Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/t5XPQX_yMIvCtklbQrF1q82oTKI.roa
File: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (raw, json)
Hash identifier: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=
Subject key identifier: B7:95:CF:41:7F:F2:30:8B:C2:B6:49:5B:42:B1:75:AB:CD:A8:4C:A2
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0194228D1493134C2E33AB863024EDA7170E
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/t5XPQX_yMIvCtklbQrF1q82oTKI.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211088
IP address blocks: 2a12:4946:a000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:14:93:13:4c:2e:33:ab:86:30:24:ed:a7:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b795cf417ff2308bc2b6495b42b175abcda84ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:b7:5f:f4:82:b9:3f:db:0d:b0:c9:76:9b:
07:f2:82:fb:c9:fa:0b:63:9e:e0:ee:10:cb:1d:b9:
ba:ec:c7:03:5c:c7:24:62:ed:42:dd:be:41:4d:44:
e5:36:49:a0:5c:5d:1f:7b:a7:e0:78:d1:93:83:2e:
17:ba:b0:b4:d4:d5:b3:65:a1:fa:99:ba:de:db:07:
6d:9c:1d:3f:cc:13:98:6d:6e:bc:a8:eb:40:c2:13:
74:18:c9:b0:03:f2:d3:ad:ac:52:4b:ce:d1:bc:e1:
47:fb:f2:d5:50:f0:60:f0:1d:33:da:94:85:37:2b:
38:69:d3:7c:6f:f6:9b:f6:99:b4:b5:83:57:df:d6:
40:c6:f8:7d:33:27:84:90:01:d1:55:f8:18:e8:a8:
3a:1e:18:ee:00:ab:0c:fb:4f:ab:63:4c:84:70:e4:
0a:4a:c2:b0:b7:6a:0e:08:9a:40:8d:77:68:1d:0a:
9e:d4:23:f6:14:73:d6:50:71:28:eb:08:fc:87:5f:
ac:90:b1:00:90:c2:67:24:3b:e7:80:6e:95:b9:e1:
50:28:82:c2:b9:64:1c:1e:11:0b:2c:30:1c:73:fa:
1e:08:b4:72:44:e8:de:14:c1:d6:6d:94:af:59:ad:
e2:ef:35:8f:cb:01:47:76:2a:b4:7f:96:31:34:4c:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:95:CF:41:7F:F2:30:8B:C2:B6:49:5B:42:B1:75:AB:CD:A8:4C:A2
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/t5XPQX_yMIvCtklbQrF1q82oTKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:a000::/40
Signature Algorithm: sha256WithRSAEncryption
ac:3e:27:fb:76:36:86:e6:8b:60:56:af:fe:8a:e9:7a:13:a0:
92:d7:69:3e:f9:f0:19:1e:73:26:31:63:ec:ac:e1:7a:13:c4:
48:3f:9a:90:c3:bb:7a:e7:59:ac:71:2a:13:56:92:f8:01:b7:
8e:9c:69:65:06:2e:7c:b9:ac:9e:7d:d0:ed:de:41:5f:42:9f:
eb:24:e9:9e:ec:cb:b8:45:e6:1f:f0:c9:bb:da:43:76:81:9e:
31:a6:49:e9:e4:d3:ca:7c:4f:52:c6:85:5b:1d:d5:97:b8:34:
91:4b:41:6c:63:36:82:1b:97:d8:7f:60:ff:ab:13:80:49:ee:
5c:c0:53:7f:2d:96:c0:77:60:02:da:75:1c:32:0c:69:ed:bd:
39:fe:a7:8c:e8:72:d5:1d:af:50:ad:32:65:3f:cc:39:e8:a9:
7e:ec:f8:c5:51:52:d8:40:83:7c:9d:43:62:54:37:d4:69:5b:
e5:38:85:e9:c6:78:7e:99:e8:cf:8b:1f:c9:19:73:e4:08:cb:
93:db:08:bc:7b:9b:3a:4a:62:9c:a2:2b:29:d9:2f:dc:15:68:
62:25:3a:1c:d9:70:01:c8:83:e8:ec:fe:75:be:22:11:6b:6d:
d8:dd:cf:7c:84:4b:2b:f5:95:d0:d2:15:be:af:b8:e1:fe:0e:
5b:a0:ed:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:25 2025 by rpki-client