Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/i04Ih6b3JvQAxkBsOVH9QOH-ClQ.roa
File: i04Ih6b3JvQAxkBsOVH9QOH-ClQ.roa (raw, json)
Hash identifier: q8tznrTijtccPFMI68xGP5YnBUZ3CJzoBCzd2dujgL4=
Subject key identifier: 8B:4E:08:87:A6:F7:26:F4:00:C6:40:6C:39:51:FD:40:E1:FE:0A:54
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5E70F44D8864835B6E0DE7277C4F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/i04Ih6b3JvQAxkBsOVH9QOH-ClQ.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206125
IP address blocks: 2a12:bec0:80::/44 maxlen: 48
2a12:bec0:8f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5e:70:f4:4d:88:64:83:5b:6e:0d:e7:27:7c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4e0887a6f726f400c6406c3951fd40e1fe0a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:fb:28:8b:8b:17:73:29:f4:81:1a:83:ea:
9f:9d:7a:2c:03:c4:05:db:14:06:f9:0d:1d:fd:06:
74:c9:bd:99:4b:43:94:57:bd:5a:fe:85:c8:d9:bb:
7f:55:90:ea:44:af:5b:1a:32:8b:cc:95:10:b9:61:
ef:a7:27:18:4b:a2:0b:06:24:da:62:50:bb:08:a6:
30:be:84:bb:bc:8f:1c:f4:f9:76:3f:98:a7:9c:ba:
b2:a3:34:ec:0d:4b:96:61:e9:a7:85:8e:5f:cd:4f:
60:c6:a8:1a:57:6b:28:79:96:b5:c4:e7:7d:f8:50:
f6:23:4a:df:07:fb:8f:a3:2e:64:c6:7b:da:5b:2b:
cb:e3:5f:76:0d:29:19:cd:ea:a3:95:0a:6d:2e:22:
5a:37:ee:83:c3:05:fe:b5:f8:af:c7:77:06:47:1a:
c3:c3:87:42:54:8c:07:99:5b:a5:7b:68:3b:a5:99:
59:20:0b:87:5c:52:55:92:bc:c2:a5:27:03:52:ca:
fc:d7:f6:c6:ad:7b:d5:36:81:d4:d4:81:6f:15:ad:
40:9b:f7:40:20:ae:d4:5b:8d:28:bd:a8:f4:51:f9:
ba:5f:21:ac:f5:6f:9a:b5:69:d0:83:36:05:19:23:
87:b1:19:cd:89:f8:bf:0a:2c:b0:eb:5a:e0:41:ac:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:08:87:A6:F7:26:F4:00:C6:40:6C:39:51:FD:40:E1:FE:0A:54
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/i04Ih6b3JvQAxkBsOVH9QOH-ClQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:80::/44
Signature Algorithm: sha256WithRSAEncryption
aa:ca:be:b2:fa:4e:21:0d:8b:71:0c:7b:d4:bb:ae:d8:2a:ca:
0a:27:b9:4c:72:a9:4a:68:39:ad:c4:61:74:8d:94:99:73:ae:
1f:60:81:39:cd:b3:27:83:e4:1a:e2:b6:3b:56:2a:02:bd:ba:
9c:85:e4:20:cd:82:9d:a2:30:6c:c9:d0:0b:64:66:68:05:50:
6e:da:d4:e0:35:4b:71:53:86:b7:1e:b3:ff:1e:6e:dd:0b:0f:
1f:d0:27:52:df:77:bb:dd:ae:44:75:c8:d3:bf:15:31:79:db:
ba:09:be:bd:3a:15:51:48:ad:40:f1:7a:92:3c:00:4a:6b:56:
27:d0:ca:39:a4:c0:99:65:94:9f:38:f8:60:c0:c6:fe:de:da:
2a:54:18:f5:8c:b4:7e:7b:b5:03:46:60:5a:ab:4c:00:ae:5a:
2d:af:34:88:d9:bb:4b:f0:5c:52:1b:db:bd:20:76:f2:56:66:
88:30:60:a1:78:da:ae:37:1a:b7:a7:63:a4:f2:f6:b4:77:58:
6a:8c:21:6e:78:49:24:9b:4c:df:0a:a3:43:7d:59:04:4e:71:
d7:68:31:f6:0f:d4:0f:89:bf:c4:61:8d:c2:1e:81:89:c6:21:
65:a0:79:04:c2:00:38:12:73:c2:c7:9e:12:e3:53:2d:8f:76:
d0:a5:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:36 2025 by rpki-client