Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa
File: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (raw, json)
Hash identifier: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=
Subject key identifier: 29:B8:61:FF:E8:CA:4A:AC:32:8D:8F:58:C8:47:0A:38:54:12:61:21
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019422FB03C86AFF16DAE6AF1AC516472364
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 2a12:6900:1000::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:03:c8:6a:ff:16:da:e6:af:1a:c5:16:47:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29b861ffe8ca4aac328d8f58c8470a3854126121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:78:18:c7:67:b6:2d:7f:71:7d:03:19:1b:
4d:6f:72:51:ad:83:09:15:c7:9f:92:e5:4a:c6:1d:
74:ce:b8:70:41:a2:8c:1c:d4:a2:ff:76:74:63:5e:
b7:e4:8c:20:c7:fe:d7:65:68:22:1b:30:a2:30:6f:
97:cc:2c:42:46:ba:ac:fa:54:48:83:11:15:c7:3d:
a2:f0:3d:bf:d6:48:ef:af:98:27:e5:8c:96:c9:36:
af:e2:97:1a:f9:2c:78:93:20:2e:29:37:51:4b:ed:
ef:38:52:29:59:10:bb:f9:fa:1e:ae:d5:60:d9:4e:
41:c7:40:f6:e6:3f:fe:ae:e4:8d:09:a2:ca:8b:99:
96:26:99:ad:0f:bc:b0:6c:55:b0:35:c5:82:f2:49:
bd:bb:af:62:85:ef:50:33:94:01:da:30:f7:8f:c6:
c4:db:ee:35:34:7e:4f:87:aa:8d:ec:56:63:08:4d:
ac:d0:1d:c3:66:36:d6:c6:29:4e:35:60:88:20:86:
2f:dc:a7:c3:55:36:48:84:27:fb:e3:17:e6:2d:56:
a0:45:7c:55:78:b9:bd:73:00:f4:f8:b1:97:ce:dd:
5a:a5:69:9e:65:df:bb:c0:bf:f1:f5:09:c4:17:a9:
2d:b6:91:53:b1:95:23:9a:9d:be:fb:1b:17:e0:71:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:61:FF:E8:CA:4A:AC:32:8D:8F:58:C8:47:0A:38:54:12:61:21
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:97:3b:1e:95:91:75:a2:dc:09:da:2c:a4:b5:ec:b4:e5:41:
f5:60:78:48:9f:6d:37:1d:bc:43:33:b6:b1:bd:f7:f7:f9:a4:
06:d0:dd:72:03:a4:01:2d:1d:bf:26:7f:59:67:22:74:86:d3:
ea:96:3c:fe:27:fd:86:66:b1:fc:98:20:4e:8f:4b:7c:b5:4b:
ea:c5:38:47:00:71:31:a8:f9:8c:a4:12:19:1d:89:89:ee:6c:
22:b9:4f:c3:f7:3d:ed:f9:b9:e7:50:56:55:c7:f3:04:8f:3f:
b9:df:ad:5c:17:64:78:d1:72:0d:33:01:9e:a8:9f:49:7f:1d:
b3:93:92:6e:85:a2:50:37:05:38:92:ce:f4:55:38:bf:72:33:
1c:b7:60:b9:a0:8f:08:1f:8a:44:91:cd:4b:d3:3c:c7:25:0f:
a3:1b:25:3f:e5:16:1a:c1:1d:a9:dd:db:2a:a4:79:22:1b:7c:
e3:fc:ad:d9:f6:90:da:f7:0e:b8:4d:c5:64:c1:af:8f:96:da:
28:02:e8:e2:4d:4e:93:b5:98:98:ca:ea:e4:d9:f3:02:fd:65:
00:59:d3:30:9e:f0:54:06:67:3d:ec:7b:3b:27:8d:1f:91:67:
3d:cf:a6:0c:93:53:d6:aa:7f:11:b1:fb:65:56:19:c1:ca:63:
f7:96:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:25 2025 by rpki-client