Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DgoCg6gE4caWhU0fppJNOO9dVQ8.roa
File: DgoCg6gE4caWhU0fppJNOO9dVQ8.roa (raw, json)
Hash identifier: /ImBo6M27y/RUTmo7OWt7j2lt2P2kbLS9b6BqvcG+8o=
Subject key identifier: 0E:0A:02:83:A8:04:E1:C6:96:85:4D:1F:A6:92:4D:38:EF:5D:55:0F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C7A37D365EEBBABA61CA690307846
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DgoCg6gE4caWhU0fppJNOO9dVQ8.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216250
IP address blocks: 2a12:bec0:510::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:37:d3:65:ee:bb:ab:a6:1c:a6:90:30:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e0a0283a804e1c696854d1fa6924d38ef5d550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:c6:a6:85:e7:e2:2b:88:bf:c3:a8:cf:9e:
5c:20:19:f1:66:7b:b2:9d:fe:9a:34:27:4a:3e:3a:
2f:a1:c1:75:42:11:43:18:13:4e:eb:58:5f:73:8f:
09:69:12:cb:15:56:f6:40:27:58:6f:c5:bf:5f:db:
8d:be:66:48:aa:31:e9:c9:78:3d:47:ab:5b:fb:fa:
1e:c0:2a:bd:f7:7d:fe:65:9b:5c:2b:3e:c7:19:3d:
bf:e0:59:3c:dc:d2:67:16:d1:45:06:9f:b7:7e:b3:
16:e1:7c:4f:06:7d:9e:44:64:c3:78:ac:2d:9e:cd:
f3:89:89:71:2a:d1:ef:db:0e:bf:47:79:a7:6b:95:
a3:ff:b0:d9:2f:ff:5d:f2:0b:fe:be:d3:7e:26:fc:
d5:95:50:10:d7:fb:2a:e6:0b:6b:42:d6:08:12:1e:
de:1f:30:ae:c5:88:ad:f5:f9:08:38:16:62:dc:55:
93:33:de:17:3c:c6:cc:46:37:63:f0:03:dc:7a:8b:
c9:38:82:b6:0c:7e:7e:1d:c7:ac:b3:65:f0:46:25:
37:2a:2d:70:7c:a7:b7:f5:c3:64:0f:52:07:ae:79:
4c:42:8a:61:f7:8a:4d:d7:8b:e6:de:9f:d9:bb:15:
ea:49:00:f6:b1:84:86:3a:dc:c9:63:71:97:cb:9a:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:02:83:A8:04:E1:C6:96:85:4D:1F:A6:92:4D:38:EF:5D:55:0F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DgoCg6gE4caWhU0fppJNOO9dVQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:510::/44
Signature Algorithm: sha256WithRSAEncryption
aa:a3:4e:ad:50:0c:f8:f9:bb:6e:42:c6:b4:26:26:0d:35:14:
30:fe:f6:92:45:6b:a7:24:9a:6b:11:5e:c1:3b:28:e6:49:4e:
86:a3:40:2e:b4:d0:a0:26:10:c9:26:1c:63:24:9e:9c:52:bf:
2f:d2:83:4d:92:11:28:de:cc:2b:7d:e8:0e:dd:82:ac:49:b9:
c6:44:23:01:c6:64:f5:f1:9c:99:d1:75:f6:b2:9e:50:31:93:
e4:71:5e:da:87:4a:ed:8e:ba:87:c6:9a:b8:80:4a:86:59:07:
f3:e7:4f:1c:cf:97:0c:40:1c:8f:45:af:85:74:7e:84:8b:e1:
57:eb:b1:58:11:09:16:57:06:70:e8:0a:0f:1b:3f:a6:21:c1:
b9:8c:26:d2:66:ff:ba:d4:18:19:7a:68:82:68:1f:d2:f3:73:
09:9a:bd:5d:f7:d8:91:7e:77:fc:b9:c0:e8:89:5a:c6:1e:0f:
31:4a:d6:2b:22:b8:71:95:e5:89:73:0b:99:d8:d4:88:f9:02:
b5:a5:e4:ed:cf:a0:7a:dd:37:db:67:64:73:ad:f1:d1:c3:f2:
3c:6b:c2:6a:5f:ce:41:95:bd:d5:d8:2b:e5:e6:2b:4f:8b:75:
47:5d:22:1d:ad:78:92:17:ea:5b:23:c4:c3:d0:b0:40:91:3c:
f8:49:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:13:16 2025 by rpki-client