Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aA1WsbguF1KDXIjTH5J1N6-DQ-E.roa
File: aA1WsbguF1KDXIjTH5J1N6-DQ-E.roa (raw, json)
Hash identifier: 6Jh/nVkWFsEgLSJRC1zcc5VGHssTY46dv/HkN4UkA3E=
Subject key identifier: 68:0D:56:B1:B8:2E:17:52:83:5C:88:D3:1F:92:75:37:AF:83:43:E1
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6E57ED6C45DAA380479F8342D545
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aA1WsbguF1KDXIjTH5J1N6-DQ-E.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215303
IP address blocks: 2a12:bec4:10f1::/48 maxlen: 48
2a12:bec4:10f2::/48 maxlen: 48
2a12:bec4:10f3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6e:57:ed:6c:45:da:a3:80:47:9f:83:42:d5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680d56b1b82e1752835c88d31f927537af8343e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:c4:e9:a8:f9:f1:0f:05:b1:d9:e9:f5:12:
50:13:e9:64:d5:dd:51:50:61:e8:9d:71:25:84:cd:
f7:52:b2:f3:2d:8a:be:0c:a5:0d:e4:be:bf:20:36:
ae:3c:c6:a4:bc:53:66:ae:07:e0:91:d9:c2:c8:7d:
a7:a4:b6:2d:bb:ee:10:6c:ce:9e:fe:4d:68:48:e1:
59:60:11:80:11:27:b7:e6:a8:2d:b5:91:63:17:a9:
e8:5f:43:d2:c3:08:c4:d9:a2:df:54:60:11:7a:d2:
f3:c9:05:ce:0c:be:6c:dc:bf:19:19:e7:0d:b2:bf:
9c:2f:74:7d:9f:31:a7:4a:25:c9:14:2b:54:aa:1f:
4a:12:9d:fc:af:cc:c7:a0:6c:ad:99:3d:46:0c:22:
0a:94:63:20:d7:ec:54:d4:55:90:9b:ee:30:f3:0b:
15:b5:fd:c9:1d:72:c2:e4:45:55:f6:ed:14:0b:12:
b3:79:a1:09:fa:f4:f6:14:77:c2:ab:a6:80:20:0c:
4c:39:4e:e2:dd:92:b6:e3:53:01:09:fd:2a:10:5a:
7b:8e:cd:b1:5a:26:77:8a:87:3b:d7:92:71:65:7a:
b7:cd:c7:73:3c:2b:34:33:17:3d:bf:73:59:91:83:
41:fc:46:87:ff:18:d2:47:a4:eb:f1:61:c1:02:24:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:56:B1:B8:2E:17:52:83:5C:88:D3:1F:92:75:37:AF:83:43:E1
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aA1WsbguF1KDXIjTH5J1N6-DQ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:10f1::-2a12:bec4:10f3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:2d:7a:4c:98:54:ca:b4:5f:89:39:67:dd:75:0d:d2:16:3c:
ad:36:97:7a:9e:50:9a:de:7f:0b:67:19:0d:3b:3e:f8:df:e5:
dc:5f:f9:03:8a:84:cb:f3:9a:ae:b4:9c:7c:6e:22:34:a0:ca:
fc:e5:9d:9b:45:ca:05:91:5a:3e:b4:0e:71:30:0b:90:ae:ec:
97:ff:d0:20:9c:58:4e:55:5a:94:71:99:4a:0d:d9:8b:f0:db:
64:14:fb:c9:4b:94:4f:4e:30:61:bd:c5:ad:c2:e6:04:de:df:
4d:cb:32:74:6f:fd:15:b4:ee:7c:28:6a:c1:f3:ad:32:14:1f:
16:cf:3e:cf:8c:fe:8f:bf:e0:99:c5:83:26:dd:84:9b:ce:84:
38:51:aa:38:f4:5c:79:e6:6a:a8:d2:49:ef:39:40:11:64:e2:
53:8d:9c:66:dd:9a:ed:85:6c:db:48:79:a1:e4:a4:e0:77:7b:
6a:d7:be:d8:4a:29:5b:30:af:8a:1a:8e:b8:65:88:2a:1d:73:
3c:03:d3:78:15:ae:47:f7:d7:21:28:00:06:34:50:68:7c:b8:
9b:bc:48:77:10:31:36:35:a8:3d:71:59:6a:55:79:75:29:f9:
bc:e0:71:14:51:10:56:4e:bd:1e:99:5f:7c:95:90:40:6d:2f:
eb:21:de:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:32 2025 by rpki-client