Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/B97d26Z8zbvdgAX4-cqimsUhXM0.roa
File: B97d26Z8zbvdgAX4-cqimsUhXM0.roa (raw, json)
Hash identifier: oZVbNKeP0bEDNNBWhDYVqEMaSVD4P4FH5yL5YJ/tIoc=
Subject key identifier: 07:DE:DD:DB:A6:7C:CD:BB:DD:80:05:F8:F9:CA:A2:9A:C5:21:5C:CD
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 01962B547F76EE663E2691A06A9DC6148480
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/B97d26Z8zbvdgAX4-cqimsUhXM0.roa
Signing time: Sat 12 Apr 2025 18:48:00 +0000
ROA not before: Sat 12 Apr 2025 18:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215256
IP address blocks: 2a12:3fc5::/36 maxlen: 36
2a12:3fc5:1000::/36 maxlen: 36
2a12:3fc5:2000::/36 maxlen: 36
2a12:3fc5:3000::/36 maxlen: 36
2a12:3fc5:4000::/36 maxlen: 36
2a12:3fc5:5000::/36 maxlen: 36
2a12:3fc5:6000::/36 maxlen: 36
2a12:3fc5:7000::/36 maxlen: 36
2a12:3fc5:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:54:7f:76:ee:66:3e:26:91:a0:6a:9d:c6:14:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Apr 12 18:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07dedddba67ccdbbdd8005f8f9caa29ac5215ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:90:d8:4c:59:35:74:86:ac:36:8d:66:1a:
01:e0:7b:ab:11:a9:fa:05:5a:6f:06:f0:b7:57:46:
3b:cc:cf:59:f4:ca:bd:fe:6b:29:e1:e6:d6:88:f1:
6c:34:c4:9a:e3:3e:a6:7c:c5:23:d7:b6:3a:f9:ce:
a1:a9:34:f6:28:75:f3:c3:64:d8:3d:9c:e2:bd:15:
79:ed:cc:8a:9c:cb:df:f3:4a:58:79:52:b9:bf:46:
6e:28:a1:71:f7:ce:5c:f3:94:de:93:3c:cf:db:39:
36:91:3b:ab:f2:b1:cf:d3:94:11:38:ba:d6:37:4d:
a8:21:39:0d:d5:b3:ab:c3:af:ac:5a:d4:b5:1a:20:
d1:f1:fe:e3:c7:d2:ee:aa:cf:56:08:66:48:68:2d:
7d:23:3c:e8:2a:13:b3:42:02:39:23:e9:74:75:0c:
2e:46:61:a8:df:0b:06:de:86:85:d0:75:86:35:c0:
b2:e9:4e:9f:fb:b4:cc:ff:3d:8c:00:8f:df:d9:46:
7a:35:f6:44:28:d9:83:84:e1:4a:17:ea:7e:95:86:
3d:98:49:a9:c0:9b:af:fa:6d:92:db:09:15:86:a1:
ca:03:8a:e5:5b:4d:21:92:6f:af:7b:e3:70:b1:85:
a5:4d:7c:01:75:37:bb:25:5b:bd:b2:90:95:87:4f:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DE:DD:DB:A6:7C:CD:BB:DD:80:05:F8:F9:CA:A2:9A:C5:21:5C:CD
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/B97d26Z8zbvdgAX4-cqimsUhXM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc5::/32
Signature Algorithm: sha256WithRSAEncryption
cc:5c:e5:94:bc:6f:42:06:cb:60:26:a1:ce:8c:4d:96:9d:fb:
a0:75:38:b6:d8:d9:e4:4e:8c:0d:b6:90:ee:18:39:6e:06:f5:
31:5a:a7:3b:7a:a9:5f:83:86:28:3a:35:d6:4c:18:de:86:ec:
1e:4f:e7:45:f0:bd:7a:f5:40:e5:f3:86:95:89:ac:27:b9:53:
69:3a:87:ac:1b:43:da:ef:12:e0:ad:2c:6d:4d:68:85:4d:44:
59:bb:99:80:1b:ee:c5:c2:ca:70:60:6b:53:5a:c9:b3:58:88:
3f:12:4d:4e:46:62:23:d9:76:c0:1e:86:68:87:79:ec:85:e6:
e9:5a:0f:0b:4a:72:fb:6e:c5:ce:72:97:27:17:13:5d:d4:29:
b8:ef:53:f2:58:35:51:22:35:a7:bf:35:d0:39:a7:2e:18:ac:
5b:86:bc:2c:83:1f:8c:11:f6:7a:f0:27:ab:92:fe:a7:e6:ae:
02:b4:c1:9c:b4:e6:8f:30:4a:5c:5d:7f:5a:72:b2:a0:d9:0d:
8f:3e:b0:7e:51:de:69:ff:e2:05:ff:8e:5f:7d:ff:b0:e8:b3:
e1:9e:47:22:73:26:ad:44:de:be:a8:bc:4c:19:51:25:54:93:
65:f8:cb:1b:c2:1b:3a:55:f1:a9:48:b5:20:f8:9b:40:6a:2c:
45:60:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net