Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/NOXjVjJhFkrwhntmdhaI015mrJA.roa
File: NOXjVjJhFkrwhntmdhaI015mrJA.roa (raw, json)
Hash identifier: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=
Subject key identifier: 34:E5:E3:56:32:61:16:4A:F0:86:7B:66:76:16:88:D3:5E:66:AC:90
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 01942521DC066E16E7CFDF650501E0FC2F77
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/NOXjVjJhFkrwhntmdhaI015mrJA.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50955
IP address blocks: 2a12:b2c0::/48 maxlen: 48
2a12:b2c0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dc:06:6e:16:e7:cf:df:65:05:01:e0:fc:2f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34e5e3563261164af0867b66761688d35e66ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:02:02:45:b6:5e:92:61:29:ae:ca:4a:d6:
97:f3:ea:bc:b8:5d:71:77:e9:f3:ce:30:45:a5:94:
40:97:29:3a:24:06:05:99:f7:c8:55:8d:85:57:9a:
92:b7:69:0c:24:bc:be:87:81:6f:c7:e8:5e:01:d3:
e2:bf:46:a7:77:d8:cd:eb:72:a7:89:b4:89:41:ec:
6a:4d:83:5a:1e:e6:f1:3f:fb:d4:5d:b9:74:cd:f5:
6c:1e:48:27:5f:d3:91:6e:3a:52:91:72:8f:83:8d:
84:70:b2:fc:2d:fb:8a:d0:06:75:31:cb:88:99:ae:
ea:86:e9:be:86:3f:ae:c9:3e:9e:0f:bc:4f:f7:33:
6f:89:71:4a:17:8f:87:67:26:62:32:49:46:6b:ae:
ab:ab:81:b7:dd:b5:60:45:18:ad:24:45:e7:ec:e4:
87:a0:64:06:05:07:4c:c3:af:e6:31:d6:5a:e6:64:
0f:04:dc:75:97:b6:ce:23:1b:e2:83:7f:6d:c4:69:
b7:06:8a:f5:c7:d0:d3:50:e3:11:80:23:c0:48:61:
7c:2b:24:75:39:e4:e3:23:b2:98:d6:ce:1e:9d:8b:
f0:f6:b7:49:06:9c:d2:b9:a6:79:36:26:f7:0e:94:
8d:7e:39:04:47:ed:49:bc:d3:c8:1b:23:89:4a:b1:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E5:E3:56:32:61:16:4A:F0:86:7B:66:76:16:88:D3:5E:66:AC:90
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/NOXjVjJhFkrwhntmdhaI015mrJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b2c0::/48
2a12:b2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
35:01:9b:b1:5b:59:18:91:1d:bd:c4:6f:46:01:77:31:92:3b:
58:90:bf:93:d0:ca:8d:83:bf:96:ee:6f:2f:81:70:75:bc:57:
5c:82:62:dc:1e:22:38:7d:95:2c:4e:e7:4a:a8:79:01:0e:33:
0e:9f:c2:65:eb:50:90:36:d9:1c:6a:31:19:17:75:db:ff:21:
32:c5:1f:70:79:e3:3f:eb:96:f8:26:98:bf:ef:c3:cf:29:27:
e7:dc:1d:5c:c0:66:fc:23:19:0e:ff:77:2e:29:f2:54:9a:b1:
80:db:82:5b:a4:66:c2:e8:51:77:68:6a:e5:c0:4a:3d:6b:da:
33:5e:27:8d:5b:f2:4a:4c:97:ca:9a:9a:71:29:e8:93:6f:db:
e3:0f:99:8b:27:34:5a:62:9d:8a:a5:f4:d7:5f:56:b6:34:9b:
2e:f2:27:76:14:f1:a1:eb:fa:e3:2e:b2:5b:33:fc:4c:27:ae:
9e:62:45:9c:6d:da:7d:42:89:bd:82:e3:04:8f:ba:08:3d:f7:
ee:a0:ba:7b:19:08:4d:6e:2c:4b:69:62:7b:50:66:16:06:31:
af:5c:19:05:9f:35:c9:9d:5a:69:48:0f:5c:1d:81:3a:ef:9f:
a5:91:ce:a9:36:4f:de:e0:e0:2e:68:05:61:9d:4c:7c:ee:cd:
20:9f:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:01:19 2025 by rpki-client