Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TcRXeuooJnLAUboFLpDr6M739aQ.roa
File: TcRXeuooJnLAUboFLpDr6M739aQ.roa (raw, json)
Hash identifier: OG5RjE6f8LnsFsNLi6X/Nj/JFvePeUt+0cHO484csyI=
Subject key identifier: 4D:C4:57:7A:EA:28:26:72:C0:51:BA:05:2E:90:EB:E8:CE:F7:F5:A4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C54204E36B947DD3A569324AD4A48
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TcRXeuooJnLAUboFLpDr6M739aQ.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199457
IP address blocks: 2a12:bec0:220::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:20:4e:36:b9:47:dd:3a:56:93:24:ad:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dc4577aea282672c051ba052e90ebe8cef7f5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:42:d5:90:8f:65:0a:0f:1e:84:16:91:0b:
87:60:1c:2a:f1:21:2b:35:a4:58:59:77:cb:ce:ef:
31:3e:26:65:e5:a2:1a:ff:b6:ca:cf:eb:79:10:a2:
57:e5:7c:1d:48:f7:88:0a:2a:68:f0:39:45:bb:17:
32:db:80:b9:0a:12:8c:92:0f:75:d4:6b:cc:8c:46:
9c:10:ce:fb:13:43:8d:25:5c:55:ca:28:7e:40:47:
3b:aa:52:86:32:24:80:1e:25:82:b8:1e:15:7b:b3:
2e:59:75:cb:48:55:1d:8d:8c:59:74:d7:2a:fd:5b:
5d:9b:4a:29:15:c3:e0:ca:65:63:80:b3:ec:31:d4:
31:ab:eb:19:f0:85:1b:e2:4d:1c:52:56:37:d2:d2:
af:fa:90:eb:5f:ff:63:15:7c:7d:e1:75:89:8c:04:
60:39:fa:ec:52:68:7b:3a:e8:ad:d8:d9:b4:8b:11:
4a:63:b0:83:15:51:4f:0b:59:db:39:07:06:d5:09:
fe:b0:c1:d2:33:f9:77:4a:72:33:f0:cc:a5:63:49:
0a:82:17:bc:6c:03:1e:c7:45:01:b2:d0:01:cd:40:
4a:b3:79:a5:d4:26:58:88:04:3e:12:51:04:94:3a:
86:c2:a4:6f:50:ea:17:75:43:e6:e8:47:72:3c:93:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C4:57:7A:EA:28:26:72:C0:51:BA:05:2E:90:EB:E8:CE:F7:F5:A4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/TcRXeuooJnLAUboFLpDr6M739aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:220::/44
Signature Algorithm: sha256WithRSAEncryption
7c:fa:2c:a1:db:71:09:91:d4:00:66:77:66:bc:fa:ff:6a:59:
9d:53:45:a8:11:c5:98:20:e8:c1:c3:ba:cf:1d:2b:11:84:c8:
c6:c1:f9:b8:4a:09:3e:9f:7a:11:eb:ca:7e:a4:1b:71:b5:68:
22:49:83:a0:2d:53:60:eb:b3:e3:0e:f4:34:e1:a0:50:d5:f9:
64:6b:3c:50:6f:81:4f:dd:ee:fe:74:0d:fe:e5:50:58:f3:01:
05:11:74:80:56:bd:04:75:5f:bc:52:f3:c6:3c:44:4c:72:92:
6e:66:3d:32:ad:5d:ad:f2:01:c3:b3:80:d2:06:4f:1d:3b:f9:
70:e7:53:d8:14:f7:80:6c:06:bd:91:61:9f:55:80:67:d8:31:
90:e5:4f:98:94:02:83:2d:99:dc:f6:f7:10:98:7b:c0:53:cb:
d3:c4:5d:58:5c:36:4d:81:62:14:ae:51:85:a9:b9:64:5f:6a:
4e:cc:18:3c:fd:7d:9f:78:5a:e4:da:ce:a5:da:8f:6c:42:5a:
f0:0a:ad:a1:c2:e0:e9:7e:a3:9c:27:36:ba:bf:9d:04:85:c1:
b9:87:fe:fe:b6:ae:85:7e:05:5c:78:a1:d6:92:5a:d7:85:73:
3e:34:d5:d1:92:9f:16:e1:bb:ec:ca:49:72:7b:90:c6:d0:55:
28:58:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:48 2025 by rpki-client