Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/A9TxnVKR1T4-h0Mf3T0hhFDRGKg.roa
File: A9TxnVKR1T4-h0Mf3T0hhFDRGKg.roa (raw, json)
Hash identifier: hqyqvXPqV7zIPne51N9KyWRgiJvKcfiUsIQQSnxRqBw=
Subject key identifier: 03:D4:F1:9D:52:91:D5:3E:3E:87:43:1F:DD:3D:21:84:50:D1:18:A8
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C69F76BEA98C3AC48BA5015690BF5
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/A9TxnVKR1T4-h0Mf3T0hhFDRGKg.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214847
IP address blocks: 2a12:bec4:12a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:69:f7:6b:ea:98:c3:ac:48:ba:50:15:69:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03d4f19d5291d53e3e87431fdd3d218450d118a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8e:f3:be:87:66:9a:d0:db:56:65:ef:9d:77:
6c:3e:e3:ac:4a:d6:d9:7e:44:d0:dc:df:f9:d5:d2:
c3:9b:3d:57:86:f3:b1:46:9a:fe:7a:a2:77:5d:27:
83:ad:af:3b:5e:fa:6a:7a:60:ab:c7:53:4f:dc:0f:
39:6b:b7:8f:61:e2:39:f1:60:c2:64:6c:91:cb:42:
d6:4b:29:0b:93:04:7e:79:f6:99:30:41:cf:af:b7:
fc:c0:f0:0a:ea:cb:44:a3:0e:4c:1c:e2:ec:69:90:
e0:fb:3e:a7:a3:78:0f:37:88:bb:3e:b6:f1:f2:35:
b0:07:2e:5d:7f:6c:a5:ec:21:0e:f6:21:cc:99:ef:
1b:15:f5:2e:0b:04:ca:bf:ce:63:8b:fe:15:09:84:
c7:8d:8c:0f:55:b9:5c:5a:06:fe:0a:6f:58:48:21:
25:43:2c:8f:00:f9:b2:62:8f:a3:e7:97:93:3d:1d:
18:a5:8c:16:7e:b4:d4:4f:b5:62:59:c8:a0:d5:af:
6b:23:32:db:7d:b2:2f:84:95:6d:f0:75:f5:29:17:
6a:e4:13:cd:f9:b1:6f:04:d9:a0:3a:94:0c:f2:91:
d2:15:bf:43:0d:7c:51:8d:e5:a7:37:c1:d1:85:9e:
f5:56:76:8f:c3:b2:cd:39:52:b3:a9:80:40:ce:b1:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:F1:9D:52:91:D5:3E:3E:87:43:1F:DD:3D:21:84:50:D1:18:A8
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/A9TxnVKR1T4-h0Mf3T0hhFDRGKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:12a0::/44
Signature Algorithm: sha256WithRSAEncryption
50:1c:6c:45:cd:f1:a6:d6:42:cd:34:e3:ad:29:e0:15:f2:c6:
ed:a9:de:d5:d4:8a:bd:8b:7f:c8:3a:38:db:d6:f0:14:c3:14:
25:5e:3c:dd:2c:f2:b7:db:ce:a6:82:6b:ae:93:18:09:5a:00:
e8:2d:80:87:6d:59:da:5a:67:3e:b0:1f:b7:e0:fa:2d:33:51:
6f:fa:33:5d:44:48:7e:b9:6e:fe:c2:66:0e:86:10:69:6b:07:
fa:79:b8:d3:16:2f:a2:bc:80:9f:75:cc:77:71:12:f7:cf:ee:
31:72:e6:0b:9d:e5:03:46:b6:a1:99:7f:e9:d6:69:35:73:fc:
70:4c:9b:8f:d7:e7:6d:ec:ee:27:86:8e:28:2a:3f:75:e7:89:
e1:6f:72:0f:fa:ef:57:59:d8:3a:db:30:b9:d9:ef:d1:4e:56:
ee:15:4d:7b:9d:f2:57:a2:73:2b:5d:73:3b:12:5e:7f:97:6f:
9d:2c:1f:98:f3:0d:50:40:e4:ac:0a:61:f3:26:4d:19:01:a5:
2f:0e:2c:03:8d:f7:27:27:b1:56:94:1e:51:7a:20:8a:06:cd:
15:8a:27:69:7b:1f:ec:d6:81:c9:af:c3:6a:cc:d8:dd:c8:f8:
fe:90:bd:e7:0e:b1:c9:dc:05:14:f6:7a:8a:4f:b4:b1:c1:40:
6f:f3:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:10:58 2025 by rpki-client