Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1GLuVDiBFHXw-k-UfQVaBU75OCw.roa
File: 1GLuVDiBFHXw-k-UfQVaBU75OCw.roa (raw, json)
Hash identifier: wl+WB95jlcsYFmV3KVJcqisHM1Eg7Odigu9UdkuCVFc=
Subject key identifier: D4:62:EE:54:38:81:14:75:F0:FA:4F:94:7D:05:5A:05:4E:F9:38:2C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194CBDC66BE5B5C3594A308D6C0B7D94693
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1GLuVDiBFHXw-k-UfQVaBU75OCw.roa
Signing time: Mon 03 Feb 2025 12:50:06 +0000
ROA not before: Mon 03 Feb 2025 12:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213482
IP address blocks: 2a12:bec4:1780::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:dc:66:be:5b:5c:35:94:a3:08:d6:c0:b7:d9:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 3 12:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d462ee5438811475f0fa4f947d055a054ef9382c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:4e:15:03:1e:8a:0c:fb:1b:a1:4b:81:40:
97:cb:18:cf:9d:fd:7a:8a:1b:5b:bf:4f:3e:f7:83:
62:16:56:fb:51:2e:4b:64:34:03:93:c9:12:d4:92:
e5:86:ae:5d:f0:b8:f8:29:df:ae:0e:3a:b2:43:f0:
fc:69:b3:81:c0:b9:ea:18:18:a4:f1:bf:f2:77:25:
93:d6:52:85:45:b7:1f:68:43:95:6f:59:30:cc:a4:
d9:3a:ff:47:fc:b4:55:ba:26:d2:88:04:6f:3a:4d:
c3:4d:d1:72:c0:29:32:1b:2c:33:00:52:21:a7:07:
22:d4:29:b5:6e:ed:c1:d5:3f:1c:a3:0c:18:8c:ba:
fa:b1:9c:6d:0e:2a:7e:24:39:63:e5:aa:4d:c6:df:
b9:c0:4c:74:43:7f:d2:39:14:15:33:86:8d:6b:2c:
25:9d:dc:29:a5:e0:ba:e6:82:66:39:9f:56:78:3a:
55:c5:58:16:e8:11:cd:a7:a0:53:c2:f1:7f:03:4b:
be:a7:1a:a0:86:18:aa:3f:4f:f9:5f:86:5c:34:cb:
82:dd:b4:db:b4:e7:40:02:e1:27:d6:02:a9:9a:6f:
09:2a:40:80:0c:1f:09:a8:08:cb:9a:f3:6d:7c:77:
5a:bd:6a:a6:60:eb:2b:1d:a1:62:f9:0f:f1:56:68:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:EE:54:38:81:14:75:F0:FA:4F:94:7D:05:5A:05:4E:F9:38:2C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1GLuVDiBFHXw-k-UfQVaBU75OCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1780::/44
Signature Algorithm: sha256WithRSAEncryption
9f:c8:3d:01:ac:88:1b:60:ba:b5:e5:c2:e6:7f:eb:3c:98:10:
40:e3:23:68:ae:90:f6:d7:dd:27:91:ab:97:f0:6c:c8:38:49:
d2:2d:2b:b1:1c:0b:6d:fa:85:ac:07:2a:39:d5:a4:9b:7a:57:
53:fa:39:19:2f:6a:0e:84:79:01:e6:0b:a1:e1:44:59:ed:cd:
c0:36:ee:9d:45:50:76:c9:a6:4f:8f:0a:fd:ff:bf:88:13:77:
e0:e9:92:c3:f9:e0:7c:83:f7:b2:d4:03:b1:b8:07:95:ab:1e:
9d:4c:c9:e6:8c:69:91:b6:db:04:ae:ec:59:be:9f:25:4e:9b:
15:5f:cc:3c:08:da:95:6d:48:76:df:93:9e:03:39:f8:44:4b:
50:e2:f9:e3:28:f8:23:ee:b6:e7:22:76:53:b3:98:92:21:dd:
75:f4:58:67:50:0a:6a:08:77:ae:85:62:fd:28:56:28:9f:6f:
ae:03:39:b3:6b:34:ff:80:e0:ee:1e:f1:a3:fe:b8:08:e4:72:
00:50:dd:3a:a2:5e:bf:77:ac:39:ca:55:8c:fa:b0:21:90:97:
33:f7:d6:d1:73:f0:cf:73:9a:49:36:b8:30:42:35:55:ad:40:
1b:2c:33:33:37:60:c6:d5:3e:ab:75:c0:2f:f9:16:4b:7a:9e:
82:1a:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:03:12 2025 by rpki-client