Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2as7I51_GjkvwOs84wDDPY35808.roa
File: 2as7I51_GjkvwOs84wDDPY35808.roa (raw, json)
Hash identifier: JNfJnAGZmDxmXMFGVDG83zzPNc7neijJYtcw7gKZ3Hk=
Subject key identifier: D9:AB:3B:23:9D:7F:1A:39:2F:C0:EB:3C:E3:00:C3:3D:8D:F9:F3:4F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6DB431DED614EAF669D92C2773BB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2as7I51_GjkvwOs84wDDPY35808.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215283
IP address blocks: 2a12:bec4:1100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6d:b4:31:de:d6:14:ea:f6:69:d9:2c:27:73:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9ab3b239d7f1a392fc0eb3ce300c33d8df9f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:3c:d4:f1:76:1b:e0:2d:35:f6:40:2e:7d:
96:08:a3:8b:be:a4:b9:b9:0e:73:e1:27:96:ad:35:
24:66:1e:08:78:89:a9:9c:ab:7e:ed:9c:51:be:d4:
43:fa:dc:42:be:a8:8a:45:93:b7:b0:03:f2:0c:6d:
49:a6:49:3d:b1:4d:0e:87:6a:e5:fd:7b:5a:ad:db:
6f:25:6f:08:dc:6d:9b:1a:a7:33:14:34:a2:72:2f:
c2:ab:60:27:aa:f0:ea:ba:4b:cc:eb:c0:cd:97:ca:
70:ad:35:94:b1:b1:13:f1:b6:1d:47:93:d3:74:8e:
bd:8d:d0:7f:d9:16:6b:84:8e:81:b7:c3:c4:96:bf:
8e:66:fc:79:9c:45:f5:39:0c:2c:64:31:17:32:80:
c2:46:4f:dc:c4:17:c8:64:4d:26:b9:1e:e3:53:23:
0d:8c:af:e2:36:ac:ef:08:f5:d3:d0:95:23:0c:7f:
84:0f:aa:c3:15:cf:80:5b:31:6d:e7:e1:b7:57:91:
6f:d0:85:8e:17:ed:67:10:9f:86:58:27:53:8b:48:
3c:a1:9c:3d:c8:fd:04:4d:17:09:ad:60:98:1a:89:
53:80:01:17:ef:c0:31:01:9b:ab:ad:40:05:b7:f6:
53:39:33:0b:21:f4:f1:52:6e:2c:b1:db:e2:fa:76:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:3B:23:9D:7F:1A:39:2F:C0:EB:3C:E3:00:C3:3D:8D:F9:F3:4F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2as7I51_GjkvwOs84wDDPY35808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1100::/44
Signature Algorithm: sha256WithRSAEncryption
23:dd:b7:7d:30:4e:01:aa:ef:94:ea:ad:7b:77:e0:22:fd:62:
20:97:8a:52:f9:54:bf:3c:9f:fd:95:50:a1:e2:13:90:eb:99:
dd:38:7b:16:85:91:3d:61:75:cf:59:47:e7:67:04:ca:e8:44:
ec:6b:0d:bb:97:88:fd:39:69:ae:4a:6d:f9:19:a2:fc:ac:bc:
c8:4a:11:5b:46:59:f8:47:0f:99:c4:3f:e0:b7:29:ac:e4:f9:
64:b4:23:2b:1f:ff:b0:65:d8:90:34:86:35:12:56:d2:5a:10:
32:50:5c:b7:fd:16:eb:10:a2:3b:46:8f:f3:c1:1c:b5:3f:2f:
53:a3:22:f9:2e:7b:9d:3c:2c:b2:49:ef:8b:8b:78:67:bd:8f:
5a:12:37:bd:25:81:f5:d3:0c:d9:87:ac:ce:62:bf:0a:69:38:
2d:11:48:cc:4a:dd:22:22:f6:06:cf:7f:49:a0:08:77:ac:59:
7e:53:6a:95:61:a8:d5:aa:7a:41:73:6b:31:ba:cc:42:8e:94:
17:a9:15:53:2b:35:0f:a7:e3:75:94:4c:20:e4:f6:4d:f5:01:
5e:4c:90:27:fe:4c:1d:bc:af:b8:67:47:42:bb:23:62:de:e2:
aa:fa:34:1b:95:1a:05:f5:48:7e:e7:c6:29:91:ed:3c:fd:11:
bc:00:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:02 2025 by rpki-client