Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/tXbHOfReX9qN0T3foodzk2ifYsE.roa
File: tXbHOfReX9qN0T3foodzk2ifYsE.roa (raw, json)
Hash identifier: j/tvE7XOmml/IXF1FdoH5AY+EIUpxJ1RnI1YQ6w9LH0=
Subject key identifier: B5:76:C7:39:F4:5E:5F:DA:8D:D1:3D:DF:A2:87:73:93:68:9F:62:C1
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01955C5B922C7415A6FB0A94E71C79AA3E40
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/tXbHOfReX9qN0T3foodzk2ifYsE.roa
Signing time: Mon 03 Mar 2025 14:14:19 +0000
ROA not before: Mon 03 Mar 2025 14:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 2a12:440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:5b:92:2c:74:15:a6:fb:0a:94:e7:1c:79:aa:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Mar 3 14:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b576c739f45e5fda8dd13ddfa2877393689f62c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:86:52:4e:7c:2e:11:3c:03:21:98:21:30:08:
9a:2b:a6:1e:af:4d:37:9b:f7:0a:c5:e3:b4:37:73:
b2:46:a6:a4:9b:3d:6b:3e:d3:aa:c9:db:65:5a:57:
a4:2b:2f:d7:04:7c:5e:d8:bf:45:e3:ea:10:39:bb:
0d:86:22:a5:20:9f:e0:b4:11:7d:8d:9b:10:4b:ee:
cc:4b:f4:a8:43:9b:0f:46:1f:9a:96:45:53:e8:72:
ed:f1:3e:c1:97:1b:e9:6e:b7:f2:19:08:6b:99:44:
56:6f:3d:34:82:6e:af:79:09:f6:ab:59:99:20:6f:
dd:fa:58:42:dc:51:3b:92:24:84:1f:42:dc:86:29:
b8:c5:5d:6e:e3:33:c4:4f:ef:89:b3:96:aa:fc:f6:
e2:69:aa:73:b3:d4:f2:98:87:59:1e:54:3a:4e:3a:
d6:0e:33:94:5b:d2:f4:9e:91:17:c1:2f:0f:f9:44:
ad:1f:c2:f0:c5:da:a2:79:59:fe:9b:89:37:8f:53:
f8:51:72:c4:de:ab:ad:ef:64:12:3f:69:27:8f:2e:
98:64:e2:ed:b0:ec:64:1d:6e:44:16:05:77:3a:1d:
ab:e5:90:57:e5:fe:6f:e0:76:8e:1e:87:76:2a:62:
3d:9c:35:8d:9c:f8:b3:c4:f0:72:5a:70:ef:dc:03:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:76:C7:39:F4:5E:5F:DA:8D:D1:3D:DF:A2:87:73:93:68:9F:62:C1
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/tXbHOfReX9qN0T3foodzk2ifYsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:440::/29
Signature Algorithm: sha256WithRSAEncryption
9e:68:de:99:3d:75:0c:08:f9:5b:3f:bf:36:00:ee:c7:2c:b2:
3d:a7:b5:ac:47:24:84:7a:ec:b5:62:96:65:a1:84:14:09:52:
63:59:45:84:0c:a5:ca:79:47:65:84:0c:0e:4e:e8:38:bd:05:
a5:56:86:f9:28:e1:1b:45:15:55:45:2a:1c:4f:c4:c2:ab:de:
17:46:22:ba:94:05:4f:b2:e8:d1:89:8a:9f:7f:52:ba:58:86:
2e:40:75:fe:10:ae:13:5a:c1:bc:99:55:58:cf:e8:02:b7:60:
ee:38:d1:b9:ab:83:a4:fa:e0:c9:b3:c2:0a:26:e0:03:99:56:
26:c8:1f:ad:fb:48:a1:c8:ca:3b:ca:91:a5:9b:bb:d8:0e:56:
7a:6c:34:f1:b4:98:84:f5:4a:a0:be:46:6c:e4:e8:7d:c4:06:
a2:63:d7:72:60:b8:54:fb:8f:3c:f6:9b:d6:80:47:6d:5b:8b:
24:be:16:2a:2c:2f:59:47:62:f5:a2:c4:2d:ac:20:cc:87:e4:
74:06:f0:48:aa:d7:6a:6f:48:1a:53:41:00:dc:f8:02:7e:10:
81:76:ae:01:3b:39:63:18:ef:42:30:3b:46:31:ab:f7:8f:8f:
99:d7:8a:91:af:fe:d7:f5:36:d5:aa:99:51:02:95:21:76:df:
5f:51:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:17:53 2025 by rpki-client