Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y1ZBgsPbvitn5_Iqp5zSf7_a8I4.roa
File: y1ZBgsPbvitn5_Iqp5zSf7_a8I4.roa (raw, json)
Hash identifier: 2dkWbyUJHp8jdgQsxytIfyWV089fJNO+RKeEd5vNhv8=
Subject key identifier: CB:56:41:82:C3:DB:BE:2B:67:E7:F2:2A:A7:9C:D2:7F:BF:DA:F0:8E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194937C080D3C8A76625F40C613C18ADDB9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y1ZBgsPbvitn5_Iqp5zSf7_a8I4.roa
Signing time: Thu 23 Jan 2025 14:06:06 +0000
ROA not before: Thu 23 Jan 2025 14:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 2a12:bec4:1170::/44 maxlen: 44
2a12:bec4:16e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:7c:08:0d:3c:8a:76:62:5f:40:c6:13:c1:8a:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 23 14:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb564182c3dbbe2b67e7f22aa79cd27fbfdaf08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:f2:6c:f9:86:81:8a:73:d7:c1:fe:63:a1:
c7:d4:87:3f:01:df:8f:8c:8b:06:69:48:8e:b0:f0:
ef:2e:39:29:e0:43:55:d0:93:70:b2:81:2f:7a:07:
38:32:9d:be:6e:06:c4:14:59:bb:b4:3c:99:7f:f6:
fd:ef:25:7d:71:9a:c6:05:3f:e5:4f:ec:54:80:5b:
3e:8a:ea:5a:ca:2c:e9:c9:09:b4:c7:2e:66:88:f9:
81:5f:02:7b:1f:c2:d3:24:5a:cf:8f:12:ff:4e:ac:
f8:f0:e5:13:5f:4e:34:10:51:2e:d3:67:59:e9:e2:
e0:7e:0d:f6:db:cd:71:f5:5e:46:c6:80:f5:ba:bb:
f7:d1:7a:15:4d:59:5d:02:1b:ad:38:eb:61:73:88:
82:d3:69:b8:11:35:08:cc:36:b0:2d:01:c9:b0:51:
35:5c:7a:b1:f2:0a:bc:2b:63:62:42:bd:b8:fb:1c:
a0:9a:8d:d0:c1:76:46:89:ae:00:6f:8e:4d:68:38:
aa:3f:07:9c:7c:0d:3d:86:19:7a:c7:29:ac:cf:d7:
72:09:8f:0f:35:6f:74:3b:5e:ea:0a:73:bf:a5:81:
e0:c3:d5:04:24:ef:26:af:5d:b0:4d:e5:bf:18:5e:
d5:31:06:d6:ce:98:47:a0:5c:fb:1c:6a:e7:4e:77:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:41:82:C3:DB:BE:2B:67:E7:F2:2A:A7:9C:D2:7F:BF:DA:F0:8E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y1ZBgsPbvitn5_Iqp5zSf7_a8I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1170::/44
2a12:bec4:16e0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:17:52:53:5e:b3:79:09:68:fd:6e:0c:86:73:9f:6a:49:a7:
84:1f:a5:f0:28:a3:ed:cf:94:ab:f9:4d:08:66:1b:ef:6b:e2:
5a:53:d6:c1:a5:b5:d1:1e:3f:8c:76:c6:b7:01:bf:4c:44:7a:
67:30:78:97:b9:fc:ed:16:79:d6:99:cf:c1:c7:ed:cb:f6:d3:
d2:95:ee:11:10:76:a4:bf:ee:0f:b7:97:10:bf:e3:8c:04:e4:
0d:4b:b8:cc:26:4b:4c:3f:0e:85:88:ac:48:7b:84:02:d7:c1:
a1:f1:5c:7f:dd:15:7f:92:e5:c5:d8:08:8d:3c:fc:f1:72:6b:
ab:7d:19:b9:69:80:1b:ce:08:e6:71:2c:50:1e:c3:5b:2a:c3:
0f:bc:ec:19:6a:41:aa:2b:c1:4c:ce:6e:74:dc:51:a3:c1:0e:
48:ee:db:34:ac:da:86:d5:3a:53:40:cf:d5:c3:b7:75:68:49:
71:f4:8e:d3:f7:32:72:6d:ba:c5:12:cd:2f:3c:b5:c5:68:4e:
42:58:56:57:66:54:64:f7:59:19:5b:40:33:20:19:ef:2c:70:
68:4b:6d:0d:42:ac:d6:42:c7:c2:52:ff:10:0a:b7:e8:f1:07:
6e:fb:f2:3a:19:33:f0:56:3c:14:a3:20:68:81:6c:5c:f6:51:
8a:a0:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:29 2025 by rpki-client