Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/dXPzTjbaiy-IXPRRTjOA0bkqzLo.roa
File: dXPzTjbaiy-IXPRRTjOA0bkqzLo.roa (raw, json)
Hash identifier: SV5kK7I7rmRqofqFPABZ0YHIwyAOku53VtII5zhZAi8=
Subject key identifier: 75:73:F3:4E:36:DA:8B:2F:88:5C:F4:51:4E:33:80:D1:B9:2A:CC:BA
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 01874EA80EBD1406F8D68DB516BE3A49DBD5
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/dXPzTjbaiy-IXPRRTjOA0bkqzLo.roa
Signing time: Tue 04 Apr 2023 23:44:09 +0000
ROA not before: Tue 04 Apr 2023 23:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 2a12:8c00::/36 maxlen: 128
2a12:8c00:1000::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:a8:0e:bd:14:06:f8:d6:8d:b5:16:be:3a:49:db:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Apr 4 23:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7573f34e36da8b2f885cf4514e3380d1b92accba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:2e:f7:59:a8:9a:ec:e7:4d:03:95:1b:c9:
2a:12:04:72:30:c3:94:57:28:28:41:5b:58:cc:e9:
23:4e:01:ec:c3:e3:6f:23:52:63:7f:c8:ff:25:87:
ec:ca:80:63:e4:a3:8c:e8:6e:c2:af:26:22:7a:38:
a0:0f:ce:07:bd:f1:b6:04:6c:e8:cd:6e:cf:1f:b8:
7c:d5:7e:06:8a:eb:70:42:92:04:34:54:af:8f:52:
bc:50:eb:ab:a2:10:e9:5f:05:d9:b5:d5:b5:28:12:
80:97:41:21:96:4d:42:16:53:64:ba:c6:76:e7:02:
55:8f:82:9d:86:82:cc:dc:93:07:36:16:7e:64:f0:
b6:50:99:d8:3c:b6:81:f7:96:18:79:5a:7e:4d:3a:
f7:26:1f:c5:8c:8e:a5:d2:ef:80:e3:65:3a:e0:54:
23:82:67:34:8e:e6:d0:71:04:c3:3a:ff:c2:1b:6b:
0f:7f:82:bd:29:34:47:88:dd:ae:fa:15:7f:6c:6c:
47:bf:bb:5c:b8:41:9d:20:69:11:ce:24:c8:7b:a4:
a1:9f:f5:85:e9:d0:ab:26:e8:32:7e:33:4a:fe:2f:
cf:b5:11:f0:91:46:b8:03:ae:06:d6:54:a6:0c:57:
fb:82:3f:65:48:eb:93:35:d1:5d:72:ab:60:78:b0:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:F3:4E:36:DA:8B:2F:88:5C:F4:51:4E:33:80:D1:B9:2A:CC:BA
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/dXPzTjbaiy-IXPRRTjOA0bkqzLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8c00::/35
Signature Algorithm: sha256WithRSAEncryption
10:39:83:4d:a3:8c:cf:43:27:96:26:89:24:6b:34:bc:0d:09:
26:cf:15:3c:3a:ea:d8:ce:86:15:ea:93:9d:28:f9:f6:f6:f6:
fe:ca:bd:f6:ff:66:c7:84:00:8b:20:8f:1b:01:84:26:01:da:
f7:55:63:c0:03:43:14:d9:66:37:ee:bc:e7:75:8f:ff:7d:18:
0a:bd:cb:23:59:60:da:67:e0:d2:fc:40:1f:54:79:63:82:2e:
ad:35:7c:10:58:3b:b3:91:f3:c3:8e:0f:54:88:54:4e:ba:52:
d1:66:91:eb:08:5a:da:40:64:66:0e:40:f9:89:3c:74:e8:e5:
5d:55:c5:fa:71:d9:3c:d4:5e:0c:ef:d1:31:cb:8b:97:b8:f0:
c6:f9:6c:0a:ae:c9:36:a7:2c:38:b2:d4:5b:bb:ac:b1:51:36:
e2:b4:5f:e2:4f:27:48:de:c8:ed:65:5b:ed:95:6c:7b:65:1e:
f0:33:bc:41:82:70:21:53:bd:e9:04:0f:77:5e:21:2d:ad:90:
0c:ab:e3:79:1a:c1:c7:b7:21:6a:cc:d8:5d:90:6f:a0:e9:f0:
4c:64:6f:08:14:fb:ac:44:d1:5d:f4:ca:d8:29:69:ef:08:0a:
04:b9:6a:ae:cb:c7:78:1c:16:9e:1e:3a:31:8c:16:02:bf:84:
52:f7:ec:ae
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYdOqA69FAb41o21Fr46SdvVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDA3MTIzMDY1Yzk1NWQxOWQ0ZmFlOTYzYjBkMDU1ZjQ4
OWIyMTUwHhcNMjMwNDA0MjM0NDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTczZjM0ZTM2ZGE4YjJmODg1Y2Y0NTE0ZTMzODBkMWI5MmFjY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6wu91momuznTQOVG8kqEgRyMMOU
VygoQVtYzOkjTgHsw+NvI1Jjf8j/JYfsyoBj5KOM6G7CryYiejigD84HvfG2BGzo
zW7PH7h81X4GiutwQpIENFSvj1K8UOurohDpXwXZtdW1KBKAl0Ehlk1CFlNkusZ2
5wJVj4KdhoLM3JMHNhZ+ZPC2UJnYPLaB95YYeVp+TTr3Jh/FjI6l0u+A42U64FQj
gmc0jubQcQTDOv/CG2sPf4K9KTRHiN2u+hV/bGxHv7tcuEGdIGkRziTIe6Shn/WF
6dCrJugyfjNK/i/PtRHwkUa4A64G1lSmDFf7gj9lSOuTNdFdcqtgeLAfIQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHVz80422osviFz0UU4zgNG5Ksy6MB8GA1UdIwQY
MBaAFDlAcSMGXJVdGdT66WOw0FX0ibIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VCeEl3WmNsVjBaMVBycFk3RFFWZlNKc2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zNWE2Y2MtZGE3Zi00ZTNjLWJjY2It
ZTczYzEyNDRmZTY4LzEvZFhQelRqYmFpeS1JWFBSUlRqT0EwYmtxekxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zNWE2Y2MtZGE3Zi00ZTNjLWJjY2ItZTczYzEyNDRmZTY4
LzEvT1VCeEl3WmNsVjBaMVBycFk3RFFWZlNKc2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFKhKMAAAw
DQYJKoZIhvcNAQELBQADggEBABA5g02jjM9DJ5YmiSRrNLwNCSbPFTw66tjOhhXq
k50o+fb29v7Kvfb/ZseEAIsgjxsBhCYB2vdVY8ADQxTZZjfuvOd1j/99GAq9yyNZ
YNpn4NL8QB9UeWOCLq01fBBYO7OR88OOD1SIVE66UtFmkesIWtpAZGYOQPmJPHTo
5V1Vxfpx2TzUXgzv0THLi5e48Mb5bAquyTanLDiy1Fu7rLFRNuK0X+JPJ0jeyO1l
W+2VbHtlHvAzvEGCcCFTvekED3deIS2tkAyr43kawce3IWrM2F2Qb6Dp8ExkbwgU
+6xE0V30ytgpae8ICgS5aq7Lx3gcFp4eOjGMFgK/hFL37K4=
-----END CERTIFICATE-----
Generated at Fri May 9 16:33:04 2025 by rpki-client