Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/_irPLRofiW2yAiqGHceh7pxbGfo.roa
File: _irPLRofiW2yAiqGHceh7pxbGfo.roa (raw, json)
Hash identifier: LcENOil0eGI9fBrHK+Rr0FvqGbc2XbDucHTRV9ZcpPY=
Subject key identifier: FE:2A:CF:2D:1A:1F:89:6D:B2:02:2A:86:1D:C7:A1:EE:9C:5B:19:FA
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B49711489B8D21FE38CA1F8C97FBC
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/_irPLRofiW2yAiqGHceh7pxbGfo.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63801
IP address blocks: 2a12:f8c2:200::/40 maxlen: 40
2a12:f8c3:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:49:71:14:89:b8:d2:1f:e3:8c:a1:f8:c9:7f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe2acf2d1a1f896db2022a861dc7a1ee9c5b19fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:4c:0a:e9:5f:0c:df:e3:d5:bf:49:c2:4f:
76:9c:d6:69:a7:8d:15:3b:14:b2:cd:d8:7b:40:ce:
64:e5:79:26:8f:1d:f8:30:e9:df:47:12:ca:aa:cd:
04:7d:d3:23:f5:f3:f2:53:f1:4d:cb:b2:a8:29:4e:
25:a0:f4:2c:a1:ae:4e:6d:30:36:68:c6:05:6d:34:
8d:d2:11:62:ee:c8:3b:ac:98:5f:2c:3a:b2:64:67:
2a:e0:a2:0f:15:97:a0:61:36:fb:9f:d0:e0:be:a0:
c7:6e:3f:ab:5d:ed:54:1b:93:a8:70:f9:ae:88:83:
91:8d:bf:43:62:eb:63:40:ef:89:8b:08:06:c6:7d:
6e:f6:1a:c8:e7:2d:e2:3e:4b:e4:34:aa:3e:35:c9:
5e:50:09:61:6b:1c:14:a1:dc:96:c7:78:aa:f2:6b:
05:37:26:7b:fe:c4:03:8a:c4:8d:46:4b:f2:40:01:
7f:c3:bc:af:a4:b8:2d:e6:e7:3c:05:de:e3:bb:d9:
02:a0:36:12:62:88:33:9a:d5:1e:84:26:0a:88:3f:
b5:bf:3c:38:05:19:a8:c9:8e:2c:e9:1b:04:88:de:
63:cd:8e:01:b3:e5:44:9b:91:8d:ec:1b:bd:96:32:
17:63:95:26:44:07:8a:98:9e:6e:0b:79:09:d5:0f:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2A:CF:2D:1A:1F:89:6D:B2:02:2A:86:1D:C7:A1:EE:9C:5B:19:FA
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/_irPLRofiW2yAiqGHceh7pxbGfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:200::/40
2a12:f8c3:4000::/36
Signature Algorithm: sha256WithRSAEncryption
0e:8d:36:5c:40:40:ea:51:64:b0:37:c1:24:68:53:a2:04:b6:
3f:31:cb:c8:be:f7:d4:74:3a:bd:07:d0:d6:38:36:f1:af:14:
87:b6:cc:73:95:fb:81:9e:07:6a:7b:2c:b4:1b:75:de:85:8b:
73:21:34:47:9b:04:be:8b:49:21:ac:17:71:bf:a1:20:95:52:
36:3e:46:34:2e:50:0e:f9:67:f3:12:fe:be:1b:bb:74:41:9d:
8c:14:27:b6:50:97:90:e7:5d:9c:2f:97:81:da:ab:e6:0e:84:
a6:3b:5f:f7:26:67:76:e1:67:9e:8b:06:ef:be:a1:6e:cb:ea:
c2:59:4a:c2:13:8b:1e:7a:74:ba:33:e2:e7:bd:07:a5:09:fd:
9d:7a:fa:53:97:42:7c:fe:c9:7f:cc:e0:8c:8d:6b:10:9e:38:
79:30:93:d7:09:f7:4e:b6:42:ae:2d:e5:a3:e2:bf:5e:cf:9b:
0c:dd:f4:e9:ff:79:15:11:3a:1f:4e:2f:a3:18:ec:fc:5d:9c:
7e:ec:dc:85:fa:67:6f:9f:39:0c:f7:e6:5a:d9:f9:7a:88:28:
88:ae:12:7d:03:28:3a:e3:4c:57:11:ed:24:4f:6c:b2:8e:06:
e1:45:e9:46:76:07:9e:4b:b3:d1:c4:4f:f7:79:52:40:b7:f5:
3a:5b:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:52 2025 by rpki-client