Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/w7zldP2dSTV7McCVwaUzSBO_Ab8.roa
File: w7zldP2dSTV7McCVwaUzSBO_Ab8.roa (raw, json)
Hash identifier: HPAlEO6C/avbwjTwHxsefaMqdqo+TQZfmtm0A3Xt3Ow=
Subject key identifier: C3:BC:E5:74:FD:9D:49:35:7B:31:C0:95:C1:A5:33:48:13:BF:01:BF
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E4735D986684516C26353FD4B547
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/w7zldP2dSTV7McCVwaUzSBO_Ab8.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39753
IP address blocks: 2a12:3fc7::/48 maxlen: 48
2a12:3fc7:8000::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e4:73:5d:98:66:84:51:6c:26:35:3f:d4:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3bce574fd9d49357b31c095c1a5334813bf01bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:07:50:bd:4c:b0:bf:7c:75:cc:4a:ce:18:
17:62:c9:c1:67:4e:bb:35:36:b8:a7:a4:b8:ae:16:
45:73:d0:4e:14:a3:10:cc:b3:13:bc:1b:14:eb:80:
7f:70:66:7c:48:d6:4e:f9:1f:50:e2:ef:dc:39:46:
d4:c3:95:f5:d8:83:5b:b0:16:44:a8:ab:61:8d:40:
8d:12:9f:6b:b9:7c:38:c6:65:ef:e9:75:13:bc:5e:
eb:ba:50:00:a6:51:18:15:8a:27:e1:42:ce:69:2f:
33:42:15:84:78:69:65:fe:de:4c:8c:dd:6d:a0:4d:
fb:e5:9b:26:a4:b4:cf:04:bd:c6:db:80:7d:05:47:
bc:06:ae:45:92:fb:be:af:7e:3d:05:35:80:8d:b3:
9a:bd:9c:7f:3e:e6:7e:36:9d:bf:61:03:93:3f:fc:
a1:5c:1f:63:2d:cb:35:cb:59:f3:df:c0:ed:ae:8f:
a2:85:38:65:eb:0b:d4:f5:87:8b:f8:3a:0d:8f:0f:
33:78:32:50:da:6d:c2:07:ea:13:d0:77:ce:7d:05:
70:04:ab:02:24:f7:5f:ba:a9:08:e4:da:02:7c:29:
83:ce:20:35:0e:0e:44:e1:b0:6d:fa:60:77:a6:aa:
36:ca:a1:50:72:06:d9:1f:46:af:72:eb:2f:09:f2:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:E5:74:FD:9D:49:35:7B:31:C0:95:C1:A5:33:48:13:BF:01:BF
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/w7zldP2dSTV7McCVwaUzSBO_Ab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc7::/48
2a12:3fc7:8000::/33
Signature Algorithm: sha256WithRSAEncryption
50:fc:28:ac:2a:13:23:24:7b:34:91:f4:76:d0:76:61:98:76:
ac:cb:38:b7:4a:2e:db:12:a1:8c:dc:81:2f:ad:b0:4c:0b:98:
8e:fa:06:3f:a5:e2:4c:80:6c:0c:91:4c:ce:0c:04:df:f1:ff:
5e:fe:68:15:d6:ef:6f:dd:c5:fc:48:96:11:02:7f:a1:25:ab:
a1:78:ce:57:43:19:e4:d6:a5:30:2c:d9:32:2e:7b:74:8c:04:
f8:26:f6:2c:a8:eb:58:63:a2:2f:37:94:62:7a:70:e8:f2:6f:
52:bd:80:be:af:b9:82:1b:d8:bc:b9:29:e0:ed:4e:07:8a:fd:
0f:33:67:3c:ee:60:3c:30:49:ae:56:5d:64:4c:2a:b4:f1:ed:
87:9f:40:76:8c:74:62:38:15:1d:d1:20:24:d7:93:d0:a9:1e:
54:57:45:27:39:34:5a:ef:a1:89:c5:bd:e5:71:19:1d:08:3e:
bb:00:c9:1a:af:86:b9:7e:76:22:23:95:07:d5:ea:dc:50:fc:
8d:42:44:c0:0e:a5:f0:de:6c:63:bb:84:c4:0b:84:6d:26:5b:
eb:63:93:14:10:eb:1d:cb:3f:8e:99:ee:9e:67:92:c6:f4:bd:
c6:a1:1c:00:ef:f1:8b:36:fb:06:8a:9a:64:5b:dd:2d:85:0a:
df:a5:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:24 2025 by rpki-client