Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RqOV8w2ReC63jvS9ZVAoXyk0x6s.roa
File: RqOV8w2ReC63jvS9ZVAoXyk0x6s.roa (raw, json)
Hash identifier: G6RtqiyK1Yp1xwNCRpp84ZAbVultT0s1RfT/bRNoneg=
Subject key identifier: 46:A3:95:F3:0D:91:78:2E:B7:8E:F4:BD:65:50:28:5F:29:34:C7:AB
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5507FE2D2EBEE44102C90422CD77
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RqOV8w2ReC63jvS9ZVAoXyk0x6s.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199519
IP address blocks: 2a12:bec0:210::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:55:07:fe:2d:2e:be:e4:41:02:c9:04:22:cd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46a395f30d91782eb78ef4bd6550285f2934c7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:b6:b2:12:4e:0d:98:b0:4f:07:8e:c2:2a:
6a:f9:c4:89:39:92:62:41:f9:49:ba:45:c2:55:36:
3f:ac:8a:a0:ad:f5:49:bc:dc:69:95:89:d7:3b:df:
3d:63:83:7c:aa:e8:43:b8:d4:a2:fc:9f:f6:b2:25:
c0:08:4b:ae:50:64:7b:77:e9:9a:52:57:61:6b:ae:
00:f6:8c:7b:3d:b3:0b:2d:e0:24:66:3d:15:90:3f:
6e:a9:f7:c0:4d:eb:f7:15:d5:1b:33:23:7c:38:95:
45:45:da:91:67:8b:37:a7:38:66:c7:65:0f:a3:af:
94:f2:fa:ad:a3:cb:33:b9:7a:7a:79:74:01:8b:c4:
b5:0d:8d:0a:21:9e:fc:79:c9:af:4c:cc:54:ea:32:
b1:c6:5e:c6:f5:3d:e2:51:ef:2e:ef:f0:c2:45:1b:
5c:84:a4:cb:41:11:bb:af:fb:7a:24:b5:f1:1b:80:
7e:11:75:82:d1:ba:9a:a7:5f:f9:a2:d3:4c:d5:07:
9a:35:3a:20:ca:12:52:01:1c:b9:59:48:ee:86:31:
59:49:f8:4d:21:a0:a6:b6:70:af:d1:4a:48:8c:25:
07:44:1f:c3:f4:fd:82:24:95:21:2c:24:da:39:01:
a1:b9:b5:05:4f:e9:d4:95:a0:45:56:3c:6e:0b:93:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:95:F3:0D:91:78:2E:B7:8E:F4:BD:65:50:28:5F:29:34:C7:AB
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RqOV8w2ReC63jvS9ZVAoXyk0x6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:210::/44
Signature Algorithm: sha256WithRSAEncryption
26:2b:c5:69:c2:eb:1b:1d:6b:52:32:6c:51:4e:52:d7:85:2d:
ef:b7:d5:fd:46:fe:a8:a2:ab:a4:b8:73:54:68:e1:4d:eb:fd:
db:5d:51:d3:3f:98:15:7f:91:c6:74:c2:3f:5d:51:a5:af:99:
8e:eb:ae:06:43:0f:f7:10:f7:ea:80:7c:73:af:8a:5a:e8:98:
8a:69:4a:a8:80:e8:ad:7d:d1:79:50:b6:8f:85:e0:e6:77:97:
d1:e9:3f:38:4e:63:9f:21:59:e6:be:5c:f3:68:9d:1e:b8:4f:
60:27:5e:41:33:dc:7a:f4:64:3e:cf:f9:ac:51:06:29:0f:58:
4e:a3:5b:e8:4f:c4:11:38:4c:a7:18:30:07:4e:51:26:df:31:
bf:e9:2f:7b:6f:cb:de:1d:73:0f:c5:ef:d6:d9:4e:4e:e2:de:
e1:fd:ac:61:a0:ad:a7:56:09:76:6a:96:0e:0f:b2:74:05:0a:
e7:0e:bb:a5:9f:21:86:d7:80:8a:b8:69:44:1a:8e:31:45:67:
c0:a4:80:9f:0c:3c:1b:ae:12:0b:b1:12:75:e1:03:63:57:f4:
ca:ee:bd:1e:c9:c2:00:34:1c:20:17:51:10:8a:66:92:88:95:
ca:cc:cc:08:8d:de:56:86:d8:d0:b2:ac:7e:f8:89:b8:39:9f:
61:8a:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:41 2025 by rpki-client