Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IttzQFta31cXgQOWKqTkT1Tj4ag.roa
File: IttzQFta31cXgQOWKqTkT1Tj4ag.roa (raw, json)
Hash identifier: Pc8dwK7pQqwM6wmDC9GzRY5QTbm3fUUSVvLkHXybHK0=
Subject key identifier: 22:DB:73:40:5B:5A:DF:57:17:81:03:96:2A:A4:E4:4F:54:E3:E1:A8
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6AA43305A3B4A9F06D402407502D
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IttzQFta31cXgQOWKqTkT1Tj4ag.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214891
IP address blocks: 2a12:bec4:1280::/44 maxlen: 44
2a12:bec4:1480::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6a:a4:33:05:a3:b4:a9:f0:6d:40:24:07:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22db73405b5adf57178103962aa4e44f54e3e1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:52:6a:bc:f8:da:a0:99:91:60:1b:13:cd:
be:9a:3d:e7:ae:77:61:34:23:44:96:c7:1f:00:91:
cf:80:c4:ca:9a:bd:bf:0c:7b:22:73:e9:90:5d:bb:
4b:1e:69:ef:96:9e:3b:44:e7:13:a6:9b:fb:ad:be:
06:69:6f:66:77:65:c9:2b:e4:d1:47:87:ed:27:94:
bd:54:51:e5:a2:24:a7:2b:73:b3:75:cf:02:37:2d:
89:bc:81:bc:88:7a:b0:ca:4b:2f:08:e9:75:b4:c8:
eb:97:c2:b3:48:13:b3:8f:37:fb:f1:8c:b1:e9:f2:
b8:2d:7a:08:a5:85:96:fe:81:d6:d8:eb:8f:5d:00:
e1:1a:2f:9a:e7:52:6b:b2:38:07:3c:22:ec:13:b2:
a3:62:da:ae:0a:84:59:7d:53:af:e7:94:69:fc:50:
95:eb:ce:66:d4:e5:2d:0c:d7:c6:3d:50:16:90:ab:
6f:81:81:78:f7:95:6b:37:d9:72:a9:53:fd:87:d3:
75:1a:25:3c:cd:09:e6:51:46:43:86:26:35:fc:f1:
d4:71:cb:c9:84:0e:c3:a1:61:e0:c9:ce:89:53:a6:
3e:eb:f2:74:0b:1d:c8:39:b8:f7:20:f1:0e:9e:84:
69:49:65:6b:25:90:29:69:87:f5:6c:6d:0a:6a:1f:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:73:40:5B:5A:DF:57:17:81:03:96:2A:A4:E4:4F:54:E3:E1:A8
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IttzQFta31cXgQOWKqTkT1Tj4ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1280::/44
2a12:bec4:1480::/44
Signature Algorithm: sha256WithRSAEncryption
18:6b:ec:0e:ba:8b:96:09:07:2c:0b:23:ec:e8:61:19:ba:56:
85:3d:65:a7:96:23:af:dd:00:5c:3c:7b:40:47:27:14:d5:c9:
09:5a:5c:f9:6b:be:d0:6e:e5:77:5c:80:0e:68:f5:3f:07:a0:
01:2b:0f:ed:03:d7:7a:bc:1c:d1:cc:c7:43:ce:c8:14:02:46:
ad:b0:5f:45:a1:04:2a:00:3d:eb:91:e5:99:59:37:45:5c:8a:
6a:8c:7e:2e:94:ca:f9:fa:ff:c6:06:4e:1a:46:9f:bf:8a:68:
91:b5:21:9c:73:47:7a:eb:77:21:33:5c:ad:e4:5d:d9:00:1d:
d0:c9:fb:c8:1b:6d:74:0f:4f:cf:57:ac:2b:8b:2d:27:80:37:
8f:ad:fe:4e:64:7a:af:94:74:c2:e4:aa:ee:52:2c:f8:88:61:
1a:aa:8d:fb:77:d6:67:12:e4:22:05:09:e8:45:02:b3:3a:f9:
e0:48:5a:4d:1d:19:d9:39:db:35:02:ed:2c:56:6b:4d:c9:71:
65:c1:5a:a9:2e:8c:8e:a6:15:f3:0f:f7:c2:a5:b6:34:43:17:
21:43:0a:b8:b5:97:a0:33:d6:81:f7:b4:40:0d:22:bb:9d:3f:
a7:3d:92:7b:45:7c:db:95:f6:1a:81:17:6b:7f:c4:af:c7:3f:
f0:a8:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:52:51 2025 by rpki-client