Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RURwz5ZEWKXOhEIw8ZoHdBJbI_s.roa
File: RURwz5ZEWKXOhEIw8ZoHdBJbI_s.roa (raw, json)
Hash identifier: Cyo0P2AQaaSjlipU4MgfqljDhjPnwFPS4l3feXluDLg=
Subject key identifier: 45:44:70:CF:96:44:58:A5:CE:84:42:30:F1:9A:07:74:12:5B:23:FB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C47FFA16844E0442BBC1FD16F92A9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RURwz5ZEWKXOhEIw8ZoHdBJbI_s.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 2a12:bec0:df0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:ff:a1:68:44:e0:44:2b:bc:1f:d1:6f:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454470cf964458a5ce844230f19a0774125b23fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:c7:c2:eb:1d:f2:49:e6:c0:a9:95:2b:70:
60:77:21:d7:c9:f6:45:ac:9c:6c:36:dd:3e:18:3a:
83:7e:0f:8b:d6:d2:82:01:fc:14:45:fa:c5:07:09:
6d:50:1e:52:79:cf:fb:f1:d6:cf:a5:0e:c4:1d:ee:
b3:d4:6e:f0:7b:72:74:30:fb:70:0a:66:d7:8d:85:
22:57:2e:09:f4:4a:3c:5f:76:8b:e9:f8:6a:fb:95:
8c:a8:f2:c7:d9:f7:d3:64:5b:f2:ac:23:ae:23:af:
15:18:86:01:ff:30:19:a3:5a:8f:6f:d6:56:de:96:
27:14:f2:3d:ac:2f:51:6c:20:20:35:49:c0:8d:08:
3c:6c:3f:55:8b:35:a2:0b:cb:9a:fd:db:44:50:d9:
66:a8:fc:3e:74:e4:9d:ba:80:a5:60:cd:99:86:1c:
ad:c8:31:8b:6f:db:b8:c5:6b:7b:8e:29:c2:f8:f3:
cf:17:b2:64:d7:7c:21:98:1b:24:05:8f:aa:65:db:
49:ef:92:b7:0a:07:41:4b:f1:0b:b4:2f:d8:e7:8b:
16:0b:a2:8e:b9:74:c8:c7:98:b6:48:8c:c1:b7:f1:
fd:84:77:ed:a1:75:20:57:0f:dd:7c:96:cf:39:7c:
8e:ad:5f:a6:3e:d1:91:14:64:a7:28:7b:b0:4a:42:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:70:CF:96:44:58:A5:CE:84:42:30:F1:9A:07:74:12:5B:23:FB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RURwz5ZEWKXOhEIw8ZoHdBJbI_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:df0::/44
Signature Algorithm: sha256WithRSAEncryption
19:18:dc:ac:b6:8f:45:cc:9e:00:f2:61:0c:4f:84:0b:81:9b:
25:7b:ba:f7:02:86:95:25:c3:0b:7c:b0:0a:43:5a:b5:d6:e8:
4a:c9:82:7c:97:c0:7d:ae:1d:f5:3b:7b:ea:4e:ce:45:ea:52:
9c:0f:63:cb:5a:25:b1:2e:64:a5:da:57:d1:63:a9:0e:5a:5b:
cb:67:b3:0b:59:0e:fb:20:ab:cf:a1:b3:0f:23:14:44:0d:f0:
a3:8a:d5:31:8f:55:a3:82:50:92:c0:c9:cd:bf:ca:0e:94:6c:
d9:45:27:29:37:75:eb:73:5c:9b:34:4d:ad:39:af:f2:5a:0a:
d7:d3:6e:62:7d:42:11:e3:8d:68:26:ea:52:40:6d:72:eb:2d:
5f:35:f1:f7:5c:7a:bb:ed:2d:1f:46:6f:c5:07:d4:f8:87:11:
2d:0b:2f:34:c4:9f:1f:ea:af:4b:8e:7a:63:54:3f:3f:06:ec:
f7:75:3d:86:a5:fd:60:80:e6:1f:4b:d8:b0:02:4d:fe:63:c3:
1c:35:0f:7c:3f:fd:65:a2:1b:ef:61:5f:f3:77:2d:6c:9e:cf:
43:f8:c2:21:8f:0f:a4:fd:56:40:dc:be:d7:6e:8c:9e:fd:a5:
76:2d:d4:61:b2:b9:71:71:a7:ce:f3:db:cd:95:da:5f:89:4b:
60:76:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:28:51 2025 by rpki-client