Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/nKkI90flKsHJrWil_nFcyQmFXqM.roa
File: nKkI90flKsHJrWil_nFcyQmFXqM.roa (raw, json)
Hash identifier: njB/HH2v3/R1up52OFXLKO8Qtm6W0eYBcfdAIRAxu4Q=
Subject key identifier: 9C:A9:08:F7:47:E5:2A:C1:C9:AD:68:A5:FE:71:5C:C9:09:85:5E:A3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194D46305CF563B80742942DDB690FC549E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/nKkI90flKsHJrWil_nFcyQmFXqM.roa
Signing time: Wed 05 Feb 2025 04:34:06 +0000
ROA not before: Wed 05 Feb 2025 04:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 2a12:bec4:1170::/44 maxlen: 44
2a12:bec4:16e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:63:05:cf:56:3b:80:74:29:42:dd:b6:90:fc:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 5 04:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ca908f747e52ac1c9ad68a5fe715cc909855ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:9a:b0:58:50:70:b9:85:c1:2c:64:97:d4:
f5:d6:6a:f3:be:bd:ad:b7:1a:c7:0c:74:bf:ee:69:
be:b5:e1:ab:c5:54:ab:7b:e0:96:6d:67:65:9c:80:
f9:c5:a3:90:8e:c4:fd:ed:d7:4e:95:4e:ca:4d:2f:
99:15:3a:c5:43:7a:eb:24:f7:fd:71:58:28:43:be:
ef:88:a2:fd:d3:03:9b:6a:a0:c9:76:d2:f4:cb:0e:
57:71:e5:b1:cb:42:30:c8:04:fd:ab:25:10:e0:02:
ab:01:53:e1:82:fe:8f:d3:90:9d:49:d0:5b:4b:e2:
fb:c6:23:05:65:3b:d0:95:58:28:27:3e:1d:d8:8e:
da:f8:2f:7c:c8:d9:bc:1a:c2:58:ac:76:2b:f7:4e:
aa:11:b8:a4:ce:7f:fd:e9:2a:77:cf:60:9f:56:2c:
b0:c3:60:3f:bf:35:ea:6e:a8:c8:c6:39:1e:13:08:
d9:ee:7a:db:b2:f3:8b:b9:0a:6c:a7:24:88:2c:51:
d4:e1:ba:0a:db:06:b9:fa:e4:fa:49:32:ec:63:f0:
4b:78:d0:48:eb:b3:cd:e9:cc:24:8f:70:73:8b:17:
9e:c7:db:7e:f9:ac:b4:69:9c:ae:ab:77:07:77:a9:
51:1c:be:da:dd:03:4f:0f:f8:23:b4:47:72:57:5f:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:08:F7:47:E5:2A:C1:C9:AD:68:A5:FE:71:5C:C9:09:85:5E:A3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/nKkI90flKsHJrWil_nFcyQmFXqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1170::/44
2a12:bec4:16e0::/44
Signature Algorithm: sha256WithRSAEncryption
12:af:94:e1:7f:19:81:02:9b:6a:6a:fe:9c:88:9b:d7:04:73:
f9:90:42:28:70:34:3d:f7:48:35:7f:84:43:15:b5:6b:6d:e5:
98:4d:11:db:3a:0a:6e:43:6f:60:46:98:e8:7f:6d:f8:c3:61:
51:53:9b:17:77:8f:b7:03:89:b6:41:a1:4e:18:70:77:80:4e:
7a:63:3d:f8:9e:64:e8:3c:a3:58:63:a9:73:4e:2d:af:56:25:
23:fc:75:ca:bb:6f:ca:50:24:6f:43:e4:e3:e4:d5:fd:63:fc:
9b:3d:3a:3c:33:41:2c:34:a1:12:fe:4c:13:12:9d:8d:e1:b1:
ae:a9:25:b5:51:f5:3f:05:f3:b5:81:3a:de:1f:5e:dd:4c:50:
68:4f:c4:3f:22:37:8c:86:89:2d:71:32:ab:8c:49:b3:25:da:
3c:8b:25:8b:3d:19:97:fa:87:8a:1e:8e:4a:f5:6b:4c:3b:b3:
aa:7e:cc:9c:b8:4b:1e:ff:4b:af:92:a5:e4:6a:be:87:a3:b5:
35:91:ff:8b:09:c7:42:48:d9:6d:91:2a:6b:f8:d2:d2:64:64:
c2:6e:85:d0:5c:77:d4:e9:46:4d:19:b1:3c:01:1a:9c:04:47:
2d:e6:75:89:f1:61:ba:2d:f6:d1:11:bf:40:ed:bf:47:a3:fa:
8e:c7:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:26:40 2025 by rpki-client