2:d5:07:7f:d5:
3d:7b:5d:6c:cc:d0:b8:16:0f:16:a4:55:d7:84:51:95:5e:51:
b8:b5:2c:67:d2:54:8b:1f:5b:c6:f7:2d:fa:cf:05:72:42:4b:
e0:8e:ad:34:c1:9e:88:a9:90:ad:ca:91:30:0f:d3:7a:4a:8d:
27:3d:c9:6e:8a:a6:34:25:ae:42:23:c6:a3:34:de:e5:94:5c:
ce:92:6e:e6:4a:97:99:5e:ab:9c:55:a7:c9:05:e3:9a:4c:48:
b3:02:35:05:2d:eb:61:28:55:b6:1a:55:e4:16:36:77:d8:1c:
ab:bd:0b:cd:7f:9b:78:97:05:b7:2d:78:f4:14:b3:2d:0d:95:
ec:2e:49:b0:37:3b:c7:e7:59:20:58:9e:65:93:71:66:0f:5c:
8e:13:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:21:09 2025 by rpki-client