Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fbBlGK2scyur8aZNm9NtnZK-w1Q.roa
File: fbBlGK2scyur8aZNm9NtnZK-w1Q.roa (raw, json)
Hash identifier: 7Sgxp6t955Asp+AzY2t2hqWIr6TS6Yy5CohyEwP+Plc=
Subject key identifier: 7D:B0:65:18:AD:AC:73:2B:AB:F1:A6:4D:9B:D3:6D:9D:92:BE:C3:54
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0193DDE09857112BDDECA9756EF13B0A0529
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fbBlGK2scyur8aZNm9NtnZK-w1Q.roa
Signing time: Thu 19 Dec 2024 07:45:03 +0000
ROA not before: Thu 19 Dec 2024 07:45:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214422
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:dd:e0:98:57:11:2b:dd:ec:a9:75:6e:f1:3b:0a:05:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 19 07:45:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7db06518adac732babf1a64d9bd36d9d92bec354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:59:e4:fa:63:ae:ed:ad:d4:38:32:99:5f:
e2:ac:28:71:2b:0b:07:7e:22:3c:ac:c5:0a:06:22:
32:3d:65:b0:c5:90:26:8e:d1:38:be:bb:be:56:69:
31:93:46:56:f9:e3:d2:bb:e4:79:50:28:39:4c:0d:
ef:8e:7f:ee:28:72:37:3d:87:81:60:ec:5f:8f:11:
ec:ca:c7:53:9c:77:07:fe:35:e3:cf:1a:e3:46:39:
7f:04:1f:04:3f:37:f8:cc:e8:fb:6b:ae:51:78:0c:
97:a2:88:51:83:13:4f:8f:9a:1f:03:48:f9:2c:ea:
8a:5b:ae:50:54:c0:3d:5f:6e:ad:53:b8:b6:ed:0d:
ce:ca:fa:39:31:5a:e4:4d:fd:53:49:26:6a:cd:8f:
14:ca:15:da:ef:8e:a6:3e:ca:6d:5f:93:04:38:53:
b0:6e:6c:fd:65:20:3d:39:12:12:ce:98:b9:f2:d7:
64:9c:0d:95:79:97:be:49:19:14:92:a2:ad:93:68:
5b:7d:78:f5:5b:b8:07:31:c5:81:c9:ac:8c:87:1a:
30:70:40:b7:8a:44:2a:86:26:08:67:79:87:f7:db:
57:f0:1f:92:89:69:24:12:56:10:ff:16:50:d9:69:
1f:69:27:3c:e2:89:04:25:00:3b:49:a3:ae:90:f9:
db:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:65:18:AD:AC:73:2B:AB:F1:A6:4D:9B:D3:6D:9D:92:BE:C3:54
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fbBlGK2scyur8aZNm9NtnZK-w1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
Signature Algorithm: sha256WithRSAEncryption
7d:90:98:e7:62:16:40:37:a7:23:6f:b1:8f:6b:4f:fa:64:56:
91:19:a7:85:9b:6b:ff:f8:7e:38:96:e0:69:16:3c:a4:6a:40:
b7:25:52:59:03:32:89:b2:5d:eb:dc:e5:61:28:c6:50:8b:df:
74:55:ed:14:ad:52:f8:fb:5c:36:9f:7f:4f:53:b4:e9:e6:c6:
5d:fc:0d:99:03:8d:d3:95:83:57:06:81:37:4d:cf:50:85:cf:
74:f4:ba:cd:9e:3a:f1:c2:80:77:84:86:3c:9f:e7:a2:7a:5d:
3c:b8:7b:c6:7c:50:32:a8:13:aa:90:09:38:9d:a9:73:5e:71:
c0:96:8d:c3:02:3d:fe:64:29:b7:7b:88:2a:a9:6a:ba:2e:0d:
6a:eb:09:24:32:a7:c1:00:45:96:58:8d:10:f2:19:1a:b1:8f:
e6:a6:d0:bb:6f:b7:0b:66:b8:64:e3:3a:82:46:ba:ab:4a:74:
a7:bd:83:a0:65:ca:9a:e4:6c:b1:93:bc:d4:6e:9e:0e:d9:59:
25:c2:eb:ba:c2:65:00:01:23:d5:5d:17:dd:77:2b:32:dc:da:
b5:08:c5:03:bd:f5:98:1e:f6:ed:1f:07:76:ed:cf:31:9d:a5:
60:54:69:14:a3:48:d1:60:da:2f:03:d0:24:7c:19:4b:5a:54:
b5:13:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:56:11 2025 by rpki-client