Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/jU8Pmb0dQKK02mWWTK3svyb1cw8.roa
File: jU8Pmb0dQKK02mWWTK3svyb1cw8.roa (raw, json)
Hash identifier: dOcL1INUTC0jLc0kKtmKL+GxUN4OoMEYtMamrlvaHfU=
Subject key identifier: 8D:4F:0F:99:BD:1D:40:A2:B4:DA:65:96:4C:AD:EC:BF:26:F5:73:0F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C489435F47E5FF1C5F6BF955003F4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/jU8Pmb0dQKK02mWWTK3svyb1cw8.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48300
IP address blocks: 2a12:bec0:400::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:94:35:f4:7e:5f:f1:c5:f6:bf:95:50:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4f0f99bd1d40a2b4da65964cadecbf26f5730f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8d:0b:ab:e8:42:e6:0e:be:65:c3:03:2e:a5:
3c:5d:b8:ca:0d:13:b5:bf:76:a4:7c:bb:31:e8:df:
e9:11:f8:2b:ed:31:18:87:cf:7b:81:54:d9:8b:55:
87:af:a2:13:7f:67:26:31:e9:d6:9a:20:a9:fc:da:
f7:fc:00:b4:1d:ca:35:6c:be:a2:9d:e4:fd:5a:37:
2e:c4:65:db:97:5e:79:d8:d6:be:59:dc:72:49:9d:
f2:0a:06:b0:db:ec:c9:1b:85:ec:87:48:2f:0c:14:
e0:4a:67:2f:e7:b4:a4:ae:84:85:7d:6e:19:78:c5:
d7:54:ee:2b:37:b8:38:03:de:25:9c:57:b5:e0:2a:
a1:28:a2:3b:fb:01:f9:13:e8:77:d5:e4:a3:03:07:
b1:e0:3e:a8:d4:9b:22:cd:02:91:e7:f1:cb:bf:f1:
15:e0:cd:a9:b3:18:f0:18:37:ea:52:27:20:85:91:
98:88:ba:e1:6b:b1:39:41:3f:85:55:03:a0:d6:9b:
0c:ec:8d:08:97:19:b2:80:36:c4:f5:9f:a8:16:0f:
c6:b7:c2:47:5b:62:ef:dd:88:58:36:08:09:fc:8a:
20:09:d1:cc:6a:13:c1:9c:fc:30:6f:6a:c4:d7:83:
70:d3:a6:17:2a:3a:de:c6:70:3a:34:f7:91:83:cf:
0b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:0F:99:BD:1D:40:A2:B4:DA:65:96:4C:AD:EC:BF:26:F5:73:0F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/jU8Pmb0dQKK02mWWTK3svyb1cw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:400::/44
Signature Algorithm: sha256WithRSAEncryption
5a:4c:6c:9f:e8:53:1d:6e:32:33:d7:5f:5d:cf:29:5b:8a:60:
a9:4e:ed:37:5e:0d:6b:87:5d:7a:fc:0c:a4:eb:3e:00:7b:e0:
b5:26:4c:47:ce:c9:57:99:d8:78:46:08:27:b8:97:8c:e4:f5:
69:d1:34:5f:0f:66:70:95:d3:26:ee:f9:c8:c7:3b:95:03:5c:
77:42:7d:40:47:bb:a5:84:b5:b2:5c:83:c7:a9:0a:90:4a:07:
ea:bd:44:7f:2f:7a:21:d5:7f:1b:83:fe:63:d9:d5:36:1f:fa:
af:7b:fd:a5:e1:f0:1e:c1:8a:cf:58:5e:20:fd:c3:c5:50:17:
83:6a:7a:90:1e:23:d2:d1:82:22:8e:e0:08:0f:8e:24:c5:ab:
0d:d3:a7:6c:67:f9:9d:ae:2f:dc:73:40:3e:79:b1:e9:2b:0e:
c1:aa:81:1d:48:f0:7c:dc:31:b1:36:5f:e6:1e:5f:ab:a0:3b:
1c:1d:10:af:15:55:c9:1c:9a:70:e5:93:6e:42:30:48:0f:e3:
59:ad:71:9e:47:40:77:18:e3:2c:cf:e9:d7:5a:c6:02:01:c9:
fa:1c:23:fd:fa:05:f3:f1:bd:d5:0b:f1:4c:e4:22:a8:d0:aa:
ca:92:35:2a:8e:19:6f:13:01:01:34:23:f7:e6:e9:05:39:5d:
ca:aa:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:43:58 2025 by rpki-client