Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/h7gCD8oh4S54ufSZ_zjM6Gvdl_Q.roa
File: h7gCD8oh4S54ufSZ_zjM6Gvdl_Q.roa (raw, json)
Hash identifier: C1mRkGntkL+n5HcwVIJfq1r15XuIJ95vUAO3Zq7cJWg=
Subject key identifier: 87:B8:02:0F:CA:21:E1:2E:78:B9:F4:99:FF:38:CC:E8:6B:DD:97:F4
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01941F8C198716DD8DABFDEE9C8C0FB74B3A
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/h7gCD8oh4S54ufSZ_zjM6Gvdl_Q.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214339
IP address blocks: 2a12:de40:46::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:19:87:16:dd:8d:ab:fd:ee:9c:8c:0f:b7:4b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b8020fca21e12e78b9f499ff38cce86bdd97f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:aa:0d:ac:3d:9a:64:f5:10:9f:6f:0e:3b:
64:8e:79:63:55:15:5d:77:ed:95:83:e2:0c:83:6a:
78:09:a5:9e:70:2c:ae:db:53:ac:4b:6c:11:8b:e7:
f5:de:89:ef:4c:db:ab:34:6c:e6:cb:8c:bf:1a:77:
a7:fb:a1:20:7d:03:85:10:59:41:bc:ca:29:fa:5e:
94:1d:07:80:9c:e4:d5:93:1a:c0:07:d7:30:5d:b6:
79:89:c2:3d:ae:89:6a:88:1e:42:ba:a8:7e:9e:1f:
31:d1:12:69:ba:6c:be:c3:d2:87:b4:18:b6:9a:55:
9c:ff:25:cb:90:e7:97:18:3e:2d:ee:80:4d:fc:30:
97:ac:fe:64:29:51:6f:1a:3f:11:74:2d:22:68:f8:
34:a3:b9:c6:9d:de:ea:b7:21:14:d4:6f:6e:ab:67:
0e:14:96:e1:e5:75:e6:b5:a6:db:c9:4d:f6:9b:61:
c9:1c:98:ad:63:91:cb:07:81:61:c0:d2:9b:7e:f6:
71:c7:b7:ae:09:bf:05:58:20:2b:06:25:07:51:5c:
05:bd:e9:25:8c:36:c6:0c:b9:4f:b0:b8:ea:be:4b:
c2:54:b4:a5:8b:40:21:d5:0a:19:7a:56:c1:3a:f9:
35:bd:72:77:02:21:58:a6:93:b7:04:8d:d8:a8:7d:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B8:02:0F:CA:21:E1:2E:78:B9:F4:99:FF:38:CC:E8:6B:DD:97:F4
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/h7gCD8oh4S54ufSZ_zjM6Gvdl_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:46::/48
Signature Algorithm: sha256WithRSAEncryption
60:e6:17:c9:b7:8c:07:26:52:97:5c:04:a2:4e:f0:62:c2:3e:
2b:92:d1:71:24:4f:4a:5d:59:7b:a4:99:c0:eb:e7:0e:27:2d:
29:cb:ea:d4:c3:b2:67:2a:6d:94:50:0d:4f:3b:73:7d:0e:c7:
0d:63:e8:12:c6:e2:9e:31:22:51:b0:30:6b:29:de:f0:5b:c2:
3c:e2:25:ba:9d:a3:ae:b6:80:d5:a2:db:19:3e:a1:8c:3b:61:
2b:0f:d8:53:6f:98:05:69:c6:c8:07:20:2b:22:f7:ab:dd:19:
e8:62:d1:14:da:fb:d9:cc:ed:a5:f3:29:bb:1a:98:df:2b:e6:
2e:61:19:c4:db:b2:bc:ec:97:65:69:f6:6d:9d:80:f8:49:ee:
ee:a6:b2:24:fd:46:74:8d:22:38:45:41:aa:74:3c:3d:d2:2b:
18:1e:03:7f:4a:6c:e9:01:74:80:10:4f:f3:97:7c:49:f4:15:
94:af:0c:86:cc:59:74:5c:d5:e4:79:ba:0e:03:07:eb:43:25:
eb:4c:75:58:fe:44:b1:a7:a9:45:47:5b:82:d7:f4:7e:88:04:
67:95:45:40:35:91:39:0e:fa:94:30:e4:44:fe:6e:86:7a:ba:
ea:ab:e3:e2:4d:53:06:ca:33:4b:89:36:4a:15:f8:73:d9:6e:
11:33:cd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:28:04 2025 by rpki-client