Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/u944Vko_puQtCBEzGijAbSQoGpQ.roa
File: u944Vko_puQtCBEzGijAbSQoGpQ.roa (raw, json)
Hash identifier: LMFrhHJ6yFviaZXYhsCKFlEQ3DzLTbzYCO+pVSlH3ak=
Subject key identifier: BB:DE:38:56:4A:3F:A6:E4:2D:08:11:33:1A:28:C0:6D:24:28:1A:94
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019492D826BE0A076A83E86BC98D240DE713
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/u944Vko_puQtCBEzGijAbSQoGpQ.roa
Signing time: Thu 23 Jan 2025 11:07:06 +0000
ROA not before: Thu 23 Jan 2025 11:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 2a12:bec4:1520::/44 maxlen: 44
2a12:bec4:175a::/48 maxlen: 48
2a12:bec4:175b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:d8:26:be:0a:07:6a:83:e8:6b:c9:8d:24:0d:e7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 23 11:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbde38564a3fa6e42d0811331a28c06d24281a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:5b:75:aa:02:22:3b:59:39:e3:41:5f:7f:
6f:6e:4b:d5:c6:13:e6:a1:91:b6:c1:f3:98:c2:74:
20:c7:06:93:76:41:46:fa:6c:36:dd:95:38:5c:07:
3a:06:3f:8a:f4:9a:e7:12:93:45:47:2e:f0:b8:6f:
4f:d8:ce:fd:e8:54:6e:74:2c:a7:0a:d0:49:5b:52:
70:e3:12:c2:f9:dc:14:25:dd:4c:fa:ac:7a:24:f9:
f6:35:a6:da:c4:47:59:5b:9c:a4:38:79:a0:85:1c:
0e:ec:08:ab:b3:31:34:08:2a:cf:ce:9f:03:f2:33:
c8:4b:2c:01:55:9e:66:b0:39:cf:f4:02:f0:c0:42:
87:24:dd:3c:cd:67:ba:43:4f:8e:de:29:ed:0a:ca:
9e:7e:17:b8:11:40:64:9b:3f:6f:23:46:a4:4e:71:
6f:51:77:f9:67:06:4a:f7:74:b8:f9:cc:2a:40:8e:
1a:69:33:52:61:e2:72:e9:61:c1:33:7d:1a:6b:92:
7e:45:40:dc:0c:24:8d:95:df:00:e3:71:a8:5f:c4:
f2:93:05:e0:46:20:cf:5b:f4:5e:42:9a:87:79:20:
14:12:66:fa:8f:a3:ef:78:99:20:92:8b:62:ae:3c:
a1:86:55:d8:f8:ed:98:00:43:8c:95:25:21:5d:43:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:38:56:4A:3F:A6:E4:2D:08:11:33:1A:28:C0:6D:24:28:1A:94
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/u944Vko_puQtCBEzGijAbSQoGpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/44
2a12:bec4:175a::/47
Signature Algorithm: sha256WithRSAEncryption
9f:34:44:32:fa:7a:2b:1f:00:f5:9d:b5:10:d1:23:8e:85:e9:
06:25:45:56:71:0d:54:bb:0d:3d:71:5c:a5:44:02:7a:16:0c:
c4:c3:b3:a9:fe:85:34:ac:de:f8:8a:02:8c:43:f4:b0:78:b2:
67:20:77:4c:87:6b:70:e2:78:58:8e:83:c9:22:88:a4:8f:ba:
e5:a4:b6:78:a1:65:ea:19:b3:a3:18:b1:6f:be:25:14:c6:e4:
30:66:ed:5a:a7:ce:19:a7:11:5b:f3:f8:cf:e0:64:b6:6c:0b:
80:ee:e9:6f:7c:e7:e5:86:b4:04:6b:0f:56:68:3b:85:dd:33:
4b:4d:e9:37:d1:b0:8e:ec:6b:ac:e0:9a:bd:26:fa:21:48:b4:
a5:c6:fc:c4:24:08:10:b0:df:11:49:29:86:20:b1:87:a6:e5:
44:e7:df:d4:e9:0d:1c:d6:49:e9:3d:14:6e:97:c1:6c:dc:79:
06:c1:24:29:1c:e6:c3:91:1c:fe:6b:fe:bf:71:44:e6:87:96:
51:27:34:77:b8:37:30:94:c8:83:49:4d:09:b9:89:3b:7d:fd:
a2:54:1c:61:a0:d9:e9:11:ef:77:32:5b:04:45:3f:d0:bf:89:
79:8e:76:82:7c:c3:2e:28:73:74:91:58:2a:4d:e0:fc:5b:ca:
b8:46:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:35:00 2025 by rpki-client