Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2UR4pZeShRfyYR_s7_P_BSKXsL0.roa
File: 2UR4pZeShRfyYR_s7_P_BSKXsL0.roa (raw, json)
Hash identifier: 7gNHpuz5pYAM6b7lBVHASOqd0RstINJrumIC78kUzB0=
Subject key identifier: D9:44:78:A5:97:92:85:17:F2:61:1F:EC:EF:F3:FF:05:22:97:B0:BD
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194A19F1BE2265C41A987D55DE7632B0CA0
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2UR4pZeShRfyYR_s7_P_BSKXsL0.roa
Signing time: Sun 26 Jan 2025 07:59:06 +0000
ROA not before: Sun 26 Jan 2025 07:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:bec4:16a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:9f:1b:e2:26:5c:41:a9:87:d5:5d:e7:63:2b:0c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 26 07:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d94478a597928517f2611feceff3ff052297b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:3a:2d:de:0f:11:12:04:e9:07:08:a6:32:
e0:dc:a3:10:e1:2c:20:42:17:61:eb:0a:7a:67:41:
df:69:ad:9c:31:51:c6:31:68:3f:0d:0f:4f:c7:40:
1b:8c:c9:97:4a:68:d1:86:f1:37:73:d0:25:c8:e0:
5e:ed:1f:98:57:e9:d1:60:a0:d9:93:5e:5c:f1:00:
8b:6b:0d:2a:0c:c5:3c:f1:95:9b:d2:54:70:6c:d3:
23:65:ee:3a:d0:48:15:c8:63:84:0a:be:47:63:26:
e7:d0:c2:08:29:8b:ed:3c:c9:31:9d:85:65:b7:a1:
50:0c:f1:e7:88:78:8c:1f:35:80:62:fb:ff:ab:85:
0d:89:f5:1a:73:49:b7:27:1b:06:93:d6:e3:c1:fd:
bb:8c:55:a5:b2:63:76:02:a9:47:d4:bb:ad:23:ae:
eb:4e:76:4a:05:ca:ae:08:8f:a0:5d:e9:b1:34:ac:
c1:70:99:1b:63:5d:c6:f7:3e:ed:4b:52:31:fc:94:
2f:fc:4a:6c:0d:90:75:25:05:b3:58:95:6d:d6:24:
83:a8:00:a4:fa:71:d8:05:bc:5b:bd:bc:56:6a:60:
08:42:73:4d:99:19:2d:b0:e6:de:c0:9e:75:3d:b1:
40:d5:5d:be:7f:9e:4f:d0:b1:ec:f4:28:d1:73:64:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:78:A5:97:92:85:17:F2:61:1F:EC:EF:F3:FF:05:22:97:B0:BD
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2UR4pZeShRfyYR_s7_P_BSKXsL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16a0::/44
Signature Algorithm: sha256WithRSAEncryption
1b:e9:06:ca:09:1c:5c:bd:00:98:4c:9d:93:84:22:f1:7a:32:
48:77:69:ef:40:f2:42:10:e3:3c:09:4c:cc:2f:c2:99:2a:e5:
53:c6:ef:59:34:25:7a:ba:56:eb:ad:56:b9:c4:96:2e:31:65:
6e:c0:1c:a9:5b:58:7a:68:bb:39:1c:92:29:1d:fd:38:7a:1f:
81:31:2c:5a:4b:bf:e9:63:f1:0c:bd:9e:0f:da:ce:b4:fb:3a:
fd:16:18:f3:6f:17:0a:7b:d2:f5:a0:ee:f6:6d:c9:0e:48:d9:
38:f9:03:85:80:b6:d4:28:bb:96:3d:e3:05:a0:37:4b:b6:59:
ca:cb:2e:af:d4:c8:ff:74:c1:dd:34:8f:a6:fb:db:df:ae:bf:
b2:18:2a:3b:75:13:09:16:43:72:43:4b:ab:a2:ae:55:01:f7:
aa:52:d7:bf:03:92:98:78:28:d7:31:65:af:2c:70:ad:76:94:
70:7a:2c:ec:c5:92:73:e4:56:ec:42:d6:79:54:7d:5f:e6:d9:
5f:a7:43:98:ef:a0:91:eb:d7:ed:38:b3:cf:17:66:c8:32:9c:
23:66:9f:90:d5:fa:aa:36:10:eb:12:36:4b:26:11:3c:28:e2:
91:1e:ec:2d:1b:13:22:9a:d5:f8:d4:73:81:47:df:ff:4c:33:
21:b3:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:27:15 2025 by rpki-client