Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5ONFYuAKbmRj-pgfZY7AvVk04vE.roa
File: 5ONFYuAKbmRj-pgfZY7AvVk04vE.roa (raw, json)
Hash identifier: PZWYbflyM22zaLZ4dNJdnYPYEo7v/uh7b2RqHFCjXK4=
Subject key identifier: E4:E3:45:62:E0:0A:6E:64:63:FA:98:1F:65:8E:C0:BD:59:34:E2:F1
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6B364B716076E0E74A778DC250CA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5ONFYuAKbmRj-pgfZY7AvVk04vE.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214980
IP address blocks: 2a12:bec4:1240::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:36:4b:71:60:76:e0:e7:4a:77:8d:c2:50:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4e34562e00a6e6463fa981f658ec0bd5934e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:c5:1b:d8:eb:26:a6:4f:04:67:57:81:4f:
3d:11:89:e4:89:75:ba:4a:0e:87:ec:37:91:a9:fa:
bb:b2:c9:52:4a:67:80:58:a0:01:67:84:9c:a3:81:
0b:c2:d1:e1:b3:98:8e:c4:35:9e:d1:5c:4c:30:67:
de:03:46:68:22:40:d1:58:96:9c:a3:c8:5f:6e:ca:
0a:f3:c3:58:41:f1:51:7d:c9:b5:c2:32:6e:91:a5:
97:ef:44:16:0e:cc:66:d1:7b:df:67:1d:69:a6:47:
85:88:90:89:0b:ac:80:75:a8:3d:ba:d2:60:a7:1f:
d8:a4:dc:13:c0:2b:ec:44:4a:fc:31:6a:7a:a0:9c:
ae:54:98:0c:c5:08:35:26:9d:ec:c6:cf:4c:69:d7:
fd:fb:b4:94:64:ce:00:84:0d:ce:30:46:93:3a:bd:
0b:b5:9b:28:17:57:70:e9:a7:6c:5a:db:b9:79:1e:
83:2f:2b:96:1c:f7:28:74:d7:7f:af:63:fc:93:fc:
ba:89:1c:a8:e6:ac:9e:44:1c:d7:9b:74:f4:c8:e0:
84:2d:45:5b:69:d2:a5:2e:33:df:1c:2e:56:9e:cd:
99:e8:45:f1:9a:63:5a:b9:5f:7b:22:d1:02:dc:a3:
0e:74:b3:44:7d:61:b9:2b:60:26:b0:e6:d1:8a:3b:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:45:62:E0:0A:6E:64:63:FA:98:1F:65:8E:C0:BD:59:34:E2:F1
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5ONFYuAKbmRj-pgfZY7AvVk04vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1240::/44
Signature Algorithm: sha256WithRSAEncryption
a5:5d:fc:43:4b:e1:d6:18:8d:98:23:84:bd:0c:91:e0:9e:30:
48:1d:29:21:a1:f6:0b:46:86:37:b7:bd:5d:81:6b:99:cb:b3:
00:d5:ed:a1:fc:a6:6a:3b:17:ed:cc:d3:77:fe:bf:de:0e:87:
69:75:53:3e:2d:4d:6d:4b:9a:cf:7d:c4:35:f7:67:0c:df:08:
63:9c:2c:fa:b5:c1:16:0f:48:83:be:4a:28:d6:c7:07:33:65:
92:f6:25:b3:ca:68:8c:13:d4:5c:64:4e:86:e3:ce:89:72:5c:
14:12:29:a6:d1:e0:5c:57:ef:97:c2:7e:d4:a8:3d:f6:55:1e:
68:23:81:56:1b:64:dc:dd:f7:c6:c0:4e:c9:7f:73:73:42:45:
22:73:ac:9e:36:2c:34:a6:23:a1:5f:a8:8a:2c:2d:e4:b0:5a:
78:c2:8a:b6:4a:13:8f:58:b3:3c:ed:23:fd:c6:a0:14:b6:09:
61:70:9c:f3:b6:a1:47:ad:83:d2:ac:bd:69:62:84:7b:ad:98:
f2:77:8d:7a:d9:bc:1b:ff:ee:e6:52:83:49:d3:a7:8e:10:d6:
17:28:b4:c9:f6:a5:cb:27:4b:9e:1a:f0:c6:2c:98:0e:94:da:
d2:da:68:6a:22:9c:7f:8a:13:4a:7c:75:6d:d7:ed:2c:25:5e:
e2:15:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:31:46 2025 by rpki-client