Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/E4Y4DgvrfMZRFfkDU7J3hEu8W_c.roa
File: E4Y4DgvrfMZRFfkDU7J3hEu8W_c.roa (raw, json)
Hash identifier: gT4d1PLwEsIRw1GbBV27XBOZHFPpkUIPaPpaZOuGe8U=
Subject key identifier: 13:86:38:0E:0B:EB:7C:C6:51:15:F9:03:53:B2:77:84:4B:BC:5B:F7
Certificate issuer: /CN=be84ae7c0503ac450934c9f6cff39a1537a5126d
Certificate serial: 01942067C8709BA1E6CB0A6BB89EC1BDE8CE
Authority key identifier: BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/E4Y4DgvrfMZRFfkDU7J3hEu8W_c.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42275
IP address blocks: 2a12:8e40:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c8:70:9b:a1:e6:cb:0a:6b:b8:9e:c1:bd:e8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be84ae7c0503ac450934c9f6cff39a1537a5126d
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1386380e0beb7cc65115f90353b277844bbc5bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:35:96:eb:e5:32:24:eb:f1:9f:ef:1d:58:
66:9b:2a:7a:5b:9e:c9:ef:f3:2a:11:0e:18:8a:56:
f5:f3:06:2f:45:96:56:42:7c:37:2c:57:70:e1:06:
6e:6d:d9:d1:f2:70:79:60:2b:31:2f:67:d7:a0:33:
71:47:65:cb:39:94:a5:af:27:33:f7:15:1d:3f:28:
2e:09:d9:17:e0:68:7f:fe:b9:35:4f:89:ae:5a:49:
f6:3d:b2:4b:ea:b6:ea:22:ea:34:b6:73:60:1b:65:
a5:de:ad:b1:fc:98:7a:dc:3a:65:cc:a3:0e:41:02:
fc:91:61:4e:f1:97:47:a8:db:e2:d8:c6:c6:c8:be:
3a:44:c9:7c:07:49:73:71:07:40:d0:b7:c7:a2:05:
ea:15:26:bd:01:b4:3d:25:a0:f9:05:b1:6c:7b:1a:
d3:ef:78:5c:98:7a:1b:48:b8:8e:f7:4b:71:5d:2f:
53:7d:cd:67:f3:23:80:ad:df:6f:06:0a:55:c4:b5:
3b:b9:c1:33:6a:83:bd:38:b2:c0:b3:9c:dc:93:dc:
fd:f0:df:33:01:d7:9b:19:35:02:11:e0:41:5e:8e:
40:19:82:e0:f4:c6:41:8a:d3:4c:04:36:8a:67:1b:
07:c9:92:e2:ca:01:5e:b9:3b:17:eb:a0:e2:1d:98:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:38:0E:0B:EB:7C:C6:51:15:F9:03:53:B2:77:84:4B:BC:5B:F7
X509v3 Authority Key Identifier:
keyid:BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/E4Y4DgvrfMZRFfkDU7J3hEu8W_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
47:48:8d:a5:c4:3e:f5:37:66:e8:dd:84:f0:5b:e6:f4:d4:ce:
03:c4:34:07:81:3a:0c:1a:6b:a7:f5:aa:b4:db:83:5a:bc:5a:
c0:89:0b:ff:4b:2f:d7:03:7b:be:89:af:a1:0c:64:e1:98:5c:
7a:7b:6f:79:d1:09:a1:93:37:e6:ee:38:b1:58:67:f4:a5:f9:
7d:29:d0:d1:6c:8c:d3:d1:d1:38:a6:1f:23:63:41:6b:e2:a7:
86:fc:a4:57:31:85:a5:d1:d8:fc:05:e8:fa:72:82:f4:dd:24:
6a:cc:84:89:b2:b7:67:0a:19:d8:b9:85:59:01:7a:67:6a:35:
b5:51:f7:f6:a4:31:0b:41:30:ce:64:c1:37:20:78:1d:68:1d:
61:46:21:81:e7:da:57:42:b0:30:48:d4:5e:ac:68:3a:3b:77:
91:58:a8:d0:eb:13:83:08:68:95:03:06:12:e3:c5:65:42:ec:
e7:be:89:ec:33:bc:0d:3f:11:07:21:9f:38:3f:e1:d3:4f:eb:
46:56:2a:9f:84:52:4c:db:df:12:3b:00:ad:dd:eb:90:6b:16:
45:5b:dd:29:50:c5:05:27:26:eb:99:43:8a:a1:48:57:6a:22:
d8:3a:ce:ca:c3:21:53:e7:86:5f:93:fa:43:ab:c5:bd:0a:69:
d7:49:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:28 2025 by rpki-client