Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Sw2Q8LKptg7wP60GVIvSZiCyKew.roa
File: Sw2Q8LKptg7wP60GVIvSZiCyKew.roa (raw, json)
Hash identifier: 26eURXaFxa/0FbogctMGUqUdxYClq8GKWX0yxqQv9iM=
Subject key identifier: 4B:0D:90:F0:B2:A9:B6:0E:F0:3F:AD:06:54:8B:D2:66:20:B2:29:EC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0193E62F9C7C3A9D6AB459E6DE3C66C5F84A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Sw2Q8LKptg7wP60GVIvSZiCyKew.roa
Signing time: Fri 20 Dec 2024 22:28:20 +0000
ROA not before: Fri 20 Dec 2024 22:28:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199695
IP address blocks: 2a12:bec4:1620::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e6:2f:9c:7c:3a:9d:6a:b4:59:e6:de:3c:66:c5:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 20 22:28:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b0d90f0b2a9b60ef03fad06548bd26620b229ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:74:34:23:d8:45:52:7c:a6:85:ed:85:8a:
c6:c8:c5:fb:db:90:00:0e:ec:bc:04:e1:be:94:cf:
1b:2f:af:7d:16:55:cb:1b:92:3e:9a:0a:08:39:b2:
da:c2:7c:98:cb:20:77:f6:7a:a3:b5:67:f7:dc:41:
6e:f8:0a:b0:8f:0f:3a:c6:2e:a9:d0:02:12:d9:9f:
00:67:0f:80:80:98:22:f8:fd:cc:8f:a0:a0:b1:cd:
84:f3:f0:48:49:3c:d4:e3:13:b5:c6:4a:b1:5f:d1:
aa:b3:34:8f:7b:58:14:b4:a3:6e:dc:f9:22:b3:bc:
99:57:a4:ab:9a:f4:2f:ba:8f:3d:b7:47:f0:31:7a:
6e:4d:b0:98:83:1a:d0:a2:60:12:df:11:2f:c4:76:
4d:4f:6d:df:32:dd:89:16:e1:aa:ce:40:40:04:8f:
01:cd:ae:74:75:e4:8d:be:01:43:11:23:67:c8:eb:
bb:c1:7f:02:50:76:3f:91:f7:7f:14:81:cc:6e:80:
92:5a:25:10:a6:ed:1b:3c:66:5d:08:63:08:f4:2f:
39:5f:43:e3:cc:89:32:ff:94:d7:6c:e5:d1:6b:5c:
fc:2d:75:95:43:cf:2a:b7:0b:be:3a:ee:3d:30:55:
e3:24:34:5f:7f:a5:e4:1e:5c:9b:f5:c0:b5:6e:57:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:90:F0:B2:A9:B6:0E:F0:3F:AD:06:54:8B:D2:66:20:B2:29:EC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Sw2Q8LKptg7wP60GVIvSZiCyKew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1620::/48
Signature Algorithm: sha256WithRSAEncryption
ad:c7:56:90:db:44:6d:68:ed:ae:cb:cb:7c:15:54:80:b9:ff:
f8:85:92:ac:84:30:19:42:65:de:52:4e:fb:53:c9:c2:3d:23:
70:9b:04:8a:9d:6e:4b:49:81:58:7a:3d:ed:de:4c:c4:d0:f4:
b4:6b:db:7d:5d:a6:09:d9:2f:3f:66:14:8f:15:51:47:50:6e:
a8:6f:2c:ab:d6:a3:f1:c4:9b:1c:93:3f:62:38:c2:97:cd:34:
86:e7:5f:86:9a:56:65:13:84:0c:8d:94:0a:7f:4b:bf:cb:4e:
00:9b:20:26:a0:50:8a:44:ef:fb:9e:e6:f3:52:8e:b6:a7:ee:
1b:85:b8:7d:c0:52:30:5f:64:de:54:65:13:2a:bf:1b:bc:8e:
50:22:4d:07:66:03:45:38:71:6e:f8:09:2b:13:c1:a7:54:53:
65:0f:dd:fd:be:fc:21:cf:62:d4:9e:7c:90:ea:68:65:26:35:
dd:26:da:c4:87:24:60:9e:42:aa:79:73:b9:8d:0f:43:64:34:
75:8f:02:36:f3:e6:eb:b1:1a:fe:b0:cc:f0:d0:ef:9d:f4:7c:
50:7a:3b:ca:41:e4:16:fc:47:8d:dd:9b:a0:68:5d:04:d0:f5:
8c:fe:26:fe:fb:56:44:3e:bd:b6:20:e6:75:06:35:8d:5d:7b:
06:43:c5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:19:56 2025 by rpki-client