Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Eru4dcnP3AWADVXKAGfzuxLYfJc.roa
File: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (raw, json)
Hash identifier: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=
Subject key identifier: 12:BB:B8:75:C9:CF:DC:05:80:0D:55:CA:00:67:F3:BB:12:D8:7C:97
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019422FB0410B222FFAB6E2F25DAC01E8CA7
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Eru4dcnP3AWADVXKAGfzuxLYfJc.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 2a12:6900:1100::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:04:10:b2:22:ff:ab:6e:2f:25:da:c0:1e:8c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12bbb875c9cfdc05800d55ca0067f3bb12d87c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:5c:8c:0e:46:6c:2b:2b:55:8e:23:b8:f1:
56:94:cc:53:ff:de:09:ef:df:ad:80:4d:93:de:a5:
83:d6:d3:2e:b1:a1:cb:63:86:32:e8:8e:4e:ad:2f:
75:d6:64:df:6b:df:07:95:fd:5a:99:70:b9:c9:7d:
61:07:b2:95:cb:4f:52:31:f6:21:ee:5b:5a:82:50:
3b:98:39:f5:18:7b:92:2d:4b:de:26:c4:1c:35:7e:
1b:44:18:f7:c5:8f:6b:e6:1e:55:c8:32:8c:07:23:
e0:26:00:12:d7:54:7d:58:1e:11:dc:db:68:29:ad:
c9:cf:33:fc:29:1c:3c:df:fe:10:65:7b:54:21:0a:
28:54:e5:f7:60:86:64:a5:a1:5b:c9:35:0c:cf:be:
22:35:fd:17:e9:ff:87:2f:6b:07:43:88:26:07:18:
95:77:25:e5:17:9c:c0:ed:ad:9b:eb:e3:06:31:31:
e1:7b:b3:36:78:9c:b6:bd:a4:dc:14:cb:55:32:4b:
29:d2:d3:57:a0:0f:c2:d7:91:62:93:cc:77:9a:dd:
72:86:c1:47:81:42:e7:a5:04:2a:ac:d8:b6:2d:b0:
95:43:f9:05:69:16:c2:e8:18:70:c9:30:6c:e6:9d:
1b:71:22:f5:4a:98:76:2b:23:e4:06:d1:c7:8c:0f:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:B8:75:C9:CF:DC:05:80:0D:55:CA:00:67:F3:BB:12:D8:7C:97
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Eru4dcnP3AWADVXKAGfzuxLYfJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1100::/40
Signature Algorithm: sha256WithRSAEncryption
2e:ca:b3:7a:11:52:b3:a8:b9:e3:d6:27:27:20:62:53:69:bf:
4d:a0:a5:a1:60:64:95:c2:26:f3:e7:7e:03:9e:37:ef:e2:d7:
f0:e4:ed:d8:f9:cb:12:72:c6:76:3c:5c:e9:11:6f:28:a1:ca:
0f:fd:3c:3d:a1:07:31:71:ab:2c:40:b1:a0:3b:01:49:6b:8a:
cf:1d:e4:42:31:c2:e0:a2:fc:f8:db:29:a0:1c:c4:86:ea:62:
62:a9:5c:d2:ef:56:2b:42:62:fd:b7:35:17:24:58:eb:c8:04:
67:de:7c:fa:08:f0:e2:1e:49:99:a8:cc:f1:33:da:1c:f1:03:
1f:0d:01:f5:85:50:db:56:66:c4:f4:e6:99:ce:e1:e5:d1:57:
19:94:fb:ef:a5:9d:47:15:6c:22:55:46:39:f7:5c:4e:5e:35:
8e:95:e1:3f:b3:fc:32:8d:d3:30:03:ac:da:d1:31:5a:b2:c5:
1b:36:d8:3c:8f:c5:6d:3c:f1:3a:09:65:8b:8f:a5:8a:3b:f1:
57:5f:df:bb:b7:fd:9b:bb:06:8e:51:69:4f:1a:30:28:29:3a:
47:b5:da:23:b5:7d:6b:77:35:dc:05:f8:d7:6a:af:44:be:9a:
60:1b:46:0a:d4:81:55:ac:1f:08:74:49:87:d2:6e:42:b5:6f:
e2:b3:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:25:01 2025 by rpki-client