Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ntW6FvLp9zTTN5lvtJZWzxiN50Y.roa
File: ntW6FvLp9zTTN5lvtJZWzxiN50Y.roa (raw, json)
Hash identifier: JGtrbg8+WOiIEXEmf3NB7R9L5A/R4bC8vlVFbDlQxDw=
Subject key identifier: 9E:D5:BA:16:F2:E9:F7:34:D3:37:99:6F:B4:96:56:CF:18:8D:E7:46
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C677D47E3DB856D609413551BE242
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ntW6FvLp9zTTN5lvtJZWzxiN50Y.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214506
IP address blocks: 2a12:bec4:1410::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:67:7d:47:e3:db:85:6d:60:94:13:55:1b:e2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed5ba16f2e9f734d337996fb49656cf188de746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:ff:df:7b:f1:e8:1b:ad:6e:31:d3:2c:e0:
d0:59:b2:0c:fa:b6:83:68:a2:06:74:8e:5a:fe:31:
eb:76:2d:5a:17:d1:f8:fd:10:f8:34:97:fe:69:2d:
b4:0c:e1:09:de:68:a4:aa:33:8c:42:5a:12:36:27:
82:c8:38:28:91:8d:a7:ff:19:e0:ec:8d:ff:74:d2:
95:54:3d:12:cc:0e:1b:11:49:07:f6:85:b5:f3:a0:
c9:ce:96:0d:e3:cb:50:ee:40:f9:dc:10:c6:11:61:
15:6f:2b:26:ac:32:78:91:07:b1:7c:3b:9f:25:85:
90:a6:c1:35:f6:26:91:94:5f:ab:6d:95:a3:0c:7f:
9a:eb:ec:a2:68:53:4c:32:a7:d1:a1:35:57:df:cd:
88:ff:f4:52:bc:4c:91:63:87:09:b0:ab:fd:cb:0b:
5b:ae:50:a2:2b:65:3d:e7:ba:a5:0b:a2:aa:b2:be:
87:84:5c:5c:e2:64:22:44:64:b9:f4:d5:63:15:11:
c6:89:dd:52:ae:99:e2:5f:3a:92:60:39:f8:4b:37:
71:d4:8b:4a:29:6e:68:5a:dd:13:95:81:58:b3:46:
42:66:3e:52:9a:7f:97:e6:0a:1a:37:ce:c2:19:7d:
3b:08:6d:70:3e:ea:83:6d:15:2e:30:38:1b:da:85:
d1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D5:BA:16:F2:E9:F7:34:D3:37:99:6F:B4:96:56:CF:18:8D:E7:46
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ntW6FvLp9zTTN5lvtJZWzxiN50Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1410::/44
Signature Algorithm: sha256WithRSAEncryption
62:8c:6e:c9:47:56:79:fe:cb:91:30:64:fc:e1:84:be:57:05:
14:79:fa:ef:af:3b:b8:2b:dd:70:42:31:27:4a:3a:69:a4:86:
50:2e:51:aa:97:b9:54:5e:10:32:35:f1:eb:0b:be:de:27:86:
3f:d9:8d:ab:a3:7d:40:d1:48:41:57:f8:26:77:69:d0:65:3c:
68:7c:1b:6a:15:ff:f1:b7:b9:c1:bd:f9:25:26:47:01:f6:0f:
ea:01:3e:b5:85:b8:1d:b3:54:b1:cb:e9:66:ac:1a:77:56:56:
32:69:88:56:3f:4d:7b:6f:10:c0:6f:64:42:70:75:7d:57:a3:
21:58:58:b0:8a:3b:6f:c2:ae:16:5e:8b:63:c0:2b:29:70:b2:
f4:12:79:47:66:85:8b:34:cf:b2:c3:81:0e:7f:88:7e:78:15:
8e:b6:2b:7f:bf:2c:e3:ab:21:4a:3b:a3:bd:85:96:ad:e6:3f:
60:75:51:a2:59:32:d9:8c:43:57:e5:47:4b:07:13:11:90:05:
1c:dd:59:2b:b3:1b:e9:b2:7c:19:83:d0:95:c2:3e:49:7b:70:
2d:01:ba:8c:b5:dc:a2:56:07:30:ee:cd:84:4d:1b:33:ae:54:
aa:f7:8a:8d:7d:69:7d:71:24:85:a0:e3:f3:60:0d:5f:49:f7:
ee:42:ed:d1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjGd9R+PbhW1glBNVG+JCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWQ1YmExNmYyZTlmNzM0ZDMzNzk5NmZiNDk2NTZjZjE4OGRlNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLX/33vx6ButbjHTLODQWbIM+raD
aKIGdI5a/jHrdi1aF9H4/RD4NJf+aS20DOEJ3mikqjOMQloSNieCyDgokY2n/xng
7I3/dNKVVD0SzA4bEUkH9oW186DJzpYN48tQ7kD53BDGEWEVbysmrDJ4kQexfDuf
JYWQpsE19iaRlF+rbZWjDH+a6+yiaFNMMqfRoTVX382I//RSvEyRY4cJsKv9ywtb
rlCiK2U957qlC6Kqsr6HhFxc4mQiRGS59NVjFRHGid1SrpniXzqSYDn4Szdx1ItK
KW5oWt0TlYFYs0ZCZj5Smn+X5goaN87CGX07CG1wPuqDbRUuMDgb2oXRpQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ7Vuhby6fc00zeZb7SWVs8YjedGMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvbnRXNkZ2THA5elRUTjVsdnRKWld6eGlONTBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBijG7JR1Z5/suRMGT84YS+VwUUefrvrzu4K91w
QjEnSjpppIZQLlGql7lUXhAyNfHrC77eJ4Y/2Y2ro31A0UhBV/gmd2nQZTxofBtq
Ff/xt7nBvfklJkcB9g/qAT61hbgds1Sxy+lmrBp3VlYyaYhWP017bxDAb2RCcHV9
V6MhWFiwijtvwq4WXotjwCspcLL0EnlHZoWLNM+yw4EOf4h+eBWOtit/vyzjqyFK
O6O9hZat5j9gdVGiWTLZjENX5UdLBxMRkAUc3VkrsxvpsnwZg9CVwj5Je3AtAbqM
tdyiVgcw7s2ETRszrlSq94qNfWl9cSSFoOPzYA1fSffuQu3R
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:13:24 2025 by rpki-client