Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/49__1Mb6TJOq1lBE39sK0MqptNw.roa
File: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (raw, json)
Hash identifier: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=
Subject key identifier: E3:DF:FF:D4:C6:FA:4C:93:AA:D6:50:44:DF:DB:0A:D0:CA:A9:B4:DC
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0194228D15AE0FD40698B690C5FDC9C003D7
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/49__1Mb6TJOq1lBE39sK0MqptNw.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211696
IP address blocks: 2a12:4946:9900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:15:ae:0f:d4:06:98:b6:90:c5:fd:c9:c0:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3dfffd4c6fa4c93aad65044dfdb0ad0caa9b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:6e:2c:55:0f:2e:1f:8b:c5:68:33:17:6b:
67:40:49:cb:8d:56:6b:28:de:25:3a:f1:98:bf:d8:
c5:ef:d3:a1:ef:76:ef:29:b3:d0:e3:29:27:62:52:
2f:db:08:d0:0e:ec:b2:2d:55:d7:b9:dc:0d:d6:28:
24:84:33:87:b8:1a:bd:b8:8f:26:c1:5a:db:98:61:
a0:ea:62:d3:dc:c1:02:b4:ac:ec:77:32:40:40:98:
cd:dc:61:3c:61:0f:0e:12:e6:d5:19:6f:dc:47:f6:
23:38:4b:db:83:74:be:72:d9:24:87:9c:34:1e:9a:
f1:2b:ea:8c:03:97:82:b7:09:5e:ef:67:8e:e9:f3:
33:f2:77:89:e6:27:a3:e5:97:51:a3:1b:e7:44:b7:
ec:97:b4:60:01:50:73:4c:95:c6:ba:39:5a:03:b9:
42:cc:6c:5f:9d:32:8f:e0:bd:95:1d:b1:8c:1f:dc:
5a:fd:fe:e8:f7:19:67:e5:0c:38:a3:b0:01:6d:32:
f3:cb:6c:35:9d:89:53:ce:94:21:8e:55:8f:4d:9e:
6e:cd:75:d7:28:33:a7:56:0a:32:fa:e6:39:79:8d:
2d:8b:e2:e4:d0:25:7a:d7:18:53:6e:2f:f3:10:8c:
19:db:3d:6b:e7:ea:8e:49:21:55:65:16:2a:60:80:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DF:FF:D4:C6:FA:4C:93:AA:D6:50:44:DF:DB:0A:D0:CA:A9:B4:DC
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/49__1Mb6TJOq1lBE39sK0MqptNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:9900::/40
Signature Algorithm: sha256WithRSAEncryption
ac:26:cf:bc:8d:0a:69:1e:da:0c:3c:9b:54:65:87:f7:5d:07:
ef:7d:f1:5e:85:b9:10:cc:da:80:66:1d:d3:c0:df:a4:b7:df:
5b:df:a7:e4:fa:a5:41:6e:25:8b:7a:3f:be:41:f4:d3:45:e0:
0a:5a:5f:d7:d5:5b:0e:b1:a1:d1:d8:50:12:93:ea:1d:5e:c3:
22:5c:9a:e3:87:4a:fb:ec:a8:fd:c0:d6:6c:bb:9a:14:a7:69:
dc:64:69:25:ed:9a:07:93:be:0e:09:74:d1:cd:45:49:57:47:
2f:50:e7:58:c1:99:49:f9:90:a7:8f:39:39:d7:19:0b:ea:bc:
89:f9:16:a3:bf:ca:f9:0b:69:75:d9:60:30:c8:87:d5:62:5e:
49:ed:dc:75:44:71:b5:84:5f:fe:ed:a2:74:72:cc:7e:56:a3:
f4:59:c4:d9:84:9e:5d:1c:73:2b:54:0a:29:f2:16:b3:b1:66:
dc:b9:34:2e:35:bd:79:b3:92:49:92:03:30:29:7d:18:c8:33:
c8:55:c8:77:52:d5:5f:f7:ed:06:f7:f7:fc:17:ac:d9:c0:2f:
1e:61:82:d9:f6:14:61:11:dd:b5:67:28:64:79:d1:52:56:b0:
cb:fe:ad:ff:d4:c5:b9:c1:de:0c:04:cb:ea:ab:78:72:86:73:
48:22:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:42 2025 by rpki-client