Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/grUIwPov-Y6g8bg4ySK72YcJDVc.roa
File: grUIwPov-Y6g8bg4ySK72YcJDVc.roa (raw, json)
Hash identifier: ywud8kpeqOMj1QfdE+iRs0SYGFj0X9NnBXk2U8Kw2XQ=
Subject key identifier: 82:B5:08:C0:FA:2F:F9:8E:A0:F1:B8:38:C9:22:BB:D9:87:09:0D:57
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5A17F3E23BC40968FAB050C410AB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/grUIwPov-Y6g8bg4ySK72YcJDVc.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199948
IP address blocks: 2a12:bec0:140::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:17:f3:e2:3b:c4:09:68:fa:b0:50:c4:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82b508c0fa2ff98ea0f1b838c922bbd987090d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:3d:bd:dc:89:3a:15:07:9f:3d:23:00:2c:
89:b8:f3:f0:83:de:78:ae:a6:7e:82:cd:16:7b:81:
c3:8c:43:a7:61:82:0c:20:0b:07:a8:b9:48:bc:4f:
64:77:b7:f0:16:ed:e1:6b:aa:ef:2e:87:04:ce:d5:
dd:14:e2:1c:bf:6d:bf:9f:1b:74:8d:d9:bc:5e:50:
f9:d4:ce:a5:6e:a8:0d:99:13:3c:e3:9c:46:c7:2e:
26:ff:f2:e9:1d:c8:97:c5:19:ff:ed:9e:98:43:b1:
30:62:a9:a9:19:ae:07:98:fe:f5:50:30:ac:bc:69:
6f:c2:f1:40:95:5b:8e:5b:a2:a5:b7:65:bb:c4:d9:
0d:c0:02:6e:7c:9d:36:2b:a9:27:17:b3:85:3e:ea:
ec:65:7e:a7:98:3c:a4:d2:5e:7f:6a:37:40:b5:87:
a6:63:96:bf:fc:80:fa:cb:ea:51:e8:c6:32:5d:4e:
73:7c:4b:26:6f:9f:a5:8e:23:66:28:41:51:bf:47:
fc:d1:ed:f6:cf:17:c2:ee:04:46:cb:8d:65:7f:cc:
4b:7a:61:75:09:36:b7:bf:ac:28:0f:23:e4:b4:94:
0b:6f:ee:93:3c:0f:f9:77:72:aa:36:92:46:01:e7:
65:d3:27:54:d5:11:e6:45:bb:5f:87:b3:5b:46:28:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B5:08:C0:FA:2F:F9:8E:A0:F1:B8:38:C9:22:BB:D9:87:09:0D:57
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/grUIwPov-Y6g8bg4ySK72YcJDVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:140::/44
Signature Algorithm: sha256WithRSAEncryption
87:3b:e5:19:90:7e:58:c3:0c:eb:ed:66:e7:ce:24:13:88:0e:
13:08:4b:24:24:42:ac:01:35:1b:c3:3f:71:32:ca:d9:46:a3:
a9:49:8a:2f:b0:44:e3:41:4b:a2:bf:8e:5c:19:26:68:58:8b:
6b:38:0c:ec:78:4c:e6:41:f9:40:a5:5c:5b:10:ae:af:30:ee:
f2:b0:b8:74:67:1e:9f:42:5e:b8:8a:ab:c6:a5:1a:2d:28:7e:
f1:06:ed:00:d0:34:ed:b0:09:8c:88:60:6e:e5:15:38:3c:0d:
91:49:73:47:5f:c6:26:fb:2b:92:e3:54:f8:aa:4b:ad:63:33:
60:45:cb:d4:75:00:f0:35:58:90:d5:72:d8:2b:16:d4:ac:56:
c1:a0:78:0b:3b:83:72:91:55:56:67:62:0b:aa:4e:66:03:ff:
3b:db:ec:17:85:30:12:20:57:9e:4d:7a:50:44:ed:87:9f:00:
3a:69:72:a5:63:d3:26:1d:25:b3:22:df:df:b7:6c:67:3e:0b:
ea:74:9d:db:f1:ff:77:1e:27:e7:a3:41:9f:ae:01:3d:d6:b1:
5b:92:2f:c3:50:9e:2f:97:86:86:18:42:44:8a:a0:0c:97:4a:
4e:54:4f:68:8d:a9:d5:c1:12:32:d6:e1:f8:85:86:c0:9e:27:
f6:65:01:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:55:15 2025 by rpki-client