Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/V1aKAeRzKiAfxQwmZqLiwau1Afc.roa
File: V1aKAeRzKiAfxQwmZqLiwau1Afc.roa (raw, json)
Hash identifier: uOqJXqZXJEKHIgf9RgAP09YH0XSJp9FEPHY/lnYPqVM=
Subject key identifier: 57:56:8A:01:E4:73:2A:20:1F:C5:0C:26:66:A2:E2:C1:AB:B5:01:F7
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 01941FFA7ACE3114A8518D132A0BFCB80AE3
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/V1aKAeRzKiAfxQwmZqLiwau1Afc.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30788
IP address blocks: 2a12:3740::/29 maxlen: 29
2a12:46c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7a:ce:31:14:a8:51:8d:13:2a:0b:fc:b8:0a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57568a01e4732a201fc50c2666a2e2c1abb501f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:13:9c:5f:ba:95:90:3f:e3:1c:e6:74:b8:
f1:99:1c:b8:d1:5c:9e:1b:d2:54:ba:83:da:54:a5:
6c:a0:ba:0b:9b:7b:6f:96:5a:2a:fb:22:94:ff:5a:
d0:b7:c4:b2:22:a4:ab:6d:f5:23:ed:fe:77:b4:f5:
13:d2:dc:82:5e:4f:f2:ad:50:47:7c:77:11:2e:58:
d0:b4:cc:0a:8f:44:ad:99:d0:df:a1:c4:c9:11:ff:
0e:f2:e1:d4:a0:54:cb:58:b5:40:8b:7a:6b:e5:df:
3a:f6:74:12:a9:a3:e8:10:b5:c7:e6:79:c2:dd:bd:
6d:00:3e:a8:16:6e:11:6b:f9:dc:a3:9e:6c:cd:de:
18:1e:51:71:29:d3:61:ed:ad:d3:04:58:30:50:67:
3a:de:49:96:1a:b4:87:df:8a:33:17:27:13:b5:07:
82:56:84:63:33:92:74:87:f0:d2:ff:b4:2a:38:93:
2c:73:2c:9e:9c:91:af:8e:9d:70:7e:9c:64:cb:7a:
5b:95:d6:ef:24:6b:71:6b:85:65:3c:c8:69:0c:b2:
b2:c4:07:ac:8f:78:5c:60:d7:10:1a:f0:63:76:d0:
37:b5:67:04:2d:50:09:5b:b2:c4:28:d2:aa:64:86:
b7:89:b6:7d:ce:42:86:57:5b:41:e9:87:f4:43:db:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:56:8A:01:E4:73:2A:20:1F:C5:0C:26:66:A2:E2:C1:AB:B5:01:F7
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/V1aKAeRzKiAfxQwmZqLiwau1Afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3740::/29
2a12:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:24:89:b8:17:5d:a6:00:ba:9f:00:d3:96:f9:c8:3c:91:66:
f9:4e:c8:a7:ce:33:97:3f:5e:e1:eb:dc:b6:ef:24:7a:80:dc:
63:03:56:33:f5:01:e5:58:99:78:9a:b8:25:ba:eb:96:91:cb:
f8:03:22:9d:9d:53:a5:ef:1a:1a:b8:71:0b:c4:a4:83:03:14:
fa:62:21:c6:02:df:b0:d7:69:23:42:07:c5:90:7a:32:96:8a:
88:fd:4c:06:b1:4f:bf:b1:94:18:73:cc:b4:e8:2c:02:be:17:
42:70:ef:5f:44:ee:7a:cc:33:9e:12:55:c5:0e:fd:37:55:d6:
8b:85:bb:b9:b5:ce:fa:51:f0:0b:41:d5:0b:ba:c1:1c:cc:83:
e5:3b:e1:59:eb:15:15:53:94:ab:91:96:9b:5f:8b:38:09:6c:
a9:04:be:90:fd:98:94:dc:07:c4:0c:b7:63:22:b4:4d:a6:ea:
ad:fa:72:8c:0e:4e:12:d4:0d:0d:64:8e:61:c2:60:3a:a7:6b:
d9:7c:02:f9:16:38:b1:f2:53:63:70:df:8d:db:61:7b:ee:09:
71:6d:90:6b:97:4a:2e:58:16:c7:2c:88:c4:67:02:de:6e:6b:
11:8d:82:90:a9:ae:25:a7:25:e0:11:39:13:43:ca:54:b3:48:
2c:3e:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:23:06 2025 by rpki-client