Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X7j3ltoo-N9qbT-mENUxy0Do_ec.roa
File: X7j3ltoo-N9qbT-mENUxy0Do_ec.roa (raw, json)
Hash identifier: XYYhiycx2Tyy3rOhgvxQiG3wrf2/LIXMKnZFXV1yJq0=
Subject key identifier: 5F:B8:F7:96:DA:28:F8:DF:6A:6D:3F:A6:10:D5:31:CB:40:E8:FD:E7
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4AF54ADC2CF2571F38E7826DFDE3
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X7j3ltoo-N9qbT-mENUxy0Do_ec.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58052
IP address blocks: 2a12:bec0:190::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:f5:4a:dc:2c:f2:57:1f:38:e7:82:6d:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fb8f796da28f8df6a6d3fa610d531cb40e8fde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:51:14:25:47:8c:21:27:6d:0a:7a:b9:95:
e9:c3:d5:20:c5:4b:e2:d3:6a:90:ee:3d:46:e7:cf:
34:e9:82:02:39:b0:2a:f1:ee:4b:ed:4e:7e:8e:ef:
b3:6c:53:c2:e8:1e:7a:4c:85:0b:5f:49:89:1c:6c:
82:21:cf:0f:e9:3c:40:6d:68:1c:eb:c9:9f:1a:ba:
5b:e0:a6:23:62:33:35:e5:62:cd:d5:82:7d:7f:d7:
3e:6e:91:69:54:da:04:14:30:66:5e:fa:2e:e9:7f:
8a:d1:da:67:41:c2:7e:a7:a0:d3:7e:95:44:e4:1c:
41:9b:ce:cc:c8:e2:fb:f4:e2:01:ac:21:fa:c8:97:
b6:7e:01:13:8f:f6:9c:ef:d4:b6:5f:aa:dc:43:28:
98:30:06:08:48:bf:91:16:85:30:e9:f4:a2:be:17:
51:dc:aa:3d:20:bd:95:29:ae:9e:41:c7:bd:d0:bf:
7c:77:cf:42:bd:6e:fd:ae:4f:a2:a2:b8:83:6e:9d:
11:7d:02:54:f7:eb:4a:4a:f4:fd:e4:12:70:62:ad:
2a:64:00:57:7f:e0:06:09:69:5f:f8:81:05:44:d7:
d6:47:63:79:2c:b6:15:0f:4f:f5:c5:5c:97:ef:db:
6e:70:94:60:bb:3b:14:79:fc:96:1a:9d:1b:66:0d:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:F7:96:DA:28:F8:DF:6A:6D:3F:A6:10:D5:31:CB:40:E8:FD:E7
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X7j3ltoo-N9qbT-mENUxy0Do_ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:190::/44
Signature Algorithm: sha256WithRSAEncryption
23:40:7c:81:f6:f5:5a:07:d1:7b:a1:53:b9:7b:77:fd:66:db:
7b:07:c9:8b:c8:47:06:5e:e8:66:8e:2c:06:a0:b5:d8:6a:d5:
92:e2:37:27:94:c2:c3:c3:cb:ae:61:51:36:ec:2d:d5:4b:5a:
a0:05:14:e6:5d:42:b8:a9:7b:c4:32:dc:d6:a0:be:e9:b3:97:
cc:96:88:02:e6:21:2f:84:1a:2d:41:4f:a3:f0:7c:36:89:60:
7b:7f:3c:26:08:25:98:09:30:f7:2e:bd:34:d4:c3:4d:71:6f:
c6:da:94:ed:ca:75:95:d4:b5:9b:0b:8a:7d:43:c0:1b:35:1b:
b8:0d:09:d8:6a:8b:a0:d8:1c:0e:37:b3:9f:eb:97:9c:de:fe:
12:5c:95:aa:2b:53:e3:77:f8:22:99:29:f9:9c:16:d1:7c:59:
e7:ca:4a:d2:e4:92:92:c3:4a:d7:8a:b0:b1:36:d4:fb:01:77:
52:67:29:66:1b:30:ef:5c:a3:75:c0:2f:45:4a:ed:1a:77:6c:
57:ec:33:e9:d5:a3:99:e2:74:cd:b2:92:90:fd:6a:d5:94:dc:
96:15:0e:0d:97:22:ed:c5:b5:05:fd:21:c4:a1:28:28:28:5c:
3d:f0:17:10:e5:46:eb:f2:6a:bc:97:2e:96:02:87:00:a2:b8:
1c:6e:0b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:59:36 2025 by rpki-client