Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SzE_d99Q6ACZiENKvSLDyollu3w.roa
File: SzE_d99Q6ACZiENKvSLDyollu3w.roa (raw, json)
Hash identifier: paujXVCHjq8uIjQAvwYtry4wNFrG6aNbge/6fjFLnDk=
Subject key identifier: 4B:31:3F:77:DF:50:E8:00:99:88:43:4A:BD:22:C3:CA:89:65:BB:7C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C74DAEA9658B068ABA6B3DDAA8174
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SzE_d99Q6ACZiENKvSLDyollu3w.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215809
IP address blocks: 2a12:bec0:5f0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:da:ea:96:58:b0:68:ab:a6:b3:dd:aa:81:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b313f77df50e8009988434abd22c3ca8965bb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:b6:08:c5:a4:c1:96:e4:df:72:83:47:59:
ec:d0:72:64:59:37:89:cf:f5:fe:eb:12:88:1e:01:
ad:11:4b:a4:85:b3:01:a1:b1:fd:25:9e:c5:ff:b1:
77:fb:e9:ac:76:20:17:25:cd:3e:76:d5:f9:6d:1f:
58:1e:de:c9:70:9d:86:8b:23:d9:91:09:86:f9:67:
dd:c6:7f:f4:b9:62:e3:7d:58:dc:80:12:77:af:b0:
6d:89:ea:9c:2b:4f:64:3d:75:6b:fc:0a:c6:ec:c6:
e9:53:b2:1d:53:10:97:82:a7:a8:2e:d5:a9:02:7d:
05:20:d5:82:26:19:61:80:34:c3:9d:51:f2:d9:63:
48:64:7e:e6:b3:dc:e9:c6:31:81:f2:6d:63:47:c3:
ac:9d:bc:06:4b:05:1e:34:a5:33:d1:13:e7:3d:26:
ff:46:49:21:a1:3e:2d:26:cc:68:e5:c8:31:79:9b:
d2:01:a9:aa:d9:54:16:5e:d8:8e:95:f1:4e:c6:e7:
2b:61:75:9f:9a:1f:8a:6a:5b:87:a8:e2:b6:65:5b:
ed:6e:b0:cf:42:94:44:6d:1d:c1:d2:c8:d7:91:1f:
0c:1e:20:e3:6e:30:a3:95:1a:ed:94:af:1c:56:9e:
f9:77:77:79:7a:7b:df:36:02:47:a5:76:a5:3c:22:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:3F:77:DF:50:E8:00:99:88:43:4A:BD:22:C3:CA:89:65:BB:7C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SzE_d99Q6ACZiENKvSLDyollu3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:5f0::/44
Signature Algorithm: sha256WithRSAEncryption
3a:d8:82:d1:75:9d:57:14:41:2d:fb:b4:96:8e:30:0e:b2:f2:
a6:97:a9:fb:e4:27:99:c4:12:b5:c1:43:d1:24:92:aa:93:01:
9d:8b:14:33:52:18:fd:ed:12:a7:90:1b:41:71:bb:db:3a:c2:
11:75:13:a2:e6:8a:2b:17:a3:10:b3:55:af:c2:46:80:a4:48:
f5:98:d1:03:9e:80:89:ff:6d:f5:d6:bc:61:98:24:ff:1e:36:
b2:9c:6b:ab:cf:69:d4:d5:95:f2:e7:a1:d8:38:33:a6:4d:5f:
1b:44:a0:82:00:14:34:93:9e:ad:96:e9:9c:5a:3e:ed:c9:05:
ab:0a:95:d2:b8:b5:8c:a0:a9:db:bc:7f:6c:a4:f6:e6:cd:89:
70:27:42:d3:b9:ab:4a:3c:ad:8c:ec:a3:d4:77:bc:5b:ba:d5:
8b:ea:eb:61:c4:ee:4e:36:bc:8d:48:2c:23:7e:f7:df:69:0d:
10:89:60:24:d8:61:c0:1b:61:e1:80:c3:5c:83:81:00:67:81:
0e:1b:1a:e3:d3:cc:4b:ff:f2:b9:d7:a9:4b:2b:10:0c:64:8e:
05:f7:ab:cc:aa:5b:97:3a:1a:a9:f8:47:14:79:24:8a:8a:5c:
63:50:43:7f:8c:43:71:4b:fe:2b:bd:ef:24:42:32:0d:19:cc:
77:f8:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:51 2025 by rpki-client