Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa
File: A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa (raw, json)
Hash identifier: 6GMUeHfmdErm/sIramac3F+jFlRdAFwxAZz+asqiZFE=
Subject key identifier: 03:ED:B7:27:30:3E:EC:6F:48:25:1C:7B:2F:B8:19:D8:4B:22:65:7B
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0194228DE86881E8171BC9ECFC3FC76DD99C
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215495
IP address blocks: 2a12:8fc6:600::/48 maxlen: 48
2a12:8fc6:900::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e8:68:81:e8:17:1b:c9:ec:fc:3f:c7:6d:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03edb727303eec6f48251c7b2fb819d84b22657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:d7:39:e9:d4:cf:7b:6d:97:87:03:90:4a:
c9:1f:cf:ed:11:fe:d2:2c:fc:7d:a7:84:d9:10:32:
24:23:0f:10:58:7f:93:cb:86:71:11:fb:d1:e3:1c:
19:c0:a0:c5:bd:93:4e:ff:5b:e4:40:76:d1:b5:33:
4c:d5:8d:8c:ef:7a:88:34:19:84:39:f8:2b:9a:ef:
b2:1c:5e:47:84:18:3a:63:e2:11:91:d2:ab:1e:38:
95:f9:83:8b:c8:dd:1d:a5:a4:d1:10:aa:cf:a8:6e:
80:fd:e0:19:86:0e:32:c7:27:cd:63:d6:ab:80:26:
e3:eb:2b:a5:6a:8a:32:44:37:99:54:1c:1d:9c:54:
e2:0d:f4:e6:05:da:26:35:a0:96:5f:3b:2e:40:54:
95:1c:09:65:c5:b8:ac:fe:fb:03:69:8e:dc:52:55:
d9:31:02:23:e8:1f:b2:e5:9b:e2:da:b5:8f:5a:98:
d4:40:b7:a5:ff:28:bb:e1:33:37:e8:7a:d1:9d:f5:
78:0e:47:7f:ae:44:94:a2:a9:2b:6e:38:2c:39:43:
1f:14:6e:74:a0:72:1d:00:56:63:25:30:f9:62:f2:
98:d0:b3:23:df:32:0a:1c:0f:96:aa:75:04:d5:3a:
58:50:0f:6a:44:76:db:21:9e:9e:db:44:a9:ff:69:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:ED:B7:27:30:3E:EC:6F:48:25:1C:7B:2F:B8:19:D8:4B:22:65:7B
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:600::/48
2a12:8fc6:900::/48
Signature Algorithm: sha256WithRSAEncryption
27:1a:4c:81:3d:8c:0e:55:f0:a7:36:d2:5a:d7:78:85:ed:f1:
6e:84:63:11:8a:28:5f:1e:f5:6f:b1:c6:a9:16:66:51:e4:6d:
8b:83:61:72:bd:9a:28:f9:7e:3f:03:b4:13:e2:ed:2e:65:71:
ba:15:ce:26:26:33:e5:6f:61:e2:7b:b5:0f:81:11:b2:dd:c6:
f2:0d:ad:18:5f:e8:99:6a:bb:45:d1:b8:7a:5f:60:c7:63:90:
e2:38:eb:b3:75:b2:06:b9:b7:23:40:3a:43:cf:01:07:3f:58:
88:a9:b0:22:30:b8:49:d9:9e:aa:47:ce:38:87:5c:52:10:90:
19:e3:48:9d:c2:75:c4:f5:39:4a:0b:74:d6:3e:d7:7c:12:b6:
95:e6:27:62:61:c0:3e:08:ec:b7:1f:f0:8e:63:46:23:3a:dc:
f1:05:96:76:40:e2:42:ee:de:34:cf:22:b0:3c:64:87:3e:ec:
1d:d5:27:a0:7a:9a:ce:b1:41:a5:e9:59:9c:b1:aa:26:a3:7f:
d1:09:48:46:94:70:19:1e:4a:2f:dd:04:b8:77:71:f6:15:bd:
aa:0f:e8:53:d4:5d:4c:c5:32:9c:92:0f:b3:8c:e3:8d:48:d9:
2f:98:1a:96:b1:8d:fb:af:44:a4:01:f9:ee:2d:4b:3c:dd:51:
fa:a8:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:50 2025 by rpki-client