Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa
File: sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa (raw, json)
Hash identifier: jeLD+uX78qGvC25n9WT+vEXyb743d+wLL2MaAvAfMgI=
Subject key identifier: B0:8B:1B:26:92:14:B4:63:1C:9C:AA:D0:97:4F:F2:F9:04:FF:9B:19
Certificate issuer: /CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Certificate serial: 018CC3495E7DD745B83EE249A79D12D136EB
Authority key identifier: 62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:73c4::/30 maxlen: 30
2a09:9f44::/30 maxlen: 30
2a12:7340::/30 maxlen: 30
2a12:a2c0::/30 maxlen: 30
2a11:ed00::/30 maxlen: 30
2a10:2504::/30 maxlen: 30
2a11:f304::/30 maxlen: 30
2a11:ef00::/30 maxlen: 30
2a12:a6c4::/30 maxlen: 30
2a12:a144::/30 maxlen: 30
2a12:7540::/30 maxlen: 30
2a12:9f40::/30 maxlen: 30
2a12:a544::/30 maxlen: 30
2a12:a140::/30 maxlen: 30
2a11:f504::/30 maxlen: 30
2a12:a6c0::/30 maxlen: 30
2a11:f100::/30 maxlen: 30
2a12:72c0::/30 maxlen: 30
2a12:a240::/30 maxlen: 30
2a12:a1c4::/30 maxlen: 30
2a12:a744::/30 maxlen: 30
2a12:9ec0::/30 maxlen: 30
2a12:74c0::/30 maxlen: 30
2a12:7244::/30 maxlen: 30
2a11:fb04::/30 maxlen: 30
2a12:a640::/30 maxlen: 30
2a10:1c84::/30 maxlen: 30
2a11:f904::/30 maxlen: 30
2a12:7444::/30 maxlen: 30
2a12:a244::/30 maxlen: 30
2a12:a1c0::/30 maxlen: 30
2a12:a740::/30 maxlen: 30
2a10:1c80::/30 maxlen: 30
2a12:72c4::/30 maxlen: 30
2a12:7440::/30 maxlen: 30
2a11:f900::/30 maxlen: 30
2a11:fb00::/30 maxlen: 30
2a12:74c4::/30 maxlen: 30
2a12:9ec4::/30 maxlen: 30
2a12:73c0::/30 maxlen: 30
2a09:9f40::/30 maxlen: 30
2a11:f300::/30 maxlen: 30
2a10:2500::/30 maxlen: 30
2a12:a2c4::/30 maxlen: 30
2a12:7344::/30 maxlen: 30
2a11:ed04::/30 maxlen: 30
2a12:a644::/30 maxlen: 30
2a12:a540::/30 maxlen: 30
2a11:f104::/30 maxlen: 30
2a11:f500::/30 maxlen: 30
2a12:7544::/30 maxlen: 30
2a12:9f44::/30 maxlen: 30
2a12:7240::/30 maxlen: 30
2a11:ef04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5e:7d:d7:45:b8:3e:e2:49:a7:9d:12:d1:36:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62becc4ba8a4d52498a0d2983a68b61383aa7fd7
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b08b1b269214b4631c9caad0974ff2f904ff9b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:a8:b3:da:7b:cb:a7:68:fc:b0:a1:04:18:
73:71:af:1d:b7:1b:25:d4:84:c8:8e:d5:ed:47:6e:
64:6a:dc:33:e8:4e:ff:4e:1a:b9:4d:eb:e8:26:af:
07:ef:4c:7c:7b:3e:df:7f:9d:5c:c0:74:22:ea:20:
