Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aN5tHRGCgu-axROPIY9CilFC44g.roa
File: aN5tHRGCgu-axROPIY9CilFC44g.roa (raw, json)
Hash identifier: pprkGlVRLwsB6s7mEoGg+IpGAxL5at5r25dzNnoONDo=
Subject key identifier: 68:DE:6D:1D:11:82:82:EF:9A:C5:13:8F:21:8F:42:8A:51:42:E3:88
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01935E28753D72969FD611A53F9ED18F9FC7
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aN5tHRGCgu-axROPIY9CilFC44g.roa
Signing time: Sun 24 Nov 2024 12:32:10 +0000
ROA not before: Sun 24 Nov 2024 12:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:bec4:1630::/48 maxlen: 48
2a12:bec4:1631::/48 maxlen: 48
2a12:bec4:1632::/48 maxlen: 48
2a12:bec4:1633::/48 maxlen: 48
2a12:bec4:1634::/48 maxlen: 48
2a12:bec4:1635::/48 maxlen: 48
2a12:bec4:1636::/48 maxlen: 48
2a12:bec4:1637::/48 maxlen: 48
2a12:bec4:1638::/48 maxlen: 48
2a12:bec4:1639::/48 maxlen: 48
2a12:bec4:163a::/48 maxlen: 48
2a12:bec4:163b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:28:75:3d:72:96:9f:d6:11:a5:3f:9e:d1:8f:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 24 12:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68de6d1d118282ef9ac5138f218f428a5142e388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:82:f3:fa:43:22:a0:c7:5f:57:44:9e:26:
ff:c9:bb:2b:e7:e6:dc:cd:2a:56:8c:50:0c:b8:34:
f7:7a:19:15:03:36:b3:93:60:ab:bc:87:f1:65:13:
66:02:3e:3d:fc:c0:10:f5:bb:27:df:22:43:f6:ee:
80:97:fa:13:18:fc:ea:2b:2d:d2:45:f1:5c:85:b8:
7f:0c:5c:45:b8:fd:50:f7:8f:90:08:fb:47:83:9c:
f9:22:0b:6b:56:57:e8:64:c6:28:b9:05:8a:e9:f9:
10:87:da:75:8a:03:5a:24:3a:42:ad:4e:b6:26:20:
bb:d2:99:76:bc:c1:61:b1:2f:14:00:6e:c9:6d:d5:
e3:e8:ad:09:31:3d:54:b9:88:2a:96:5e:a5:90:25:
e1:23:06:c2:cf:f9:6b:f2:41:74:86:55:01:65:1a:
f4:ab:d6:b3:94:51:4a:da:48:22:de:86:e9:9a:3c:
7d:47:25:9a:83:aa:69:d3:6b:72:9e:ca:db:67:70:
6a:3e:32:d8:4b:b3:81:88:87:6f:2b:64:a2:1e:d1:
ca:45:e0:a7:f9:4b:b3:0e:4c:e0:29:ac:9d:2b:0c:
7f:29:e7:85:65:14:60:e7:45:d9:13:63:30:4e:7b:
e2:49:de:01:dc:55:a2:cf:80:6c:09:87:d6:0e:18:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:6D:1D:11:82:82:EF:9A:C5:13:8F:21:8F:42:8A:51:42:E3:88
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aN5tHRGCgu-axROPIY9CilFC44g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1630::-2a12:bec4:163b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ba:c6:d2:06:df:66:83:0f:bd:7d:35:d6:56:c2:e5:49:3a:fe:
f0:92:d8:31:14:b7:46:e8:e0:40:f5:1f:93:75:f3:af:3a:7a:
4b:a9:7b:e1:e9:3f:16:14:3c:c0:4e:a6:17:1e:17:e0:11:33:
24:aa:97:1a:a9:e5:cb:cf:34:25:da:7d:d5:73:e2:77:fa:fa:
88:18:5a:9c:b9:ec:6c:50:12:f2:24:f1:b8:d7:7e:07:40:09:
6e:72:d6:7b:70:bb:c5:23:a4:8c:7a:87:4f:bc:7a:12:95:61:
a1:f0:d5:53:0c:73:ae:7e:aa:b9:bc:6f:49:dc:84:38:ec:e5:
5e:3b:e5:47:76:7f:af:99:88:0f:ca:e9:f5:46:3b:b5:f8:26:
7b:53:0e:4a:3d:b1:46:35:d5:b2:64:b4:d1:78:d2:ef:05:31:
0b:e1:67:e2:fc:a8:81:4a:2b:f5:1b:7b:21:6d:1b:51:f5:9d:
4f:08:c8:f6:e3:01:cd:8a:c5:49:ca:f8:60:e6:72:b6:e9:90:
65:5a:ee:d3:02:94:12:35:70:22:6f:60:1d:d5:cb:14:95:d6:
7f:3b:dc:0e:5e:10:33:9d:f0:26:4c:43:7f:1e:3f:44:8a:46:
de:ca:b3:45:a3:09:73:76:48:73:56:0f:98:e2:80:55:46:ed:
0f:02:4e:6a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZNeKHU9cpaf1hGlP57Rj5/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQxMTI0MTIzMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGRlNmQxZDExODI4MmVmOWFjNTEzOGYyMThmNDI4YTUxNDJlMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf6C8/pDIqDHX1dEnib/ybsr5+bc
zSpWjFAMuDT3ehkVAzazk2CrvIfxZRNmAj49/MAQ9bsn3yJD9u6Al/oTGPzqKy3S
RfFchbh/DFxFuP1Q94+QCPtHg5z5IgtrVlfoZMYouQWK6fkQh9p1igNaJDpCrU62
JiC70pl2vMFhsS8UAG7JbdXj6K0JMT1UuYgqll6lkCXhIwbCz/lr8kF0hlUBZRr0
q9azlFFK2kgi3obpmjx9RyWag6pp02tynsrbZ3BqPjLYS7OBiIdvK2SiHtHKReCn
+UuzDkzgKaydKwx/KeeFZRRg50XZE2MwTnviSd4B3FWiz4BsCYfWDhjxawIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGjebR0RgoLvmsUTjyGPQopRQuOIMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvYU41dEhSR0NndS1heFJPUElZOUNpbEZDNDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqEr7E
FjADBwIqEr7EFjgwDQYJKoZIhvcNAQELBQADggEBALrG0gbfZoMPvX011lbC5Uk6
/vCS2DEUt0bo4ED1H5N18686ekupe+HpPxYUPMBOphceF+ARMySqlxqp5cvPNCXa
fdVz4nf6+ogYWpy57GxQEvIk8bjXfgdACW5y1ntwu8UjpIx6h0+8ehKVYaHw1VMM
c65+qrm8b0nchDjs5V475Ud2f6+ZiA/K6fVGO7X4JntTDko9sUY11bJktNF40u8F
MQvhZ+L8qIFKK/UbeyFtG1H1nU8IyPbjAc2KxUnK+GDmcrbpkGVa7tMClBI1cCJv
YB3VyxSV1n873A5eEDOd8CZMQ38eP0SKRt7Ks0WjCXN2SHNWD5jigFVG7Q8CTmo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:30 2025 by rpki-client