Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/aZdpY-6aQVc8rHCGM-KBpFnCnPg.roa
File: aZdpY-6aQVc8rHCGM-KBpFnCnPg.roa (raw, json)
Hash identifier: nCT9H2cUZ02GB5vZs+gMpL9/otirgl5XGWJmdrXdOGc=
Subject key identifier: 69:97:69:63:EE:9A:41:57:3C:AC:70:86:33:E2:81:A4:59:C2:9C:F8
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01941F8C1B0F03A5D7E78A2DF770AFFD6601
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/aZdpY-6aQVc8rHCGM-KBpFnCnPg.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216063
IP address blocks: 2a12:de40:20::/48 maxlen: 48
2a12:de40:21::/48 maxlen: 48
2a12:de40:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:0f:03:a5:d7:e7:8a:2d:f7:70:af:fd:66:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69976963ee9a41573cac708633e281a459c29cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:27:c1:49:56:ed:08:6e:df:8d:34:e4:d8:
93:be:7b:14:1e:90:65:5c:1f:49:2b:85:1a:b4:67:
e6:b8:8e:91:19:5c:fa:4c:c5:d5:92:1a:91:b5:af:
d1:68:50:89:16:67:93:9b:47:88:cf:32:80:e1:b1:
e9:2f:96:1b:6d:ec:45:5a:4b:90:4a:34:e4:87:13:
9d:2e:58:34:7d:95:bf:b4:1a:be:1b:2a:c7:9a:db:
5f:fb:9b:d7:fa:4a:cf:cc:76:1c:0c:1b:48:60:5c:
08:61:3f:40:cb:fa:99:c0:7a:c0:2a:f2:ee:9c:b7:
5c:42:d0:a2:cc:37:a2:af:b9:36:78:00:00:93:d5:
b4:0c:95:55:3e:03:8f:f4:54:b9:17:da:fc:33:26:
1b:e3:d7:3d:7f:bd:08:1f:5b:ca:52:99:47:c7:6d:
c4:2b:eb:80:0f:e8:1a:46:95:ed:04:d9:ed:c7:f4:
be:07:a3:45:66:fd:84:b6:cd:9e:75:a0:5d:1d:b8:
c4:9f:7d:d8:ca:4e:a0:a3:ff:1e:57:39:3c:ce:bb:
9c:34:de:e1:31:aa:c1:1c:77:a6:60:30:04:48:18:
f1:3d:c9:61:b0:1a:d0:60:46:e6:04:47:c8:fb:ed:
8c:ab:e7:b3:4a:49:14:b8:f0:e2:01:79:d7:bc:0e:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:69:63:EE:9A:41:57:3C:AC:70:86:33:E2:81:A4:59:C2:9C:F8
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/aZdpY-6aQVc8rHCGM-KBpFnCnPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:20::/47
2a12:de40:200::/40
Signature Algorithm: sha256WithRSAEncryption
94:76:19:7a:5c:66:48:e3:0d:43:dc:96:a2:a1:af:c4:1c:2e:
78:ac:aa:a6:a3:6c:ee:51:f4:f8:51:f8:9a:2e:4f:a5:22:68:
0a:39:aa:8d:ed:49:61:a3:fc:55:12:21:7e:f0:e3:4b:23:da:
49:d4:13:7f:12:3a:27:58:0d:30:ba:f0:fc:35:51:4f:eb:c8:
eb:d9:87:c9:19:55:df:e3:61:5b:65:1c:3e:1f:ba:c3:69:37:
3a:36:99:02:1c:71:99:97:49:3f:21:2e:c2:54:49:39:ec:f6:
e7:b7:02:35:c8:c5:57:26:c9:9b:0b:68:79:39:fb:c6:62:8b:
34:84:e8:cb:e3:8c:76:d4:15:9a:91:5e:cf:32:59:91:f4:2d:
a5:7b:a5:18:d9:f2:00:47:32:59:36:00:e9:fc:cd:5b:6c:b0:
7a:c7:00:01:3a:b9:47:04:ee:ae:a8:84:c9:b7:7c:34:21:85:
70:78:a1:87:d5:f8:14:ad:8f:ad:4f:7f:e8:52:da:c0:03:9a:
eb:8c:51:61:08:89:79:75:76:44:ac:0f:cd:2a:1d:cc:62:b8:
00:c7:fa:db:6e:0a:4b:c8:49:b8:b8:47:50:e1:77:e8:d2:49:
88:a9:9c:c8:71:43:e5:8a:6a:25:cf:c1:ce:ec:04:01:19:99:
f4:47:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:53:37 2025 by rpki-client