f5:58:6e:19:fb:07:4f:1f:78:0d:4b:e1:6c:e1:9d:
d1:63:20:50:b2:6c:3e:2c:94:2e:28:a1:1f:22:e6:
72:75:eb:03:05:3b:14:b5:73:56:ce:4e:db:e8:0e:
f2:cb:dd:ff:fe:ed:b7:b7:77:e2:d3:6f:ea:e4:3a:
36:21:98:d3:cd:97:8e:07:f9:86:a3:b0:c8:a6:d7:
28:96:6e:34:7d:fb:50:e6:78:6d:38:2b:ed:f0:fc:
64:53:a3:9d:f7:f1:62:17:fd:11:f6:66:31:cf:03:
3c:63:69:23:56:9f:48:96:49:43:34:1b:86:1f:66:
4a:d4:70:30:f1:79:27:af:57:92:21:40:95:7c:f0:
51:59:16:c2:7d:63:15:cc:d7:ad:f6:22:94:68:b0:
37:f6:46:7f:97:fc:de:e4:16:81:cd:3c:77:98:1e:
28:a7:c1:54:25:f7:f4:84:56:1e:e3:e6:12:54:91:
f3:1d:82:cb:5a:fd:1d:0d:2a:66:a3:a1:55:a3:de:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:1B:26:92:14:B4:63:1C:9C:AA:D0:97:4F:F2:F9:04:FF:9B:19
X509v3 Authority Key Identifier:
keyid:62:BE:CC:4B:A8:A4:D5:24:98:A0:D2:98:3A:68:B6:13:83:AA:7F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/sIsbJpIUtGMcnKrQl0_y-QT_mxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9c493b-417b-4af6-9f43-2ff14c218719/1/Yr7MS6ik1SSYoNKYOmi2E4Oqf9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9f40::/29
2a10:1c80::/29
2a10:2500::/29
2a11:ed00::/29
2a11:ef00::/29
2a11:f100::/29
2a11:f300::/29
2a11:f500::/29
2a11:f900::/29
2a11:fb00::/29
2a12:7240::/29
2a12:72c0::/29
2a12:7340::/29
2a12:73c0::/29
2a12:7440::/29
2a12:74c0::/29
2a12:7540::/29
2a12:9ec0::/29
2a12:9f40::/29
2a12:a140::/29
2a12:a1c0::/29
2a12:a240::/29
2a12:a2c0::/29
2a12:a540::/29
2a12:a640::/29
2a12:a6c0::/29
2a12:a740::/29
Signature Algorithm: sha256WithRSAEncryption
5c:95:0c:78:ae:8d:5d:96:5a:7f:52:15:bc:38:cc:56:c6:65:
d3:6a:d7:f4:52:5f:51:76:f4:71:5d:67:79:d7:97:2d:e3:17:
ea:e5:a2:2e:cd:23:7a:7c:82:64:2f:68:90:ea:66:5f:ef:f9:
1c:2c:f4:6a:2e:e7:47:b5:18:27:1c:12:cf:59:a9:d3:57:f3:
78:fe:85:4b:34:47:d1:db:45:19:02:2c:7f:b6:f6:3c:13:1f:
0a:8a:62:20:02:27:25:9e:bb:df:3c:cb:d8:65:1f:c0:ff:67:
f9:9d:6b:8b:61:5b:45:f6:5c:ad:f4:14:50:0c:24:61:fd:2a:
7f:14:68:8c:65:10:5e:9e:76:4c:22:7f:22:af:0c:3a:ff:c2:
4b:87:1a:8e:25:b0:11:6b:77:d9:f5:a3:cc:dd:8d:ab:ed:07:
b5:17:70:d5:18:94:c8:84:cc:67:0c:a5:44:c4:2e:95:c6:d0:
02:58:47:f8:07:c1:72:17:48:98:e6:c5:f4:82:b3:4e:db:ef:
33:0c:ed:30:80:63:f2:78:e5:2b:b8:d9:65:00:21:0b:39:e4:
13:e1:8f:0b:57:9f:54:eb:72:ff:b7:36:39:40:90:f4:44:a7:
98:c8:b1:67:ee:a3:52:22:95:62:9b:12:94:47:e9:6f:0e:8f:
d0:2c:09:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:41 2025 by rpki-client