Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/naerU7t_YnyMNgrVVvSGAGIVosA.roa
File: naerU7t_YnyMNgrVVvSGAGIVosA.roa (raw, json)
Hash identifier: Jrivnl7cXPjf9fM1WkFM2tktLxlYnwdWGtP1/JhzVEA=
Subject key identifier: 9D:A7:AB:53:BB:7F:62:7C:8C:36:0A:D5:56:F4:86:00:62:15:A2:C0
Certificate issuer: /CN=59638e13b59fcae91417e027db13e915298f5bbe
Certificate serial: 01904B9A7F37D4793E37EE4311F71134C131
Authority key identifier: 59:63:8E:13:B5:9F:CA:E9:14:17:E0:27:DB:13:E9:15:29:8F:5B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWOOE7WfyukUF-An2xPpFSmPW74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/naerU7t_YnyMNgrVVvSGAGIVosA.roa
Signing time: Mon 24 Jun 2024 18:55:34 +0000
ROA not before: Mon 24 Jun 2024 18:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a12:4240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:9a:7f:37:d4:79:3e:37:ee:43:11:f7:11:34:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59638e13b59fcae91417e027db13e915298f5bbe
Validity
Not Before: Jun 24 18:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9da7ab53bb7f627c8c360ad556f486006215a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:a9:99:66:c1:ba:8e:df:75:13:6d:91:dc:
8e:a9:ac:c2:4b:8d:83:ff:13:65:f0:cd:a8:63:ea:
8c:21:41:c1:1f:ec:75:16:17:3e:00:63:35:5c:b9:
90:de:86:4b:71:d6:64:e4:ae:e9:73:4d:7e:fb:2a:
f5:b8:56:9b:2c:2f:59:35:0e:84:45:69:ba:0d:c2:
99:55:95:9e:3f:28:82:82:cb:22:2b:8e:94:10:69:
11:6d:38:83:b4:5d:af:a0:89:37:a8:2d:08:70:39:
51:e4:a6:67:33:98:11:2c:69:7b:a8:be:99:e1:e9:
bf:51:f0:0f:7d:87:65:e8:c7:a4:e7:e5:26:f5:77:
2b:8a:8d:73:75:55:13:49:8e:08:b0:c0:93:1e:d5:
bb:0a:da:39:f4:09:11:11:91:15:45:5a:6f:b2:96:
29:a3:87:78:04:40:2f:21:7a:10:ca:a5:73:34:d3:
7f:09:79:52:19:8b:a2:3a:7b:46:09:58:97:90:f4:
82:c8:09:23:66:a5:42:a6:31:e1:18:8d:b5:de:3f:
c4:69:8d:32:3e:3e:db:dd:40:eb:f1:94:b8:6a:d7:
e8:80:3a:82:51:15:9a:92:e2:81:e0:1d:a0:0d:f1:
0d:fd:26:d4:9d:be:46:92:23:ef:56:dc:31:bd:0e:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:AB:53:BB:7F:62:7C:8C:36:0A:D5:56:F4:86:00:62:15:A2:C0
X509v3 Authority Key Identifier:
keyid:59:63:8E:13:B5:9F:CA:E9:14:17:E0:27:DB:13:E9:15:29:8F:5B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWOOE7WfyukUF-An2xPpFSmPW74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/naerU7t_YnyMNgrVVvSGAGIVosA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2d29e3-ffc7-4212-a23e-6add92a2b61e/1/WWOOE7WfyukUF-An2xPpFSmPW74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4240::/29
Signature Algorithm: sha256WithRSAEncryption
a7:18:31:88:7d:9b:50:9a:ec:d9:4f:2b:31:fc:2c:53:cc:1b:
96:26:41:6c:cc:c0:cf:f8:3c:9a:30:72:50:bd:d1:c6:5f:7f:
a0:ed:fd:78:b5:5b:ff:bd:36:be:7a:21:da:86:84:48:b5:27:
7b:74:88:a2:c6:82:90:a4:87:cd:49:18:81:a9:67:88:25:5b:
e7:c8:07:df:83:dd:f9:fb:98:7d:34:f7:6f:7b:77:7a:7d:78:
67:1c:ca:0f:43:55:18:29:ef:be:b0:2b:d0:ac:78:29:39:4e:
94:e9:dd:be:4d:44:25:88:04:dd:33:5b:b9:2d:e3:21:14:90:
6e:21:87:95:9c:8e:f8:92:86:77:cd:8b:e5:9e:02:51:4a:1f:
42:cc:0a:c4:51:5a:8f:d4:5f:17:c1:d2:53:92:51:ed:ac:25:
04:d0:6d:77:3e:33:06:48:53:91:f1:8c:16:4d:e2:fd:c4:34:
73:1a:ef:6b:94:7d:0a:0f:78:3c:7f:5f:8c:99:bd:1c:d8:af:
14:56:36:aa:78:8b:36:75:1a:69:c4:78:d3:d0:22:c5:25:8c:
04:36:92:2a:b1:cc:8f:93:66:1d:66:7f:5f:11:96:d2:08:ef:
cb:a7:7b:ea:6d:55:36:af:bd:07:ba:d7:4b:14:1a:21:77:db:
07:64:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:45:06 2025 by rpki-client