Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iwF9tju27bVPjV_z94OH2QqrqZY.roa
File: iwF9tju27bVPjV_z94OH2QqrqZY.roa (raw, json)
Hash identifier: i2e+hZJvBSylylJzyivfa5e8JEP/kXxCa6QLVAAToYQ=
Subject key identifier: 8B:01:7D:B6:3B:B6:ED:B5:4F:8D:5F:F3:F7:83:87:D9:0A:AB:A9:96
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C65A639EB8984100F565B78ABC5BD
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iwF9tju27bVPjV_z94OH2QqrqZY.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214320
IP address blocks: 2a12:bec4:14c0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:65:a6:39:eb:89:84:10:0f:56:5b:78:ab:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b017db63bb6edb54f8d5ff3f78387d90aaba996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:55:cd:65:e7:1c:91:5e:21:f7:63:18:e4:
ac:c5:4d:fa:c4:4e:63:20:83:b2:b9:c2:7b:4c:e3:
aa:8d:aa:44:d3:72:6e:03:84:e6:c6:6d:2b:20:fc:
6b:8a:19:44:ef:0a:8d:16:35:ac:0d:a8:8a:3e:25:
9a:ee:fe:f4:fb:c0:f1:27:5f:e9:7f:b4:29:c1:f4:
f8:35:ce:d2:d8:3c:57:a4:33:d8:5e:18:81:41:fe:
84:2a:89:50:ce:e7:09:f7:59:57:0a:6f:0a:78:e8:
1d:78:82:8f:11:71:50:7e:ba:81:30:5d:25:78:5d:
38:3d:69:f0:6b:6f:0c:6e:85:20:fa:8c:14:95:46:
9f:fd:f7:de:24:46:70:a0:9f:6f:65:ed:94:d4:c8:
02:05:fe:5a:c2:9e:41:e4:94:88:c0:34:ca:f0:b2:
6f:fe:6a:a4:00:5a:b2:f0:05:bd:31:3a:9f:0c:e3:
ff:01:32:bd:60:75:47:92:76:a8:08:80:96:cf:ef:
fe:0b:ca:d8:8a:3a:61:bf:52:30:2a:d4:e2:62:05:
10:ed:3f:76:89:b5:60:7b:26:6e:0d:c2:3a:1b:88:
2b:d6:b9:0c:9c:a4:09:36:3e:20:a7:b6:2c:b4:0f:
6b:2c:1b:b8:0b:0c:ce:12:75:78:d5:b5:43:ea:72:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:7D:B6:3B:B6:ED:B5:4F:8D:5F:F3:F7:83:87:D9:0A:AB:A9:96
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iwF9tju27bVPjV_z94OH2QqrqZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14c0::/44
Signature Algorithm: sha256WithRSAEncryption
b7:80:10:29:b3:00:5a:a7:e2:9b:32:01:a4:30:68:86:45:83:
d6:d1:47:83:76:df:9d:61:4b:46:cf:5b:ae:18:fe:d4:30:8d:
04:82:bf:f1:71:0c:6a:ba:f6:08:b4:bf:72:1b:f6:69:08:7f:
0d:ef:bf:94:dc:9b:05:d4:fb:bb:a4:b7:17:0f:a5:b5:5a:87:
55:8c:92:32:80:eb:1f:b5:d1:21:1d:e2:78:99:e7:f3:cc:67:
de:62:b1:9c:05:26:b1:1a:cc:6e:15:4a:6b:89:f0:de:a1:22:
a3:58:26:7e:f1:58:7c:4f:5d:02:00:bf:78:17:1c:68:83:98:
27:9b:5a:5c:a7:6c:9c:4b:d7:05:81:15:73:74:4f:30:d1:44:
01:b9:12:93:a9:37:a1:d9:03:06:8a:e1:3c:08:87:64:3b:d0:
ff:e2:dc:42:df:82:7c:ff:96:c4:d3:23:19:e2:fa:87:b8:0b:
a5:3a:ea:71:68:5d:8d:d9:1c:08:f1:7c:f3:e1:64:29:ef:14:
6b:a2:b0:3b:a7:ee:c4:42:c7:53:cf:06:e3:4a:1f:ba:59:c2:
4c:81:5a:3d:bc:8c:19:7c:62:1a:6e:92:67:95:32:64:1f:dc:
26:09:b2:89:8a:c9:c6:b2:39:6e:ef:39:e2:7d:f1:65:23:25:
41:99:76:63
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjGWmOeuJhBAPVlt4q8W9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjAxN2RiNjNiYjZlZGI1NGY4ZDVmZjNmNzgzODdkOTBhYWJhOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGVVzWXnHJFeIfdjGOSsxU36xE5j
IIOyucJ7TOOqjapE03JuA4Tmxm0rIPxrihlE7wqNFjWsDaiKPiWa7v70+8DxJ1/p
f7QpwfT4Nc7S2DxXpDPYXhiBQf6EKolQzucJ91lXCm8KeOgdeIKPEXFQfrqBMF0l
eF04PWnwa28MboUg+owUlUaf/ffeJEZwoJ9vZe2U1MgCBf5awp5B5JSIwDTK8LJv
/mqkAFqy8AW9MTqfDOP/ATK9YHVHknaoCICWz+/+C8rYijphv1IwKtTiYgUQ7T92
ibVgeyZuDcI6G4gr1rkMnKQJNj4gp7YstA9rLBu4CwzOEnV41bVD6nLtqQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIsBfbY7tu21T41f8/eDh9kKq6mWMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvaXdGOXRqdTI3YlZQalZfejk0T0gyUXFycVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBTA
MA0GCSqGSIb3DQEBCwUAA4IBAQC3gBApswBap+KbMgGkMGiGRYPW0UeDdt+dYUtG
z1uuGP7UMI0Egr/xcQxquvYItL9yG/ZpCH8N77+U3JsF1Pu7pLcXD6W1WodVjJIy
gOsftdEhHeJ4mefzzGfeYrGcBSaxGsxuFUprifDeoSKjWCZ+8Vh8T10CAL94Fxxo
g5gnm1pcp2ycS9cFgRVzdE8w0UQBuRKTqTeh2QMGiuE8CIdkO9D/4txC34J8/5bE
0yMZ4vqHuAulOupxaF2N2RwI8Xzz4WQp7xRrorA7p+7EQsdTzwbjSh+6WcJMgVo9
vIwZfGIabpJnlTJkH9wmCbKJisnGsjlu7zniffFlIyVBmXZj
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:41:25 2025 by rpki-client