Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Bs4lhpAgPxLI2sivKmGtlx_Lp3k.roa
File: Bs4lhpAgPxLI2sivKmGtlx_Lp3k.roa (raw, json)
Hash identifier: qE6cO8k8x/RBn9klunLlEIx8ylpZgmFO4HaBZgdaXEY=
Subject key identifier: 06:CE:25:86:90:20:3F:12:C8:DA:C8:AF:2A:61:AD:97:1F:CB:A7:79
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B4AF78C9D87671D5FAE0E15485B7D
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Bs4lhpAgPxLI2sivKmGtlx_Lp3k.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 2a12:f8c1:40::/48 maxlen: 48
2a12:f8c1:41::/48 maxlen: 48
2a12:f8c1:42::/48 maxlen: 48
2a12:f8c1:43::/48 maxlen: 48
2a13:fc0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4a:f7:8c:9d:87:67:1d:5f:ae:0e:15:48:5b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06ce258690203f12c8dac8af2a61ad971fcba779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:1c:80:87:c9:8f:fd:d5:4f:b4:b6:4d:7f:
50:b8:14:94:7b:7b:76:67:34:2d:42:f7:12:a1:20:
00:8d:d8:46:ea:48:cd:0c:12:df:73:6b:cc:b5:9d:
a2:24:ab:ac:51:c7:44:1a:5f:44:82:f8:5d:b7:ef:
53:65:71:4d:0b:a6:75:b5:55:04:92:3c:ce:1f:3d:
89:90:96:f2:5b:9b:28:d3:b1:a5:f4:0b:7e:ab:5e:
79:ec:a1:f1:89:04:26:80:69:56:56:f8:77:30:a8:
17:be:89:db:40:81:9d:4c:fe:74:1e:82:48:ed:74:
ef:06:fd:f9:96:7f:3e:c7:91:b9:11:02:07:87:fe:
e7:a4:98:72:0c:93:cd:d2:a0:9e:d5:24:41:96:6e:
94:b1:fc:a8:d7:70:aa:d5:69:9f:4f:7a:cd:3b:05:
6a:7b:96:6a:96:4f:2b:c3:3f:52:83:e9:00:18:f2:
a1:07:7b:c9:1c:63:79:47:cb:93:b3:f3:c6:b8:30:
ae:6e:1c:ab:5e:b1:cd:d4:b1:d9:c3:a6:38:62:75:
06:5b:89:be:c6:94:2e:e1:4d:38:c1:40:06:a0:b0:
02:8b:a1:2f:e3:16:21:ac:7f:4a:0d:69:48:22:f3:
75:23:52:76:25:13:10:39:16:00:a9:b3:af:4e:28:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:25:86:90:20:3F:12:C8:DA:C8:AF:2A:61:AD:97:1F:CB:A7:79
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/Bs4lhpAgPxLI2sivKmGtlx_Lp3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c1:40::/46
2a13:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
93:9b:7f:98:87:3e:eb:02:2d:7d:03:15:52:90:dd:bd:1d:34:
ce:c7:d3:05:0c:b4:0b:67:01:7b:8e:79:64:ec:f4:48:a1:4e:
f4:c9:12:c8:c2:60:b5:e0:39:af:5b:27:e8:4e:14:37:6d:17:
64:a1:73:0a:e5:42:74:bf:47:45:f7:7f:c5:ff:81:2a:1e:e0:
f3:65:e2:42:4e:7c:e5:bb:d4:db:fb:27:d7:fd:83:9d:4d:f3:
3d:7a:15:9c:29:21:e6:13:46:b4:2e:7d:01:62:4e:42:a8:a5:
21:7a:12:01:44:e3:67:87:03:91:46:3b:c6:a2:17:02:7d:76:
aa:db:a9:8b:27:ff:51:d2:6a:ec:22:a9:83:0a:c3:d2:fa:9c:
2c:6a:da:e5:f7:07:f5:72:6c:ce:fd:10:c7:e2:a2:79:46:c8:
f6:c6:72:03:f9:38:db:c1:17:bd:fa:96:ff:16:63:04:c3:84:
4d:63:08:5a:1b:02:7b:0f:08:6f:4a:54:e5:2a:d2:2c:fc:c4:
df:fd:65:6e:5c:4a:ab:58:a4:ad:43:d0:53:45:40:c2:f9:c7:
75:5a:53:a9:8b:33:e3:06:d1:e7:34:93:5d:4c:25:08:4b:37:
f6:6f:62:a2:2c:09:8b:a8:a5:7f:f6:a4:0f:a2:bc:a2:dc:e4:
26:a9:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:55 2025 by rpki-client