Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RjEeI1Ey0jOZCSGtvswGXS-PPcY.roa
File: RjEeI1Ey0jOZCSGtvswGXS-PPcY.roa (raw, json)
Hash identifier: 4EyFPyo/jM7TL9UZiWvQT1k0r4MQfUhHMN5T3vDrF+g=
Subject key identifier: 46:31:1E:23:51:32:D2:33:99:09:21:AD:BE:CC:06:5D:2F:8F:3D:C6
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6626FB297BB617FCC7B8A7D69F79
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RjEeI1Ey0jOZCSGtvswGXS-PPcY.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214346
IP address blocks: 2a12:bec4:16a0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:66:26:fb:29:7b:b6:17:fc:c7:b8:a7:d6:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46311e235132d233990921adbecc065d2f8f3dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:ec:41:28:02:ff:ea:5c:82:b3:0b:fb:a0:
1e:01:76:7e:c6:6a:3f:03:b9:63:e9:f4:25:4a:01:
79:42:43:5f:57:05:7f:c9:4d:54:9c:ff:72:81:65:
3d:39:2a:7d:d0:5c:db:0c:cf:4d:de:14:57:ff:94:
43:2d:f7:e1:0d:ed:14:b6:fd:dd:fc:18:61:eb:2a:
14:aa:29:de:2c:6f:57:fc:ca:32:0c:1b:4d:fb:f0:
75:f8:6d:4a:2b:f0:c7:f3:98:5a:81:5f:42:24:b9:
5f:f5:58:2d:df:00:2e:fb:a8:67:86:76:a2:a1:f8:
ae:bc:54:95:73:4f:0c:c0:75:0c:48:53:ff:b1:7c:
95:9f:7f:da:c0:ef:14:0a:ad:c0:34:5c:23:55:a6:
24:c6:12:68:b4:c1:e2:2a:ca:8c:94:1c:8e:e9:a2:
7b:44:00:7f:7a:a7:a4:26:3a:6a:9b:f7:1c:cb:18:
57:7b:bb:8a:54:f9:7f:d9:75:5c:4e:21:51:cc:38:
a4:ec:93:f4:c7:be:b4:5c:ee:ec:2c:f7:0a:f5:ac:
05:e9:64:c0:a6:20:d9:88:0d:e7:0e:79:bd:6c:1c:
2e:63:8b:f5:59:00:58:f3:de:d1:6d:13:94:6b:70:
77:5d:e3:c1:41:d6:2f:8f:61:0d:1a:97:f7:73:2d:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:1E:23:51:32:D2:33:99:09:21:AD:BE:CC:06:5D:2F:8F:3D:C6
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RjEeI1Ey0jOZCSGtvswGXS-PPcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:16a0::/44
Signature Algorithm: sha256WithRSAEncryption
0a:3e:87:db:de:a9:aa:a7:ad:07:35:69:18:75:99:6b:45:10:
be:2d:0d:ee:1d:e3:61:03:64:14:84:10:20:a8:e3:57:03:56:
02:f7:61:6c:95:f5:90:a9:b5:e0:98:16:1f:11:2d:17:58:6d:
64:77:60:6b:1d:dc:7c:ea:0a:c6:f8:67:e6:d3:fa:9c:d1:48:
d4:ac:3e:96:d6:c5:d5:68:62:21:d5:92:16:6a:37:4b:ca:e0:
42:d5:9f:bd:d4:9d:0a:01:4e:01:8b:1e:c2:0e:3f:ef:cb:20:
cb:c1:6a:f4:8b:b0:22:a1:aa:29:75:c4:c1:5b:5a:49:fb:96:
bb:3a:28:3b:b2:62:21:93:f7:eb:e9:84:7e:3b:ff:32:93:0f:
4f:59:5a:aa:43:ad:6b:05:6d:e9:87:b7:87:88:bc:ac:4d:03:
35:97:cb:1d:95:51:37:b4:aa:e2:52:9e:bb:bd:c0:3b:d1:47:
12:35:8e:b3:9e:00:40:61:c9:6b:c5:30:9f:00:d8:f7:dd:57:
9d:7e:6c:b9:e8:55:64:f6:77:28:e7:88:53:ba:4b:0c:0f:8e:
83:93:9c:66:4b:ae:5a:24:c0:5b:ca:a4:f0:00:38:78:16:0b:
a0:75:00:62:54:9a:2e:d5:38:fe:e8:49:65:36:c4:1d:bd:5a:
63:b6:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:41:26 2025 by rpki-client