Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3EzhdH5pUXLFa36aG8mc-0-OR5g.roa
File: 3EzhdH5pUXLFa36aG8mc-0-OR5g.roa (raw, json)
Hash identifier: yLX99wIGUH+F1AJpLE0Qaj6zZqhHIJiFRlZ8cygwtrg=
Subject key identifier: DC:4C:E1:74:7E:69:51:72:C5:6B:7E:9A:1B:C9:9C:FB:4F:8E:47:98
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01938653A999EB1C2E20BD7BDF32EDD87247
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3EzhdH5pUXLFa36aG8mc-0-OR5g.roa
Signing time: Mon 02 Dec 2024 07:44:10 +0000
ROA not before: Mon 02 Dec 2024 07:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214346
IP address blocks: 2a12:bec4:16a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:53:a9:99:eb:1c:2e:20:bd:7b:df:32:ed:d8:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 2 07:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc4ce1747e695172c56b7e9a1bc99cfb4f8e4798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:ae:34:9f:d9:a1:c4:73:98:56:a8:d4:bc:
fc:e7:ec:90:06:37:82:b9:d9:c5:22:55:39:57:6f:
47:12:d0:e8:ed:f7:51:8e:f5:0c:be:14:08:77:72:
6f:8c:b1:c9:ef:f4:b9:6f:82:c5:ea:a1:07:f9:75:
b9:15:88:1d:5b:e0:a0:9e:8b:85:bc:af:99:32:8d:
d7:ed:84:ea:2c:1b:df:0f:b2:0e:ab:93:cc:fa:5d:
aa:c4:32:93:03:3e:e7:7e:a4:f6:ca:b7:3f:1d:40:
4a:cc:5f:21:27:7a:5d:19:af:3a:1b:95:b6:32:a8:
f0:d7:27:91:31:de:1a:c9:4c:d9:ad:28:a3:b1:9d:
3c:45:48:2c:b8:3f:22:38:69:c9:29:80:47:a7:55:
6e:89:12:4e:d8:99:fc:e9:b2:21:78:79:e7:24:a0:
5b:1d:e0:10:9c:cb:6c:6a:2e:a0:72:80:33:85:13:
ac:7e:d9:24:13:16:68:5b:35:f3:7f:e9:f5:22:21:
2f:bf:9d:a5:0f:9d:67:e7:62:9b:97:ae:0f:a6:0b:
31:29:7f:11:5f:18:f6:bd:da:f9:ca:d5:e7:3e:6d:
1a:3b:ee:85:81:8e:b7:17:87:14:b5:65:48:64:ca:
2e:db:f0:89:23:42:15:40:be:26:9a:f3:b3:6c:85:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:E1:74:7E:69:51:72:C5:6B:7E:9A:1B:C9:9C:FB:4F:8E:47:98
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/3EzhdH5pUXLFa36aG8mc-0-OR5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16a0::/44
Signature Algorithm: sha256WithRSAEncryption
33:22:98:2d:e1:2b:bb:37:2d:f3:15:f5:82:f8:ae:52:55:49:
aa:11:bc:73:3d:1a:f6:5b:90:77:8e:34:2a:93:22:c3:55:26:
c4:21:f2:84:86:a9:69:dc:9c:4b:5b:67:75:6a:2c:0b:55:33:
a4:fa:fd:1b:1b:8b:20:e3:9d:f0:fd:65:1b:8d:8b:5a:1f:19:
27:be:b8:c6:f3:41:b2:29:d9:e8:78:a2:d1:73:2a:12:77:b0:
49:b5:30:f2:24:c7:a7:93:2c:db:9b:3c:cc:60:70:78:7a:ee:
16:f5:59:83:4c:9f:95:7e:5c:2f:64:b8:cc:77:d6:9a:50:89:
a5:14:e0:a5:e5:f5:b5:ee:24:cc:97:7b:98:f7:ba:ac:83:62:
26:8d:56:6a:dd:cf:ab:a2:9f:e3:c3:40:4d:e1:20:3d:01:54:
18:15:2b:6d:2d:94:5f:9f:5c:70:bf:df:8e:ca:9f:a5:64:bf:
00:e4:e3:78:9c:61:4a:dc:be:32:01:b5:0a:5a:67:97:dd:d4:
e8:a0:13:ce:13:ff:27:8b:26:a2:53:77:38:74:a0:0c:c2:a9:
30:fd:bc:eb:60:36:4c:7e:eb:01:81:6c:d5:c2:53:21:86:e2:
58:07:7b:17:97:81:8e:be:4f:66:08:f0:5a:8c:81:25:b6:ad:
28:39:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:00 2025 by rpki-client