Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/SFaGChEcecBfMkYfUdNCUJpmOZs.roa
File: SFaGChEcecBfMkYfUdNCUJpmOZs.roa (raw, json)
Hash identifier: urAyNSsYssS08ZQ9VO9nXj8k0R3NhqQ1uecoM5zn4Xg=
Subject key identifier: 48:56:86:0A:11:1C:79:C0:5F:32:46:1F:51:D3:42:50:9A:66:39:9B
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 0194258ED9EB22AC3200AB8C245756438792
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/SFaGChEcecBfMkYfUdNCUJpmOZs.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208471
IP address blocks: 2a12:7a40:9907::/48 maxlen: 48
2a12:7a40:9917::/48 maxlen: 48
2a12:7a40:9927::/48 maxlen: 48
2a12:7a40:9937::/48 maxlen: 48
2a12:7a40:9947::/48 maxlen: 48
2a12:7a40:9957::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d9:eb:22:ac:32:00:ab:8c:24:57:56:43:87:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4856860a111c79c05f32461f51d342509a66399b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:e0:48:81:8b:27:58:f3:03:21:85:b1:d7:
f8:42:b0:70:5a:27:d0:08:0f:31:7b:b5:38:0b:c4:
a4:30:21:be:a0:97:49:98:39:84:4b:f2:3d:4c:3b:
b0:d7:64:96:65:1d:bd:d4:6d:ce:8a:04:a0:1d:5a:
32:4e:a1:4c:1d:44:07:39:3e:02:3b:56:a9:52:c1:
08:63:e4:3e:cd:14:ab:20:a2:77:72:8c:a8:e6:77:
bc:e4:b6:36:b3:51:da:47:a4:ba:47:82:70:92:76:
b9:11:f9:08:3f:d5:3b:ae:89:0a:dd:cb:5e:9e:aa:
9d:0e:db:26:01:98:8a:0e:a4:9e:73:4c:ed:c0:1f:
e0:4d:9d:38:f9:2b:bd:41:db:fd:62:85:86:4a:9f:
5d:00:1e:b5:44:52:3f:db:5b:12:6e:f0:39:eb:4e:
c9:41:3e:54:bb:61:a4:3e:9b:a0:fd:b3:30:b5:ac:
45:f7:c2:39:8d:ab:28:18:64:64:66:de:e4:60:1a:
43:6f:83:cb:85:ad:27:bd:a2:de:32:27:9f:44:3c:
1f:45:3a:6a:ac:ca:73:a1:dc:7e:ab:3b:b0:54:bd:
08:60:6b:37:4e:e7:1b:8c:76:5c:70:98:0e:66:c2:
3e:3e:7a:cd:2f:f4:c5:bc:cc:9d:61:8e:01:ba:35:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:86:0A:11:1C:79:C0:5F:32:46:1F:51:D3:42:50:9A:66:39:9B
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/SFaGChEcecBfMkYfUdNCUJpmOZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:9907::/48
2a12:7a40:9917::/48
2a12:7a40:9927::/48
2a12:7a40:9937::/48
2a12:7a40:9947::/48
2a12:7a40:9957::/48
Signature Algorithm: sha256WithRSAEncryption
9a:a0:b9:d3:41:68:7b:b8:85:c1:22:7e:9c:99:d9:79:87:8d:
90:b0:c0:17:69:ad:3a:60:0c:61:d9:20:55:39:14:96:94:e2:
7a:45:7b:e9:80:46:d8:46:fd:c1:aa:1b:df:c8:ba:35:1e:51:
37:06:8f:af:07:49:cb:9f:f1:f6:d2:42:e9:e5:28:b2:3b:1f:
34:af:bc:12:a1:e0:20:67:85:b6:f8:43:ec:fe:82:1c:b2:4a:
60:b8:6d:8d:9e:4d:47:9c:03:6e:22:18:73:8d:a9:4f:aa:94:
72:89:78:c6:e6:67:14:df:1d:8a:d5:7d:2c:a2:de:8a:52:26:
86:07:e0:b3:a7:e5:f0:f4:56:29:5e:5b:18:9c:be:d2:8b:36:
5d:d2:e6:c1:69:52:b9:38:47:fc:7f:1e:cb:fe:1d:66:31:56:
c1:c2:4b:7e:37:49:31:d1:33:b0:43:6a:db:61:53:24:55:9b:
a1:8a:51:fb:0a:68:6b:83:9d:32:04:9c:ee:05:e3:de:56:8e:
e2:28:13:e6:33:56:15:fe:91:a7:f8:43:b2:e9:59:08:66:47:
08:2f:c3:8b:0a:1f:2a:37:2c:31:0b:0f:8d:65:a5:c2:e9:4d:
6a:4f:59:cf:80:77:7c:d9:a8:6b:86:ae:18:a3:ac:ff:fc:35:
ef:1f:7c:30
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQljtnrIqwyAKuMJFdWQ4eSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTRhNDE5MjI1ZDVkNzlmNGExYWUxNTIwYTNiMWE1NmQ0
NTI2OGMwHhcNMjUwMTAyMDU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODU2ODYwYTExMWM3OWMwNWYzMjQ2MWY1MWQzNDI1MDlhNjYzOTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF3gSIGLJ1jzAyGFsdf4QrBwWifQ
CA8xe7U4C8SkMCG+oJdJmDmES/I9TDuw12SWZR291G3OigSgHVoyTqFMHUQHOT4C
O1apUsEIY+Q+zRSrIKJ3coyo5ne85LY2s1HaR6S6R4Jwkna5EfkIP9U7rokK3cte
nqqdDtsmAZiKDqSec0ztwB/gTZ04+Su9Qdv9YoWGSp9dAB61RFI/21sSbvA5607J
QT5Uu2GkPpug/bMwtaxF98I5jasoGGRkZt7kYBpDb4PLha0nvaLeMiefRDwfRTpq
rMpzodx+qzuwVL0IYGs3TucbjHZccJgOZsI+PnrNL/TFvMydYY4BujXMYQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFEhWhgoRHHnAXzJGH1HTQlCaZjmbMB8GA1UdIwQY
MBaAFENUpBkiXV159KGuFSCjsaVtRSaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEt
Njg4ZDUxYTQ0NDQ4LzEvU0ZhR0NoRWNlY0JmTWtZZlVkTkNVSnBtT1pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEtNjg4ZDUxYTQ0NDQ4
LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKhJ6QJkH
AwcAKhJ6QJkXAwcAKhJ6QJknAwcAKhJ6QJk3AwcAKhJ6QJlHAwcAKhJ6QJlXMA0G
CSqGSIb3DQEBCwUAA4IBAQCaoLnTQWh7uIXBIn6cmdl5h42QsMAXaa06YAxh2SBV
ORSWlOJ6RXvpgEbYRv3BqhvfyLo1HlE3Bo+vB0nLn/H20kLp5SiyOx80r7wSoeAg
Z4W2+EPs/oIcskpguG2Nnk1HnANuIhhzjalPqpRyiXjG5mcU3x2K1X0sot6KUiaG
B+Czp+Xw9FYpXlsYnL7SizZd0ubBaVK5OEf8fx7L/h1mMVbBwkt+N0kx0TOwQ2rb
YVMkVZuhilH7Cmhrg50yBJzuBePeVo7iKBPmM1YV/pGn+EOy6VkIZkcIL8OLCh8q
NywxCw+NZaXC6U1qT1nPgHd82ahrhq4Yo6z//DXvH3ww
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:40:04 2025 by rpki-client