Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/t2p4-i0-AMgrPWWbLPjsZticI0E.roa
File: t2p4-i0-AMgrPWWbLPjsZticI0E.roa (raw, json)
Hash identifier: /e/8T+eYaFYAkJQaQBKZKZelhBajXo5oP/zmVdgWK8A=
Subject key identifier: B7:6A:78:FA:2D:3E:00:C8:2B:3D:65:9B:2C:F8:EC:66:D8:9C:23:41
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 0194258ED97AB00D23E309F6FBABD31CA4AF
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/t2p4-i0-AMgrPWWbLPjsZticI0E.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208333
IP address blocks: 2a12:7a40:9905::/48 maxlen: 48
2a12:7a40:9915::/48 maxlen: 48
2a12:7a40:9925::/48 maxlen: 48
2a12:7a40:9935::/48 maxlen: 48
2a12:7a40:9945::/48 maxlen: 48
2a12:7a40:9955::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d9:7a:b0:0d:23:e3:09:f6:fb:ab:d3:1c:a4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b76a78fa2d3e00c82b3d659b2cf8ec66d89c2341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:4c:8a:47:95:c2:72:d0:40:f9:3f:ce:16:
03:48:32:63:5b:df:e1:de:09:a8:62:67:8c:bb:c8:
0c:31:37:5f:55:80:fc:c8:68:3b:2c:b2:0a:9f:4b:
03:49:a4:06:f7:96:bf:f3:13:0e:39:27:6b:81:12:
75:03:5a:2d:7f:28:9b:98:6e:a3:c2:3b:b2:94:e1:
94:ae:0d:38:7b:a6:93:44:42:45:fe:d4:c0:bc:69:
75:fe:dc:68:09:e6:d5:e5:0c:4c:45:56:1d:e2:b1:
d6:66:43:3a:df:c8:6b:dd:12:44:40:33:67:9b:67:
23:49:cb:1e:c4:00:bc:57:a7:4a:93:6b:26:ea:bb:
90:46:7c:e7:15:6b:a8:e6:ba:4d:77:c9:ba:89:1e:
68:24:db:f5:10:7a:f1:8d:61:2f:49:2b:b4:fd:b5:
22:64:5c:44:eb:0b:48:05:fe:c6:a4:09:7a:c7:c2:
ac:be:d6:d6:40:c8:16:92:74:99:b3:e7:df:13:32:
11:d7:f9:57:a1:5a:6a:42:ca:3d:2a:c3:22:6e:a3:
6c:f3:02:df:58:cd:c4:2f:b7:0c:80:97:c5:bd:e5:
e4:19:59:26:0f:5b:c6:17:ca:08:16:8b:8d:98:ac:
bb:3c:de:d1:4a:f8:65:ea:cd:fa:17:ff:5a:cb:68:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:78:FA:2D:3E:00:C8:2B:3D:65:9B:2C:F8:EC:66:D8:9C:23:41
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/t2p4-i0-AMgrPWWbLPjsZticI0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7a40:9905::/48
2a12:7a40:9915::/48
2a12:7a40:9925::/48
2a12:7a40:9935::/48
2a12:7a40:9945::/48
2a12:7a40:9955::/48
Signature Algorithm: sha256WithRSAEncryption
bb:4c:f4:86:ae:40:0b:52:b9:38:ed:a6:26:35:6b:76:df:8c:
a6:ad:7c:3b:3b:92:79:cc:3d:17:87:95:08:74:b6:18:de:12:
46:b7:88:49:b6:cb:73:95:ad:ca:dc:13:64:06:34:e5:cc:68:
a2:04:2e:0f:9f:02:89:c9:40:5b:8c:99:cf:51:e5:82:79:38:
93:69:b6:cc:df:26:d4:03:fe:2d:c6:da:9d:28:d9:ee:85:6c:
8d:70:d2:96:79:71:17:7e:fa:70:08:d6:b2:21:36:f8:de:c3:
b8:e5:04:5d:43:bb:1c:e2:cb:f6:db:e2:d7:50:dd:90:8c:f3:
f8:ed:74:cb:5f:51:00:f0:a4:14:23:73:d6:12:13:b0:38:50:
b8:29:84:5f:b6:ac:c1:c9:c9:5a:64:57:96:cc:a3:65:dd:3c:
c9:6b:f9:16:94:00:98:f2:6d:ca:c6:db:6b:ab:83:e3:cf:41:
97:5e:a9:aa:54:37:f3:73:7a:40:8b:6c:3d:7e:d7:3c:ca:af:
da:aa:93:a0:b2:4e:e3:9a:b5:25:49:fd:b1:ed:d4:ae:43:ef:
8b:4c:62:fb:f2:00:e4:04:b7:59:6e:8b:c5:47:fc:6b:c6:d3:
71:d4:4a:88:59:ac:ee:35:56:8d:c7:24:c7:6e:ad:43:8d:08:
a6:3c:26:69
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQljtl6sA0j4wn2+6vTHKSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTRhNDE5MjI1ZDVkNzlmNGExYWUxNTIwYTNiMWE1NmQ0
NTI2OGMwHhcNMjUwMTAyMDU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzZhNzhmYTJkM2UwMGM4MmIzZDY1OWIyY2Y4ZWM2NmQ4OWMyMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV9MikeVwnLQQPk/zhYDSDJjW9/h
3gmoYmeMu8gMMTdfVYD8yGg7LLIKn0sDSaQG95a/8xMOOSdrgRJ1A1otfyibmG6j
wjuylOGUrg04e6aTREJF/tTAvGl1/txoCebV5QxMRVYd4rHWZkM638hr3RJEQDNn
m2cjScsexAC8V6dKk2sm6ruQRnznFWuo5rpNd8m6iR5oJNv1EHrxjWEvSSu0/bUi
ZFxE6wtIBf7GpAl6x8KsvtbWQMgWknSZs+ffEzIR1/lXoVpqQso9KsMibqNs8wLf
WM3EL7cMgJfFveXkGVkmD1vGF8oIFouNmKy7PN7RSvhl6s36F/9ay2hW+wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFLdqePotPgDIKz1lmyz47GbYnCNBMB8GA1UdIwQY
MBaAFENUpBkiXV159KGuFSCjsaVtRSaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEt
Njg4ZDUxYTQ0NDQ4LzEvdDJwNC1pMC1BTWdyUFdXYkxQanNadGljSTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEtNjg4ZDUxYTQ0NDQ4
LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKhJ6QJkF
AwcAKhJ6QJkVAwcAKhJ6QJklAwcAKhJ6QJk1AwcAKhJ6QJlFAwcAKhJ6QJlVMA0G
CSqGSIb3DQEBCwUAA4IBAQC7TPSGrkALUrk47aYmNWt234ymrXw7O5J5zD0Xh5UI
dLYY3hJGt4hJtstzla3K3BNkBjTlzGiiBC4PnwKJyUBbjJnPUeWCeTiTabbM3ybU
A/4txtqdKNnuhWyNcNKWeXEXfvpwCNayITb43sO45QRdQ7sc4sv22+LXUN2QjPP4
7XTLX1EA8KQUI3PWEhOwOFC4KYRftqzByclaZFeWzKNl3TzJa/kWlACY8m3Kxttr
q4Pjz0GXXqmqVDfzc3pAi2w9ftc8yq/aqpOgsk7jmrUlSf2x7dSuQ++LTGL78gDk
BLdZbovFR/xrxtNx1EqIWazuNVaNxyTHbq1DjQimPCZp
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:27 2025 by rpki-client