Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/2TnqZvmmysxhyiNZrk30acF9SlI.roa
File: 2TnqZvmmysxhyiNZrk30acF9SlI.roa (raw, json)
Hash identifier: WiwIIXJhkAErUqVwl7rpQhJM1V3EKt+e61vZ4TyGts0=
Subject key identifier: D9:39:EA:66:F9:A6:CA:CC:61:CA:23:59:AE:4D:F4:69:C1:7D:4A:52
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 0194B672394F85F612CBF31870928E54982E
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/2TnqZvmmysxhyiNZrk30acF9SlI.roa
Signing time: Thu 30 Jan 2025 09:02:06 +0000
ROA not before: Thu 30 Jan 2025 09:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211944
IP address blocks: 2a12:7a40:1111::/48 maxlen: 48
2a12:7a40:9902::/48 maxlen: 48
2a12:7a40:9912::/48 maxlen: 48
2a12:7a40:9922::/48 maxlen: 48
2a12:7a40:9932::/48 maxlen: 48
2a12:7a40:9942::/48 maxlen: 48
2a12:7a40:9952::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:72:39:4f:85:f6:12:cb:f3:18:70:92:8e:54:98:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Jan 30 09:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d939ea66f9a6cacc61ca2359ae4df469c17d4a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:ed:2c:02:2d:5b:6a:b3:f6:3e:42:0d:0c:
03:60:0a:c9:18:0c:bf:38:fd:b3:80:5c:ed:87:92:
c8:5f:b3:76:28:fd:f4:88:bc:60:ac:84:35:1b:ba:
80:da:4a:f3:de:75:e7:6f:22:3c:27:f2:b0:24:e1:
19:03:03:fe:dc:ed:c7:0b:42:ee:c1:92:cb:f9:85:
24:25:f2:3d:ec:0a:9f:78:19:5e:ed:74:53:6e:c9:
53:6d:22:3c:72:b8:7d:f6:26:08:3e:d2:54:da:f9:
36:ed:b9:5b:03:e8:bf:9d:e6:d3:dd:6f:da:fd:d2:
66:44:e1:7e:76:75:88:82:52:4b:a6:58:78:08:49:
7b:b8:d1:9c:8e:5e:0a:c7:ea:39:5f:f0:27:f0:c2:
34:b1:9a:f3:86:96:1a:e7:3b:fe:cd:e5:70:fa:37:
99:c2:c0:6e:6c:72:55:fd:ee:1b:35:e9:07:01:f0:
fe:9f:ca:ac:ad:b9:ac:42:eb:41:b9:d1:6a:07:f6:
f6:d8:24:cd:c0:6b:76:ea:6d:ac:da:a0:ae:50:3f:
eb:5f:8c:0d:b4:c1:45:bf:5a:41:df:f3:ec:37:dc:
99:f7:98:1c:2c:40:41:74:50:80:2b:fa:69:02:cd:
07:db:2c:62:a6:e0:7e:fc:c7:1f:3b:41:e2:4c:48:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:EA:66:F9:A6:CA:CC:61:CA:23:59:AE:4D:F4:69:C1:7D:4A:52
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/2TnqZvmmysxhyiNZrk30acF9SlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:1111::/48
2a12:7a40:9902::/48
2a12:7a40:9912::/48
2a12:7a40:9922::/48
2a12:7a40:9932::/48
2a12:7a40:9942::/48
2a12:7a40:9952::/48
Signature Algorithm: sha256WithRSAEncryption
bf:87:6e:50:4f:92:4c:e4:18:ce:f9:56:e2:46:5f:cd:62:70:
b1:6d:76:31:27:57:92:09:ad:ea:20:25:3a:d2:63:1a:5b:af:
23:96:ed:c4:0d:41:7d:e4:c3:18:cc:62:7a:db:65:d5:09:55:
95:45:fa:df:99:ef:ed:9a:7e:31:5f:96:d4:56:74:0b:e3:d1:
1b:f7:8f:42:b3:c0:81:05:4a:e2:ed:2e:8e:b2:e5:d9:00:47:
dc:01:9d:ed:eb:9b:cb:5e:38:2c:ed:22:a3:31:e4:34:1f:f1:
08:27:bd:b0:5a:d5:aa:a3:77:ca:c9:ec:3b:4b:2f:a6:45:d6:
0b:fa:82:c0:5e:95:48:97:0a:67:a0:6e:94:2d:e4:c0:5d:d5:
01:c2:d6:c9:a2:b0:aa:59:fb:a4:03:7a:76:0e:eb:f4:80:6e:
63:e0:1d:b6:a7:0b:d5:fb:37:3a:ae:2a:a0:23:90:75:7a:f9:
73:3b:30:f1:f8:9a:6f:60:92:73:ce:a0:e6:2b:3a:41:ed:1b:
42:ee:fc:89:2e:7c:4d:c6:f2:77:fd:aa:fd:53:13:af:87:82:
71:6a:22:57:2f:12:5b:1b:4b:35:c1:4e:1a:84:18:2d:09:97:
1f:df:69:c9:ab:5d:11:28:a9:34:4c:f0:1d:a9:91:b1:61:32:
fa:45:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:36 2025 by rpki-client