Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/G84ePrILUfSBO9aEjwk5RjYhlgM.roa
File: G84ePrILUfSBO9aEjwk5RjYhlgM.roa (raw, json)
Hash identifier: c6tKKRF5pU1UiuM2wmqBNGJidMABarSQD0k0SC6L578=
Subject key identifier: 1B:CE:1E:3E:B2:0B:51:F4:81:3B:D6:84:8F:09:39:46:36:21:96:03
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019474C66568F2256861E319287F99117CB6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/G84ePrILUfSBO9aEjwk5RjYhlgM.roa
Signing time: Fri 17 Jan 2025 14:59:06 +0000
ROA not before: Fri 17 Jan 2025 14:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 2a12:bec4:16e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:c6:65:68:f2:25:68:61:e3:19:28:7f:99:11:7c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 17 14:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bce1e3eb20b51f4813bd6848f09394636219603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:e9:da:a5:fb:08:cb:ef:d3:8d:0f:6a:f9:
c2:20:41:5f:d5:0c:67:44:30:0b:37:20:22:47:ab:
cc:51:08:dc:45:65:68:9c:09:f6:2b:9a:0f:d1:6b:
70:ed:be:d4:1b:97:0c:8a:5e:2e:ec:9a:c4:f4:b0:
af:10:5a:80:84:bc:76:46:8b:8b:7c:72:6f:99:02:
d6:9b:67:83:1d:8b:5e:62:c4:c0:9c:b7:ba:c6:d3:
fa:66:ec:bf:1f:df:f5:7c:63:b8:0c:46:32:8d:ec:
1c:ba:f9:45:7f:a3:1f:28:d8:95:f8:27:7c:31:60:
f4:4b:10:fd:2c:f9:81:3b:8f:2f:49:6c:f5:c4:05:
49:e6:31:4f:be:5d:1b:38:e6:01:4e:0c:04:5b:8f:
25:3c:32:bc:d5:ac:18:d2:0d:62:0f:3e:58:92:f0:
72:10:ba:83:99:81:44:c8:5f:36:a7:fa:e3:4f:c8:
ea:45:5a:e5:0d:34:a2:9d:3a:e6:ec:2a:ae:a9:a9:
df:39:d3:e1:53:b7:32:70:c6:56:f0:61:dc:09:4b:
8c:97:2b:fc:96:f6:bc:14:17:92:ba:bf:77:68:10:
e9:3f:76:2d:61:28:05:c0:63:1a:ce:f4:10:57:34:
4d:cb:8c:1f:3a:6a:17:2d:71:fe:a8:9e:fe:47:fe:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:1E:3E:B2:0B:51:F4:81:3B:D6:84:8F:09:39:46:36:21:96:03
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/G84ePrILUfSBO9aEjwk5RjYhlgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16e0::/44
Signature Algorithm: sha256WithRSAEncryption
83:a4:d0:49:da:b8:bc:6a:6c:4a:8a:b4:48:16:d0:9d:a9:75:
c0:95:60:f9:98:ec:88:14:2f:23:25:2b:b3:51:8b:bf:e8:a9:
aa:d9:38:bf:77:b1:70:59:cc:2e:bf:e5:f3:5d:4c:23:02:98:
b3:3d:79:78:97:5f:c0:82:c0:91:4b:b9:74:07:d4:b1:f7:6c:
f8:e2:bd:03:d8:d3:8f:14:40:e3:6a:09:6f:d7:07:e9:8d:ec:
80:97:a4:cd:5b:e3:4a:91:32:eb:1e:c4:ed:da:95:0a:5c:00:
fd:54:58:9d:da:fc:ee:07:0c:8c:c5:0c:99:ec:8d:53:67:96:
73:34:32:38:01:aa:ef:07:99:bc:d0:7c:97:6a:74:a2:30:a0:
09:95:18:85:3b:28:c9:36:4a:60:ce:f6:32:63:cc:72:51:65:
73:13:d6:27:df:74:54:7a:23:1b:1a:93:34:5d:5a:af:81:a4:
a6:17:72:33:fb:39:a6:0d:24:f2:86:85:e0:60:39:46:d1:cc:
f1:69:a2:9e:50:84:58:26:98:17:1c:26:21:c4:00:5f:2d:a6:
44:e7:b1:ac:9a:aa:93:6f:6d:5f:dd:3b:b6:d0:7e:c4:ff:23:
9a:a9:f2:be:a2:44:27:b2:a6:32:c8:3d:dd:01:b8:67:81:b6:
b3:00:fc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:59:56 2025 by rpki-client