Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/b7zmAAG-hE-dL1MLFju4rZ6MQ3w.roa
File: b7zmAAG-hE-dL1MLFju4rZ6MQ3w.roa (raw, json)
Hash identifier: WsvFy3oTmR0eMJO6ZrtDuH5KpET0OuOG913mslU+wxk=
Subject key identifier: 6F:BC:E6:00:01:BE:84:4F:9D:2F:53:0B:16:3B:B8:AD:9E:8C:43:7C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C73370714B6867C33FC6977CFC189
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/b7zmAAG-hE-dL1MLFju4rZ6MQ3w.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215752
IP address blocks: 2a12:bec0:640::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:37:07:14:b6:86:7c:33:fc:69:77:cf:c1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fbce60001be844f9d2f530b163bb8ad9e8c437c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:b4:77:be:24:5e:9e:b3:da:5d:5e:5d:7f:
a1:1a:df:62:c2:8c:57:df:75:1a:15:90:53:38:57:
bd:8c:9b:12:53:b1:66:46:e5:bb:c9:b4:0c:4d:b1:
22:7d:b1:60:50:75:af:92:c1:3e:8a:27:d0:7c:51:
6e:05:1a:17:f8:ee:44:d9:36:c1:36:82:81:a3:aa:
3b:8f:d3:35:76:65:e6:6e:e1:5c:42:ab:db:c2:7c:
b2:53:32:4b:22:8a:e5:cf:e8:97:d3:92:26:51:1d:
25:98:e8:6a:2f:b0:f8:cd:97:04:4e:93:18:50:fd:
1a:42:a1:06:ff:7d:d9:d9:1c:57:0b:54:5b:9d:a3:
23:b0:0f:95:c5:83:86:dd:5d:1a:05:0c:b4:a3:8a:
a4:14:4d:00:17:00:79:3f:27:9f:f0:52:7e:cc:6f:
2c:3a:ff:cf:3b:4b:e7:b2:9e:b0:96:7c:96:0e:d9:
bb:35:cd:55:93:b2:c2:54:0a:b4:1d:95:f1:05:7f:
29:0a:a2:26:21:70:24:12:19:b4:7e:19:05:4c:c3:
86:e4:ca:09:65:3b:86:77:40:b6:89:77:b3:e4:c1:
44:53:07:73:a0:f4:b6:57:62:d2:d4:84:15:91:9f:
4d:ab:ee:57:9e:f4:90:e1:bd:b1:a5:a4:61:61:91:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:E6:00:01:BE:84:4F:9D:2F:53:0B:16:3B:B8:AD:9E:8C:43:7C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/b7zmAAG-hE-dL1MLFju4rZ6MQ3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:640::/44
Signature Algorithm: sha256WithRSAEncryption
1e:25:91:77:1a:35:b3:05:e4:05:25:04:c3:47:78:83:94:77:
29:9b:ac:12:8f:ee:40:53:49:87:5f:da:f3:be:55:2c:4c:1f:
ef:02:fb:b8:57:59:32:8a:9d:31:4b:49:7f:07:bf:c3:be:3d:
a4:a6:db:da:f1:b8:66:f9:37:d9:70:f7:cd:cb:c0:c7:a0:d0:
46:31:79:d2:51:a0:68:85:84:46:a5:d2:a7:60:d9:96:d7:11:
ca:c5:80:e6:ce:08:a5:7f:7e:01:b5:63:67:c4:35:a8:f9:5a:
13:25:9a:09:9c:91:dc:63:6c:16:5d:20:5d:3c:c8:a4:69:4c:
7b:f8:15:d1:6e:61:a7:87:88:25:b0:9e:fb:f5:7a:30:47:3e:
42:b1:e5:50:f4:e1:0f:11:3b:be:17:95:50:ae:11:1c:17:e7:
c5:da:b5:bf:ba:3d:4b:da:45:d3:f5:29:a9:0e:5a:ab:66:f7:
3c:90:ba:db:af:20:11:11:19:ef:48:34:97:41:41:5c:4a:0e:
33:e2:ed:fd:b1:ea:4b:da:ae:4d:4c:ea:ec:61:73:ba:ba:2a:
35:10:6b:34:04:93:5e:83:da:a7:c2:f3:e1:63:81:04:c8:b8:
b1:7c:c2:a9:4e:5a:c3:ca:66:73:73:b3:32:3d:6e:0f:d8:56:
58:50:f9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:56:54 2025 by rpki-client