Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/twEYtW5n9I8LKNrX1DRJXzONAfM.roa
File: twEYtW5n9I8LKNrX1DRJXzONAfM.roa (raw, json)
Hash identifier: P6pdF83G8Crjvp6BD3rTDm3+RUEvb9kVzLjbQ6AQqpI=
Subject key identifier: B7:01:18:B5:6E:67:F4:8F:0B:28:DA:D7:D4:34:49:5F:33:8D:01:F3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C70FAA87E064C0C045AED9B5A1989
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/twEYtW5n9I8LKNrX1DRJXzONAfM.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215630
IP address blocks: 2a12:bec0:690::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:70:fa:a8:7e:06:4c:0c:04:5a:ed:9b:5a:19:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b70118b56e67f48f0b28dad7d434495f338d01f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:6b:f8:ff:45:c0:8c:46:3d:e3:c1:e5:1e:
b4:0f:35:ff:3d:82:18:b9:06:53:62:88:b0:d8:07:
00:cd:b1:1a:9e:d1:45:e5:65:ab:fb:b2:24:4b:65:
9f:8f:d7:cf:30:33:59:f1:67:86:61:c9:c7:47:47:
19:3a:f3:aa:cd:44:f1:b5:1d:3c:b6:98:15:b4:6b:
d0:d9:80:6e:32:16:96:ed:7f:96:c6:a1:d6:84:a4:
f6:45:78:37:07:11:b7:44:82:9a:73:d6:40:3c:52:
c9:68:a7:11:3e:e0:e3:20:83:b0:3f:f2:dd:04:b1:
49:2b:0f:64:45:7f:ff:2d:20:8f:c1:e3:4e:b4:4c:
44:51:8c:ed:d7:21:96:b3:ac:91:25:3e:d3:74:c5:
4b:15:86:e6:79:51:fd:c0:23:83:54:db:84:88:d0:
c7:a3:2a:ab:e9:cb:d3:80:54:ef:a4:aa:96:08:be:
78:b8:f2:16:b5:4b:59:57:57:01:6c:ac:df:c3:27:
86:01:7f:0a:65:1e:a5:0d:9a:a3:d6:5c:cf:e4:dc:
13:0f:b0:d9:dc:4a:84:47:c7:db:a6:8b:78:51:21:
00:02:57:95:81:65:e3:37:6b:ed:c0:d2:a5:f1:01:
97:7b:35:fb:af:bf:b0:bc:ba:69:84:05:99:ad:0e:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:18:B5:6E:67:F4:8F:0B:28:DA:D7:D4:34:49:5F:33:8D:01:F3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/twEYtW5n9I8LKNrX1DRJXzONAfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:690::/44
Signature Algorithm: sha256WithRSAEncryption
a6:91:cd:03:3e:23:23:54:fc:d3:17:63:12:2c:2e:42:00:82:
99:5c:74:31:31:65:d8:de:3c:eb:53:35:9f:45:7c:c5:fa:fa:
c5:78:ee:b1:e2:69:06:54:64:ce:b8:01:3b:a1:fa:96:76:e9:
ab:83:3b:a5:0e:f0:3a:7c:d3:a9:eb:6b:08:c8:b8:9c:3d:bc:
f9:7c:3d:04:3c:e0:ab:ef:33:e8:5f:97:35:a8:d7:bd:7c:d1:
d4:f0:9f:0a:12:46:00:ad:9f:bf:8d:11:47:5a:e8:eb:f1:73:
81:a3:18:a8:98:d4:ca:ed:e7:73:ae:d0:50:4e:6e:83:71:7e:
5f:02:b1:98:13:69:82:f3:9f:1d:7d:5b:d5:6b:99:a0:af:83:
dc:66:a8:14:80:34:d4:e2:6b:16:d2:45:f8:c9:b5:b2:bf:2e:
48:22:0e:80:2a:dd:76:c4:87:10:05:74:ee:ee:31:13:21:a9:
ff:f3:d1:8c:8c:98:73:cb:c0:1e:6a:fd:3b:af:5c:13:de:6a:
33:76:56:bb:71:9b:30:a0:30:bd:92:9d:e2:27:59:13:2c:ff:
5c:6b:f2:d4:89:a1:ae:21:06:40:83:5b:05:1e:1b:e0:f4:1c:
84:03:69:00:f9:fd:b9:27:b3:18:6f:4f:35:66:97:65:4b:56:
07:eb:3c:d4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjHD6qH4GTAwEWu2bWhmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzAxMThiNTZlNjdmNDhmMGIyOGRhZDdkNDM0NDk1ZjMzOGQwMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNNr+P9FwIxGPePB5R60DzX/PYIY
uQZTYoiw2AcAzbEantFF5WWr+7IkS2Wfj9fPMDNZ8WeGYcnHR0cZOvOqzUTxtR08
tpgVtGvQ2YBuMhaW7X+WxqHWhKT2RXg3BxG3RIKac9ZAPFLJaKcRPuDjIIOwP/Ld
BLFJKw9kRX//LSCPweNOtExEUYzt1yGWs6yRJT7TdMVLFYbmeVH9wCODVNuEiNDH
oyqr6cvTgFTvpKqWCL54uPIWtUtZV1cBbKzfwyeGAX8KZR6lDZqj1lzP5NwTD7DZ
3EqER8fbpot4USEAAleVgWXjN2vtwNKl8QGXezX7r7+wvLpphAWZrQ5GZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLcBGLVuZ/SPCyja19Q0SV8zjQHzMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvdHdFWXRXNW45SThMS05yWDFEUkpYek9OQWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAaQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCmkc0DPiMjVPzTF2MSLC5CAIKZXHQxMWXY3jzr
UzWfRXzF+vrFeO6x4mkGVGTOuAE7ofqWdumrgzulDvA6fNOp62sIyLicPbz5fD0E
POCr7zPoX5c1qNe9fNHU8J8KEkYArZ+/jRFHWujr8XOBoxiomNTK7edzrtBQTm6D
cX5fArGYE2mC858dfVvVa5mgr4PcZqgUgDTU4msW0kX4ybWyvy5IIg6AKt12xIcQ
BXTu7jETIan/89GMjJhzy8Aeav07r1wT3mozdla7cZswoDC9kp3iJ1kTLP9ca/LU
iaGuIQZAg1sFHhvg9ByEA2kA+f25J7MYb081ZpdlS1YH6zzU
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:01:46 2025 by rpki-client