Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Qa3LLw-1lkSphQJ6Ta_y8i_K-rQ.roa
File: Qa3LLw-1lkSphQJ6Ta_y8i_K-rQ.roa (raw, json)
Hash identifier: komHeaGNnYFqQ6ozR3xcwXBXL/7JFs7OyRHhRX9ycY4=
Subject key identifier: 41:AD:CB:2F:0F:B5:96:44:A9:85:02:7A:4D:AF:F2:F2:2F:CA:FA:B4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4796B110555E553ADEEE46FA7FE2
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Qa3LLw-1lkSphQJ6Ta_y8i_K-rQ.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41108
IP address blocks: 2a12:bec0:240::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:96:b1:10:55:5e:55:3a:de:ee:46:fa:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41adcb2f0fb59644a985027a4daff2f22fcafab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:79:c5:f6:cd:8d:fc:80:68:5f:3a:aa:97:
de:fa:cd:2e:e3:e5:9d:45:3b:e4:2e:74:d6:6b:d7:
37:d2:94:99:70:e2:98:d0:9d:5b:57:50:2e:f7:0e:
20:70:b0:ae:89:b8:12:0e:43:ce:f0:8c:36:5d:76:
b8:24:05:8e:75:39:6f:4d:c9:a6:05:fa:fb:b1:99:
98:4a:be:a3:11:93:f9:c3:89:6d:8d:9d:01:92:f6:
cf:39:fe:b6:c8:7c:83:ad:4a:43:7a:72:5c:5a:d2:
b8:ea:0e:3a:9f:42:9c:cd:1c:1c:92:ee:df:f0:e3:
6c:77:be:4b:80:31:5d:d0:3a:8d:70:98:65:1f:56:
92:28:4b:30:0b:ca:05:cb:39:cc:60:c5:32:63:89:
39:77:dd:a0:26:e9:08:7f:e9:c6:e1:cd:ae:07:5a:
fd:6d:0b:63:26:37:c2:9a:07:46:e4:74:fd:58:11:
60:a5:18:8a:35:d8:23:ab:b7:e1:00:de:c4:83:16:
8a:e3:de:ba:ad:3f:6b:1c:d5:bb:f5:18:47:a9:e4:
4e:34:04:5e:f7:2c:7c:06:3b:cc:1c:f4:43:da:7b:
a9:21:78:61:b5:d2:fc:83:23:e9:19:e2:0f:ba:ec:
7f:30:36:c1:37:3a:85:80:6b:72:f8:05:e5:16:d6:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:CB:2F:0F:B5:96:44:A9:85:02:7A:4D:AF:F2:F2:2F:CA:FA:B4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Qa3LLw-1lkSphQJ6Ta_y8i_K-rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:240::/44
Signature Algorithm: sha256WithRSAEncryption
0c:35:d4:17:31:03:a7:08:8a:06:d4:69:f9:55:26:ed:b1:8d:
27:2f:3f:63:33:7b:51:3f:5d:50:d4:3e:f8:f1:ee:4c:fe:e3:
c4:64:48:64:4a:ab:8a:01:bf:f1:f9:9a:f1:2c:1e:46:7e:f4:
40:0e:85:cf:16:77:fb:ac:a0:41:55:76:99:6c:e3:9f:cb:db:
dd:91:70:8a:33:98:97:d0:1d:07:45:2a:bd:e4:da:1d:94:b6:
bc:61:be:dc:03:38:a9:b0:8e:26:38:10:36:31:8c:81:da:af:
7e:d6:67:27:6c:48:5d:95:87:5c:04:49:6c:3c:5e:75:40:b0:
03:78:76:25:a2:b7:5b:28:64:01:04:58:ff:dd:98:88:95:6b:
84:97:23:f1:d9:d7:68:0b:0d:35:a7:7a:2e:d0:8f:31:7c:1e:
c3:0f:e6:06:73:04:dd:ce:4d:29:54:e4:b9:49:05:35:87:fa:
9d:21:73:b1:c6:d2:82:a1:19:f8:99:1f:18:cd:11:68:82:38:
8a:ff:06:06:cc:20:dc:9d:8c:14:67:57:cc:af:8d:57:ab:ae:
58:c0:68:80:d3:e3:86:58:d4:6f:da:2e:ec:01:22:4c:c5:23:
4b:29:04:fd:14:21:3e:90:79:2a:87:87:80:36:cf:1f:ad:f7:
24:b7:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:41:08 2025 by rpki-client