Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa
File: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (raw, json)
Hash identifier: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=
Subject key identifier: 0A:48:8C:B9:03:BE:1D:9F:3F:74:B6:71:58:07:F7:55:A6:40:4E:4D
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 0194258E66698C11FF18B85132F033FF6285
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa
Signing time: Thu 02 Jan 2025 05:47:56 +0000
ROA not before: Thu 02 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:5340:6::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:66:69:8c:11:ff:18:b8:51:32:f0:33:ff:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Jan 2 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a488cb903be1d9f3f74b6715807f755a6404e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:30:1f:26:77:4f:54:7e:ba:8d:eb:ad:06:
46:4e:5c:a2:9a:57:c2:8f:a2:e6:d8:7b:d9:1e:04:
10:89:0b:79:ec:64:76:14:ac:44:36:ed:16:93:42:
f1:a1:c6:65:1f:76:a0:73:72:af:d7:d8:ba:5d:80:
a8:27:86:7d:07:14:46:e0:9d:d0:12:f1:06:dd:4e:
16:7c:d0:2d:32:f7:66:12:a9:d9:37:90:ba:38:a2:
2f:3e:27:f9:a3:d0:d3:50:99:30:ac:1a:f6:59:b4:
77:8e:39:84:10:80:3b:3b:42:d8:7a:13:ae:e0:5d:
a3:97:36:e7:18:bb:ed:d5:46:5f:97:04:24:1b:8f:
b2:9e:1c:52:78:93:74:b6:28:35:1e:6f:da:fa:ab:
bf:c6:e9:3d:b4:b7:4a:e8:8e:ba:54:e7:8f:4f:f9:
43:ef:43:90:80:52:81:09:65:ed:3f:f7:8a:93:93:
54:f2:9a:b1:35:e1:a4:e7:3b:9f:96:a1:81:2c:54:
2e:62:76:52:a5:c7:d3:3a:8b:03:a7:6d:9d:00:a1:
17:97:78:f1:7b:75:fd:41:50:3c:60:f4:b7:2a:6d:
72:61:73:a4:ba:86:cf:f7:fd:44:e9:90:67:5a:d2:
ee:d5:20:e0:5a:f5:ea:d7:cd:b2:9c:27:b5:76:65:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:8C:B9:03:BE:1D:9F:3F:74:B6:71:58:07:F7:55:A6:40:4E:4D
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5340:6::/47
Signature Algorithm: sha256WithRSAEncryption
00:5b:ef:e6:aa:70:84:73:5b:f2:52:4b:47:46:8d:dc:43:37:
2e:80:0d:cf:bd:44:02:e9:68:2c:71:69:cf:a9:c0:78:72:d1:
4e:8a:85:28:7d:13:a0:c4:1c:50:b2:d0:41:5b:03:83:8b:4e:
9e:aa:d5:6d:85:f5:37:73:d2:d3:8a:e4:58:35:e8:53:0d:8b:
a1:ed:55:3d:7e:f7:b0:6e:13:c5:07:b3:4a:9b:cb:8f:64:bf:
c3:c8:fd:1b:ee:48:1b:ea:61:db:51:c4:7d:42:85:eb:0c:27:
09:9f:26:17:4f:f0:59:91:62:09:a7:88:cb:c7:74:06:c3:71:
42:41:47:df:8f:55:c1:17:ed:2e:e6:5a:1d:0c:c5:67:56:8b:
e8:ab:0b:10:6e:0b:81:2c:a7:40:de:42:87:21:ed:7b:28:ed:
60:1b:e9:1f:61:df:9f:91:8d:5e:6b:07:6c:dc:28:90:d7:6d:
7a:42:d4:f4:e8:c4:47:71:1e:23:ea:8d:fd:bd:97:5a:06:c7:
e2:ab:0a:7c:af:4c:ef:7c:b4:15:c0:e7:cb:61:71:46:1e:4b:
2e:75:b1:e6:5c:48:d7:de:2d:8e:6d:97:51:3c:96:2f:ed:bc:
57:ec:3d:f0:e6:76:8f:c9:0d:b8:d7:66:de:85:74:0e:93:9c:
98:3f:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:17 2025 by rpki-client