Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pOQEmWSVKaKxcR1mcXLW5SdpIRo.roa
File: pOQEmWSVKaKxcR1mcXLW5SdpIRo.roa (raw, json)
Hash identifier: EVbNYGuRf9bWQwLcQrdmiHx73PZ7LYTGKVIXLOXoeak=
Subject key identifier: A4:E4:04:99:64:95:29:A2:B1:71:1D:66:71:72:D6:E5:27:69:21:1A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4EAD4486F080F0238E7780446718
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pOQEmWSVKaKxcR1mcXLW5SdpIRo.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198351
IP address blocks: 2a12:bec4:1020::/48 maxlen: 48
2a12:bec4:1021::/48 maxlen: 48
2a12:bec4:1022::/48 maxlen: 48
2a12:bec4:1023::/48 maxlen: 48
2a12:bec4:1024::/48 maxlen: 48
2a12:bec4:1025::/48 maxlen: 48
2a12:bec4:1026::/48 maxlen: 48
2a12:bec4:1027::/48 maxlen: 48
2a12:bec4:1028::/48 maxlen: 48
2a12:bec4:1029::/48 maxlen: 48
2a12:bec4:102a::/48 maxlen: 48
2a12:bec4:102b::/48 maxlen: 48
2a12:bec4:102c::/48 maxlen: 48
2a12:bec4:102d::/48 maxlen: 48
2a12:bec4:102e::/48 maxlen: 48
2a12:bec4:102f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4e:ad:44:86:f0:80:f0:23:8e:77:80:44:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e40499649529a2b1711d667172d6e52769211a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:90:da:3b:af:fd:10:bc:1a:0e:dc:4b:4a:
44:8d:08:54:18:9a:5b:03:17:9d:da:63:48:fa:8d:
86:6f:3f:52:de:3a:98:62:2c:4c:84:e6:66:5c:c2:
7a:f3:0b:50:8c:91:40:4f:cd:78:34:b5:cf:e7:bc:
b9:94:9e:2e:71:93:7d:be:ca:f7:71:e3:6c:a6:92:
75:e5:92:57:67:08:47:76:cf:d0:e7:cc:b1:16:22:
62:fe:c5:28:8d:1d:db:45:dd:6a:c6:63:ae:a9:c7:
1e:93:de:9f:c0:f1:bd:3f:f8:f6:db:30:0d:d6:f8:
00:b5:ad:8e:01:da:f0:d4:27:21:ea:54:45:9f:5f:
f6:ec:89:4b:42:28:fd:70:6f:d7:9b:ba:53:26:93:
14:d1:0b:6c:6f:25:20:2e:25:0e:24:42:ea:f3:86:
50:5d:93:70:b5:04:22:4c:83:61:7c:e3:a4:ce:f4:
57:7a:7d:81:6b:2f:f6:8a:f0:b4:c5:53:eb:67:77:
80:59:2b:2d:b7:eb:ef:3b:f7:3b:ab:41:8a:92:ef:
27:30:ba:6e:82:41:4b:12:f5:49:cd:ac:7d:e9:de:
4b:d0:a9:23:fe:49:e4:b0:e2:61:2f:3b:05:13:38:
72:65:5c:aa:27:d5:8c:df:a0:69:9c:34:9d:e9:5e:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:04:99:64:95:29:A2:B1:71:1D:66:71:72:D6:E5:27:69:21:1A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pOQEmWSVKaKxcR1mcXLW5SdpIRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1020::/44
Signature Algorithm: sha256WithRSAEncryption
56:b6:8f:d3:f9:56:82:72:07:1a:30:be:d0:b0:af:e3:df:30:
83:56:23:db:53:6d:7e:0e:8c:83:56:44:ef:b9:08:c2:3e:15:
30:fe:ed:7d:14:56:94:e0:7a:5c:c9:be:aa:c2:1b:78:a3:a6:
d0:2a:05:41:32:c0:44:6b:b4:72:1f:aa:19:f6:49:af:95:93:
80:ec:7a:ae:86:6f:b2:72:e1:e5:e1:87:03:72:c3:6a:64:47:
cd:7e:7c:5a:26:49:70:02:34:ff:70:4c:55:db:f0:81:f6:89:
d0:ff:88:d4:98:8d:44:49:ff:e8:aa:23:e7:0c:27:d7:23:d6:
02:0a:da:4c:b9:18:61:26:b2:0d:81:d5:75:f5:03:1d:3d:73:
1c:a3:77:33:bf:d0:04:d6:3a:31:32:44:5f:e1:89:d7:c1:27:
7a:7d:eb:2b:47:f2:46:32:a8:ba:5c:05:4f:a3:5d:74:5e:e7:
92:a9:e9:5f:9f:97:5c:4f:ef:35:35:03:18:98:67:04:10:c7:
5a:ff:63:02:81:40:28:df:01:49:63:d1:45:26:5a:17:59:ab:
95:ee:91:7b:aa:dc:b4:ad:2f:4c:ac:9d:ef:fa:47:54:ff:5a:
de:85:78:8f:0c:b0:a3:8b:13:5b:c8:8c:4b:b1:61:ae:cd:30:
c4:02:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:52:40 2025 by rpki-client