Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8gDZUpNt4LVRGhYRcKNMukAV11Q.roa
File: 8gDZUpNt4LVRGhYRcKNMukAV11Q.roa (raw, json)
Hash identifier: u+JHwfcHN0gdySegDhsJjjpChenvOTXCRI2zzM1YyuU=
Subject key identifier: F2:00:D9:52:93:6D:E0:B5:51:1A:16:11:70:A3:4C:BA:40:15:D7:54
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6BCCE513587A0A208366DF342379
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8gDZUpNt4LVRGhYRcKNMukAV11Q.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215225
IP address blocks: 2a12:bec4:1120::/48 maxlen: 48
2a12:bec4:1121::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:cc:e5:13:58:7a:0a:20:83:66:df:34:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f200d952936de0b5511a161170a34cba4015d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:a3:ed:d1:75:67:62:9c:e2:34:a4:cd:72:
fd:e6:f0:6b:be:09:57:9d:ee:6c:70:e3:82:0e:fe:
07:e6:e7:92:f1:8c:76:de:30:fa:37:d1:c0:08:d4:
fd:4a:75:4a:bf:e9:8d:76:c4:f7:72:cc:b7:5f:8a:
cc:32:70:b1:02:51:21:fc:15:e3:7f:61:ab:c8:e2:
32:2c:f8:78:16:a1:2b:ba:13:e5:09:58:a0:74:49:
ca:97:68:79:b3:4a:22:5a:b1:d3:9f:89:6f:26:73:
e2:ba:c1:7e:87:a5:36:8c:15:bb:e0:c4:02:b0:25:
2f:87:c8:b8:ab:49:d8:c9:f5:9c:42:e2:d5:64:77:
d1:32:b1:fd:e9:14:47:50:02:96:7a:97:57:af:84:
9a:14:fb:f0:3a:f7:11:1f:ff:30:b9:61:6c:85:52:
fb:77:6a:fb:02:d6:fb:fb:87:6c:d8:31:ed:a3:66:
fd:ae:6b:f6:db:d8:95:13:f7:38:e7:1d:9a:c1:2f:
aa:5d:13:ee:52:dc:9d:7e:3a:4e:1c:ea:c0:f7:3b:
df:55:4e:f7:af:e2:f2:79:80:23:5c:bf:f9:b8:bb:
19:1e:c4:38:ba:5c:b1:83:aa:1b:52:24:47:77:5f:
c7:06:b8:e5:74:17:bd:b9:81:94:bf:36:05:9d:0d:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:D9:52:93:6D:E0:B5:51:1A:16:11:70:A3:4C:BA:40:15:D7:54
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8gDZUpNt4LVRGhYRcKNMukAV11Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1120::/47
Signature Algorithm: sha256WithRSAEncryption
b4:05:e9:4a:3b:18:6e:4c:0f:13:5c:45:f5:e4:b5:a7:e0:96:
d9:a5:fd:bf:86:3f:fa:69:41:c2:93:00:a0:9a:4a:ea:d4:ba:
4f:b3:b1:2b:47:cc:74:59:f5:f3:68:82:50:dd:ed:68:62:28:
f2:70:7f:e3:00:a8:1f:cf:a7:c5:53:70:85:be:c9:6e:94:97:
30:bb:88:bc:98:2c:3b:bd:ed:55:c3:ee:9c:4c:fc:84:c7:4a:
c0:0b:18:8e:13:ad:cb:17:ea:50:9c:83:84:5f:9f:25:94:4b:
15:0f:3b:27:cc:00:75:81:9f:f6:4f:6c:9b:98:ae:f1:ad:be:
01:b8:26:6f:84:5a:39:80:f2:41:d9:69:ce:08:f3:6d:5c:67:
aa:e1:d9:57:ba:e7:21:d1:df:3b:fc:4a:55:10:01:81:f3:c9:
bd:cc:70:85:9e:15:88:b5:1c:f8:12:a0:1d:08:1b:0f:cf:77:
45:2e:4b:1a:de:95:76:c6:78:38:77:c5:19:24:9c:95:f7:6c:
7b:ac:0d:23:7b:26:3c:9e:b7:86:b6:40:1f:13:ac:fa:c0:c1:
1f:51:96:28:b1:72:4e:0b:3e:6d:8b:aa:b6:d2:3c:7d:ce:36:
fc:5b:2e:c3:9c:ff:6c:db:52:56:3d:53:56:86:d0:4d:c8:7d:
b2:d0:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:03:14 2025 by rpki-client