Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa
File: 2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa (raw, json)
Hash identifier: WVAqqT9n+azhlwqdMweU/K18Zjr86DqXuRzwgp6K0fI=
Subject key identifier: DA:5C:08:E7:84:05:FD:7A:AB:81:4C:1A:43:40:28:EC:A8:5A:84:8E
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0194221FE0407F68BDED4F1B8CA1DBFF736E
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57487
IP address blocks: 2a12:1243::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e0:40:7f:68:bd:ed:4f:1b:8c:a1:db:ff:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da5c08e78405fd7aab814c1a434028eca85a848e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:71:1a:af:3f:6d:cd:0e:8a:68:90:63:fe:
d7:57:9b:99:36:34:d2:34:30:f4:79:d1:a0:57:c2:
4d:08:73:98:fd:67:be:83:a5:11:9e:12:87:a5:b4:
f8:65:9b:4f:66:e3:d2:39:a9:93:ce:47:50:22:9f:
24:5b:91:93:4f:63:eb:b3:05:69:3b:6b:84:e9:1e:
60:fe:de:75:ad:b4:09:40:2f:f8:7a:d5:0d:66:b6:
2b:88:03:86:2a:2c:64:43:0a:c7:f4:8f:23:1f:d2:
71:6d:66:9f:ea:71:10:c7:4b:17:92:1e:7e:69:a0:
a1:8f:80:79:80:83:c4:25:6e:97:d6:62:9b:fb:84:
c3:02:53:f5:09:a5:d9:ef:b6:d5:85:17:ce:c7:db:
c7:89:12:ee:25:69:25:15:11:71:23:13:45:9b:2d:
a9:54:66:d4:16:5b:ec:1b:1c:a3:9a:17:c3:0a:b0:
2f:50:d9:d8:d7:64:2e:40:a8:d9:6f:91:a8:12:26:
cd:7f:f5:1b:a3:a6:bf:b6:f1:ea:2c:0f:52:fc:67:
45:4d:90:44:83:b5:2c:a5:9b:f7:3d:bd:2c:07:85:
13:86:3d:6f:09:7f:d3:cf:39:cc:46:f7:c1:cd:f3:
89:fd:80:6a:dd:7a:e9:0f:13:eb:73:d3:19:ef:e4:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:08:E7:84:05:FD:7A:AB:81:4C:1A:43:40:28:EC:A8:5A:84:8E
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1243::/32
Signature Algorithm: sha256WithRSAEncryption
55:a9:17:40:99:ca:6a:13:b3:e9:4a:9d:65:17:9f:70:13:9e:
3f:29:cd:67:74:f3:99:24:e5:9e:91:28:60:a3:42:1f:e6:c2:
ec:9d:ea:d7:c0:b5:47:70:d0:b1:3d:d0:4d:4b:02:1b:2f:dd:
48:23:db:31:ec:03:07:4f:8f:77:84:fa:b9:96:b6:1d:72:e0:
f2:7c:a1:98:f8:41:50:de:3e:35:06:af:37:53:53:da:e7:2c:
fb:ae:bd:62:88:21:45:01:53:49:13:71:45:c6:49:de:c3:7a:
98:d7:9d:f3:d4:58:21:45:16:75:0b:46:59:9f:38:44:c0:2f:
3e:a9:c5:a6:ba:96:53:f7:a3:89:51:8d:f0:46:63:3a:9a:dc:
62:1a:5e:13:9f:bf:0d:9e:e9:51:ba:06:38:8c:68:9f:90:85:
ea:09:eb:34:99:bc:cd:ec:0f:49:2e:e7:4d:22:bd:a6:6b:4d:
27:c7:9e:e8:6d:2f:79:67:63:0d:f2:a0:2b:8c:8a:b1:13:48:
40:34:e0:93:8b:96:66:70:fd:1d:3c:bd:12:0f:58:df:73:8b:
aa:da:37:70:f2:8a:f1:03:8b:ab:c4:a8:a4:f3:7c:43:35:81:
99:ed:62:c8:f5:77:e1:6d:33:ce:ad:66:89:2d:1d:fb:00:0e:
74:50:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:21:24 2025 by rpki-client