Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DS4eydXnf1W2dUn15WPMgh3DFqQ.roa
File: DS4eydXnf1W2dUn15WPMgh3DFqQ.roa (raw, json)
Hash identifier: jzm0srdtCFuezRRi+ODq4u+B2fo+MlRQJXO8WO7AV1Y=
Subject key identifier: 0D:2E:1E:C9:D5:E7:7F:55:B6:75:49:F5:E5:63:CC:82:1D:C3:16:A4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5BA6EF2A62984A4AA171276F034E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DS4eydXnf1W2dUn15WPMgh3DFqQ.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200586
IP address blocks: 2a12:bec0:a0::/44 maxlen: 48
2a12:bec0:b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5b:a6:ef:2a:62:98:4a:4a:a1:71:27:6f:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2e1ec9d5e77f55b67549f5e563cc821dc316a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:28:b0:9d:c3:61:f5:1d:98:22:7e:78:9a:
5e:2b:60:41:db:33:40:52:2f:2c:58:0c:dc:60:63:
a9:3b:e6:32:9e:d7:1f:c5:07:16:7a:f1:f6:bc:25:
90:0e:9d:79:5e:03:63:fd:d1:54:61:8f:19:b3:ff:
a7:8e:fa:71:88:1e:ae:8c:83:0d:76:55:8e:d0:50:
61:ed:05:95:44:af:42:e6:82:40:08:78:3b:0a:11:
9e:a5:43:05:32:ea:3f:d0:eb:20:df:e5:09:2c:55:
b2:76:de:46:29:61:76:86:33:a3:8e:c4:6d:0b:b7:
08:6a:0c:44:b8:b2:1e:69:20:28:be:91:93:c1:85:
6c:23:0a:98:3e:dd:71:0f:15:2d:63:d0:8f:1b:14:
c4:93:28:6c:c4:f9:7a:c6:0b:37:5a:f6:3d:fb:ae:
f4:6a:6d:3f:fe:d2:80:07:87:ee:83:04:06:2b:c4:
59:f8:cf:59:97:62:98:7b:07:86:0a:e8:dc:a7:85:
e4:e8:f9:d1:35:b9:b4:fd:44:5a:40:1b:91:19:22:
49:36:83:9f:1e:5e:bb:19:b1:fa:29:6b:a4:79:db:
5b:41:a4:bd:53:e7:66:e5:0c:38:f6:c0:37:1a:3d:
7b:d1:bd:bc:84:39:b3:6d:84:ce:fe:6c:27:dc:ce:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:1E:C9:D5:E7:7F:55:B6:75:49:F5:E5:63:CC:82:1D:C3:16:A4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DS4eydXnf1W2dUn15WPMgh3DFqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:a0::/43
Signature Algorithm: sha256WithRSAEncryption
7c:04:85:d7:01:fb:e7:22:c7:79:ed:16:2a:a3:2b:f9:56:cd:
2e:dc:a8:46:4a:91:45:ad:85:51:15:a2:2b:aa:cd:ff:04:b1:
f9:ac:ce:ab:1d:21:e2:0d:6f:8e:a9:7b:9c:a3:4c:f2:f2:c9:
76:df:db:9b:52:4a:86:ae:e7:58:f2:1a:51:ca:13:be:37:64:
f3:c7:95:47:13:c3:4e:41:32:1c:53:3e:4b:89:d5:05:8f:98:
d0:b0:78:30:53:d9:7d:e7:8d:de:1a:e6:e1:b5:e8:04:f4:e1:
80:d1:9b:a5:c7:43:46:51:23:22:15:9c:eb:cc:10:44:4d:c7:
62:f4:a2:c3:9d:16:06:f9:f7:ea:e1:af:47:d3:eb:c3:7f:65:
3f:1f:de:ce:df:59:59:77:84:de:ad:fe:dc:96:72:30:c5:2d:
8b:ad:1f:4f:00:3a:43:4e:aa:99:c8:1f:76:25:95:67:b7:e4:
3f:f5:73:d4:e2:bb:80:22:c4:cd:ef:b1:ec:42:6e:64:84:85:
e0:67:2c:ce:e2:f1:05:03:2c:da:ec:01:4e:18:e9:39:cb:0b:
5c:a6:d6:2c:62:80:f1:01:8a:15:42:ec:58:10:0f:09:5f:d8:
5f:8f:d8:84:ad:7e:10:67:c9:d1:cb:5e:86:9e:40:cc:b7:ac:
82:82:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:38 2025 by rpki-client