Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/u7-gL9wSp2bGW7DIF24NVuhmOKc.roa
File: u7-gL9wSp2bGW7DIF24NVuhmOKc.roa (raw, json)
Hash identifier: tP75Wdne3vqUbGN0hrtXpkGNXdZlPHZwjnI3xiXFlak=
Subject key identifier: BB:BF:A0:2F:DC:12:A7:66:C6:5B:B0:C8:17:6E:0D:56:E8:66:38:A7
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 01941F8CA087AA803A1EBD0B8694A5AC49BB
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/u7-gL9wSp2bGW7DIF24NVuhmOKc.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41446
IP address blocks: 192.166.12.0/22 maxlen: 22
2001:67c:2108::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a0:87:aa:80:3a:1e:bd:0b:86:94:a5:ac:49:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbbfa02fdc12a766c65bb0c8176e0d56e86638a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:8f:1e:3c:b1:ea:85:c2:84:f3:05:4c:24:
fc:19:62:6a:22:bb:75:b2:36:c9:16:ec:e2:b4:07:
7b:a6:c7:db:41:3a:e9:c6:fc:38:9a:c9:aa:fc:ac:
18:7e:29:21:3d:77:82:52:78:8b:cb:1f:75:1a:3a:
24:46:70:82:00:9a:35:93:2e:27:7c:51:b6:20:70:
23:21:ed:ca:76:55:c5:78:15:52:ed:c3:16:de:57:
d5:5e:30:7a:4f:1b:68:20:5f:59:cf:ad:bf:52:dd:
91:36:e6:b6:3c:87:38:d7:cf:50:4f:80:17:32:7d:
32:bb:fd:6c:09:93:21:2c:10:5e:28:89:3f:c9:20:
f9:25:10:66:b0:7c:e5:08:1a:c6:a4:99:8d:96:db:
b8:aa:ac:63:0f:67:33:bf:2a:29:cc:f8:6d:21:be:
6d:09:fa:d2:07:ea:70:09:65:69:1e:4b:cd:6e:4a:
9c:54:2a:7b:c3:20:f4:bf:cf:9e:9f:4a:58:72:df:
ee:64:8a:d8:44:90:c3:97:fc:d7:5a:89:b8:7a:e4:
10:e1:2d:c4:c1:f9:b9:03:60:4d:36:80:1f:90:ca:
82:3e:b0:e0:2c:a2:17:be:90:a9:f2:b9:bd:6a:7d:
3c:a4:05:5d:14:b7:b3:6e:d9:dc:08:7d:81:a3:b9:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:A0:2F:DC:12:A7:66:C6:5B:B0:C8:17:6E:0D:56:E8:66:38:A7
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/u7-gL9wSp2bGW7DIF24NVuhmOKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.12.0/22
IPv6:
2001:67c:2108::/48
Signature Algorithm: sha256WithRSAEncryption
8d:98:0e:df:6a:a1:d7:6b:2e:e9:ca:c1:d9:ac:14:3e:06:79:
a9:f8:9e:b0:04:4c:c9:1b:a0:c4:28:a2:3a:e4:c5:93:5f:95:
68:72:26:dc:cd:df:cf:be:78:9f:ee:59:18:00:a5:26:da:23:
16:1b:5f:8f:5e:ab:1b:b5:e4:24:d9:09:29:ec:d9:cc:f0:14:
28:7c:df:9f:67:ce:6d:29:38:97:89:8d:99:a8:f5:eb:4a:72:
dd:34:a6:fd:16:8d:80:7d:6f:9a:4a:7c:6e:01:2b:9f:85:93:
a2:d0:23:9b:a5:22:93:76:d6:e2:1d:b0:6a:4e:18:38:09:07:
04:68:86:20:a7:99:65:e9:2c:d0:28:e5:79:97:4b:0b:f3:1a:
8a:bb:58:50:bc:41:39:0c:2d:ba:55:65:ba:10:eb:23:01:0c:
be:98:e0:93:a8:1c:c4:56:2b:e9:13:21:21:26:79:23:c1:99:
a9:ad:f2:d4:51:6c:82:58:5e:a7:1b:5a:c4:20:be:8e:53:49:
1d:1b:2d:95:36:f3:5e:06:95:b7:21:27:56:32:4c:d5:03:04:
0a:67:4e:b7:4f:2b:66:b3:46:b2:54:2b:0c:f8:3b:73:0a:30:
99:21:63:69:8d:8a:7d:93:98:d5:2b:0f:87:0b:31:8b:6b:49:
6d:32:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:32 2025 by rpki-client