Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/INQNoMivzAL00EbmWclyKZEJ7HM.roa
File: INQNoMivzAL00EbmWclyKZEJ7HM.roa (raw, json)
Hash identifier: LfsFf8QK2u4KhTP7do/Bz4Af59flNOZH6sGuCwtb2Pg=
Subject key identifier: 20:D4:0D:A0:C8:AF:CC:02:F4:D0:46:E6:59:C9:72:29:91:09:EC:73
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5D9D5C63C86F78284C083C4CC8DD
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/INQNoMivzAL00EbmWclyKZEJ7HM.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205421
IP address blocks: 2a12:bec0:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5d:9d:5c:63:c8:6f:78:28:4c:08:3c:4c:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20d40da0c8afcc02f4d046e659c972299109ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:f2:e8:da:3c:2a:e3:73:c0:47:23:b2:6f:
2e:ca:d5:9d:3a:80:01:24:a9:e2:c2:d3:fd:d2:78:
3d:fa:d8:66:48:ed:db:6e:28:06:e6:11:01:c1:11:
7e:a1:0b:42:cf:02:90:85:17:32:53:32:16:0b:f4:
56:9e:41:86:81:60:77:58:ba:b0:54:c5:16:d6:f9:
f5:c3:6f:4a:f7:6b:3d:df:a6:72:30:ce:a0:0e:2a:
27:1d:cb:75:45:f6:2a:00:52:68:b7:34:18:e3:ba:
2b:d3:c7:a1:84:c6:ef:40:dc:eb:cb:70:2a:52:89:
02:da:ca:74:e9:bd:a6:ac:4d:20:3d:75:e4:de:67:
13:4d:a0:b6:91:14:42:f8:88:76:31:ba:62:5b:bd:
24:49:de:78:e8:e9:c3:5b:58:d4:b9:a4:59:70:55:
76:a4:8a:5b:d7:60:d2:a3:ad:ff:70:30:37:d7:45:
82:2d:40:63:49:4d:0c:eb:73:d9:c2:3d:ee:03:5f:
6a:12:a2:32:ae:83:dc:6e:b8:63:9e:70:ce:0b:bc:
36:6c:1e:eb:64:a3:fd:78:b1:b4:a1:2f:70:50:da:
9b:5c:1c:ef:6d:14:01:c9:0a:8a:9a:88:12:f3:80:
f7:bf:1f:26:81:71:c2:87:60:f4:66:69:ad:71:2a:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:0D:A0:C8:AF:CC:02:F4:D0:46:E6:59:C9:72:29:91:09:EC:73
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/INQNoMivzAL00EbmWclyKZEJ7HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:20::/48
Signature Algorithm: sha256WithRSAEncryption
0d:fa:52:54:e1:38:a8:0f:22:30:d8:eb:c4:99:c0:8c:73:4d:
4e:21:1c:e0:0c:e2:3b:b8:c1:13:25:de:b4:4d:b3:80:79:1b:
02:60:a5:3b:69:c5:6f:70:fd:eb:e3:dc:56:aa:06:14:34:47:
c0:25:db:40:de:d6:ce:fa:d5:86:2f:0f:70:1e:c8:bd:3d:9c:
77:69:fc:72:13:4a:6e:1f:2a:3a:42:5d:81:6a:56:71:1c:91:
47:57:99:ba:1f:bb:78:b4:54:14:8b:bb:66:f3:3f:f6:25:21:
2b:ad:56:98:56:20:3d:78:ac:49:a2:9f:02:56:f5:1d:6d:a8:
c6:6c:82:6e:28:4a:eb:97:09:e1:58:da:1a:9f:c3:94:16:32:
f1:89:9d:bb:4a:52:18:0a:70:ea:f5:1d:fe:8b:25:2d:2e:0f:
b7:51:df:67:6a:4b:3f:3d:10:8c:f4:82:b8:0a:f6:59:22:6b:
9b:20:6f:fd:b0:a3:1b:15:e6:93:72:fb:c6:6b:a0:c7:6e:5e:
41:3e:d2:67:01:00:ef:b3:2d:e4:f7:38:a3:e0:2b:d8:d3:af:
4b:5e:d0:a4:01:58:38:d2:48:2b:21:b6:38:ca:d4:d0:5f:64:
16:ea:f8:f8:99:24:8d:02:49:9b:b9:51:e1:b4:4b:8a:d5:3b:
40:f8:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:24:48 2025 by rpki-client