Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/h3W_AfMQ_nsQOZZ2VOKolZ6SmWo.roa
File: h3W_AfMQ_nsQOZZ2VOKolZ6SmWo.roa (raw, json)
Hash identifier: GVFmwyfSyHnSO80+7oK6+UbUjyJ2XSKrplcgGF3OJjU=
Subject key identifier: 87:75:BF:01:F3:10:FE:7B:10:39:96:76:54:E2:A8:95:9E:92:99:6A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019365BE4B327E45FB2016A926866A609AEC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/h3W_AfMQ_nsQOZZ2VOKolZ6SmWo.roa
Signing time: Mon 25 Nov 2024 23:53:10 +0000
ROA not before: Mon 25 Nov 2024 23:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13852
IP address blocks: 2a12:bec4:1630::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:be:4b:32:7e:45:fb:20:16:a9:26:86:6a:60:9a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 25 23:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8775bf01f310fe7b1039967654e2a8959e92996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:d5:d8:ed:e1:11:6e:2f:1d:ef:06:04:be:
fc:7b:f3:ab:63:a6:54:1f:38:d9:ac:e2:5e:1e:34:
e1:1c:72:37:98:1c:09:92:5a:c7:1c:df:fe:64:f2:
5a:60:f2:8b:b6:41:d0:ce:17:46:29:03:d3:2b:06:
56:60:85:88:22:e2:0f:c9:98:4c:b8:80:2b:63:3d:
50:f7:85:76:fd:e0:a5:51:d1:54:77:7f:1f:45:69:
11:fe:40:b3:59:08:c0:0f:e1:e1:24:f1:3d:b5:3f:
97:e8:30:ac:8d:a2:59:72:13:a3:8a:9b:d2:4b:da:
dd:7d:b2:7c:42:ca:c2:28:08:78:b7:af:3b:36:95:
1f:fe:6e:39:7f:bf:25:0a:52:ad:e7:e7:5e:37:10:
b9:4c:33:51:6a:82:5d:94:e7:db:a8:fd:55:be:17:
36:f7:5c:05:63:70:d4:3c:55:d9:d4:92:98:62:95:
4d:ac:d1:0e:b6:e6:92:0d:31:48:2f:d9:e7:2e:1c:
07:16:ae:f5:10:3f:72:fc:2c:94:17:05:f9:30:62:
9a:af:e8:77:c0:5e:c3:a4:f4:40:b2:e0:8a:f1:54:
7b:a9:f9:fd:23:c3:73:1f:35:08:89:3d:67:54:09:
5c:95:d2:5b:0a:d5:86:b1:99:9a:1c:4a:82:1f:af:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:75:BF:01:F3:10:FE:7B:10:39:96:76:54:E2:A8:95:9E:92:99:6A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/h3W_AfMQ_nsQOZZ2VOKolZ6SmWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1630::/44
Signature Algorithm: sha256WithRSAEncryption
3c:7f:77:28:1d:62:2f:99:66:69:6c:03:fb:b7:79:3a:44:ba:
b3:af:13:74:2f:0d:92:e4:cf:29:fa:90:ee:25:97:b8:26:27:
51:ee:d0:f2:8e:d0:68:e6:86:3d:01:37:74:d7:ff:1c:28:ae:
5e:da:1a:c3:5b:09:4d:69:ca:db:48:eb:91:48:b7:3c:bd:31:
8a:f7:9c:8e:16:52:ae:76:71:c9:6a:2b:89:ce:93:bb:bc:87:
2f:89:9a:35:aa:db:f1:22:55:7c:4d:77:b5:68:ed:06:ca:90:
23:33:23:b8:bd:7c:a1:9a:b6:32:6a:ae:53:2f:ff:87:03:23:
0e:cd:a0:0b:54:e2:7d:ae:16:d3:d8:1f:f3:bc:c7:9b:1e:f4:
cf:76:fc:72:cc:fd:88:db:b1:31:4f:7b:1a:d1:0c:8d:8d:80:
36:c1:04:1d:02:4f:f5:ea:87:1c:01:1c:20:be:40:4f:5d:70:
ed:94:54:b5:8a:7a:60:21:98:eb:f2:27:90:a2:b1:0a:5d:17:
5c:73:0c:43:09:80:fd:2c:96:66:e3:32:73:82:1e:29:f0:0d:
ac:6d:ce:bb:61:df:f6:a7:09:be:2a:a6:4f:ad:e8:33:f3:e0:
01:65:24:e1:37:2a:d6:1d:ae:62:ee:90:37:62:9b:2d:3b:3e:
74:0d:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:57:30 2025 by rpki-client