Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vG64S6abW0cGe9E5m2NvMLqnxC0.roa
File: vG64S6abW0cGe9E5m2NvMLqnxC0.roa (raw, json)
Hash identifier: vzM+0F2yXHeX3NGlOO42ymwj5ERPj6YkRon1KOOQ5bU=
Subject key identifier: BC:6E:B8:4B:A6:9B:5B:47:06:7B:D1:39:9B:63:6F:30:BA:A7:C4:2D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C742FA6E9FF4E40BD36FD879BA2AD
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vG64S6abW0cGe9E5m2NvMLqnxC0.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215799
IP address blocks: 2a12:bec0:620::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:2f:a6:e9:ff:4e:40:bd:36:fd:87:9b:a2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6eb84ba69b5b47067bd1399b636f30baa7c42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:73:e5:d2:b3:02:32:8c:28:28:76:fb:2e:
41:41:01:83:ba:4d:2c:37:e8:f6:d6:58:d0:92:2c:
bf:2a:b9:66:c8:13:b9:72:41:28:13:c6:dd:9a:e6:
d8:44:48:f2:fb:6e:83:f3:90:b2:32:64:43:78:33:
63:d1:6e:ee:8f:b4:66:43:ed:2b:9b:89:fd:15:a9:
e8:32:e9:89:cd:20:d1:d1:22:de:81:e3:36:d0:bb:
5d:fd:70:8b:40:3c:04:b9:47:3d:cf:68:5e:fe:b5:
5b:3b:b3:51:8c:ca:a3:5e:92:e0:75:f7:98:bd:27:
52:e0:39:56:14:55:66:c2:02:40:e6:79:36:b3:97:
7d:82:db:48:28:c6:00:9f:1f:08:a2:b9:d6:fd:a5:
23:33:03:87:c4:cc:65:66:71:25:e9:39:b7:8b:7a:
86:36:77:df:92:c4:9f:9b:13:6b:f1:92:db:9c:67:
84:99:f6:d9:e2:05:e7:58:87:f5:fc:99:d2:a1:4d:
c2:e3:59:f7:ee:db:30:7e:05:0b:0e:db:25:fa:ed:
ab:4f:1a:a1:ea:d2:07:be:0c:a4:a8:b7:58:9b:22:
9f:1e:4b:2e:d8:2f:81:2d:95:bd:24:84:6c:5e:e3:
e8:89:5d:b4:3d:47:e3:8a:57:23:ef:6a:b7:e3:3e:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6E:B8:4B:A6:9B:5B:47:06:7B:D1:39:9B:63:6F:30:BA:A7:C4:2D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vG64S6abW0cGe9E5m2NvMLqnxC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:620::/44
Signature Algorithm: sha256WithRSAEncryption
7b:45:a4:a4:4c:4b:0e:8f:c8:73:f0:ff:6c:4e:cd:89:0d:69:
af:43:56:a6:cf:ab:e0:ce:c2:3c:a5:92:d8:d2:44:10:67:bc:
a0:c4:a1:b2:cb:c0:b9:d0:b7:0c:9c:1c:e9:5c:68:79:29:8b:
fa:17:91:0b:12:89:29:5e:76:5c:20:19:cd:2a:3a:e3:14:a8:
3d:bc:59:cb:9b:2f:d4:9f:6d:56:a0:70:67:3a:f0:29:bd:7d:
11:4e:e7:33:8b:46:d8:6e:49:26:a9:7c:3d:58:8f:9c:b4:a1:
6b:81:ad:27:f2:cf:fc:d4:82:28:b4:b3:53:c1:87:a5:6b:67:
51:94:c3:0e:75:55:27:e5:a5:54:c6:6e:cf:65:84:07:83:47:
fc:34:8c:47:ec:22:06:33:fb:32:c6:a3:75:ba:9f:dc:d8:90:
3c:2f:61:7b:69:13:ee:75:bf:12:b9:77:ed:10:b9:1e:b2:df:
5b:3f:a2:61:62:b1:fd:fc:b4:71:a2:5d:3d:b6:e9:07:06:b8:
13:1f:9a:d8:95:3f:7b:eb:06:bf:dc:60:da:84:43:07:47:91:
89:5d:98:b1:f5:03:fb:ac:59:35:08:87:94:43:86:d1:82:a3:
7f:37:a8:0a:37:00:53:14:e6:b3:49:a7:7e:0a:d9:a4:6e:32:
ff:75:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:46:47 2025 by rpki-client