Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/uwKuD1U0-ONC7lZAzrC62rEZLfU.roa
File: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (raw, json)
Hash identifier: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=
Subject key identifier: BB:02:AE:0F:55:34:F8:E3:42:EE:56:40:CE:B0:BA:DA:B1:19:2D:F5
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 01941FFA9E0A0DD1CF4E5816E8AE7C621C1F
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/uwKuD1U0-ONC7lZAzrC62rEZLfU.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:2b00:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:0a:0d:d1:cf:4e:58:16:e8:ae:7c:62:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb02ae0f5534f8e342ee5640ceb0badab1192df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4b:b0:54:ad:67:4f:82:9c:3f:8c:23:eb:9e:
af:1e:c4:52:a9:e3:78:79:50:28:b0:1a:3e:bd:86:
24:f6:4e:14:e2:51:3f:68:e1:0c:73:f9:1f:5b:66:
37:d9:de:51:d5:0e:41:5e:f2:bb:93:bc:85:f0:d0:
3d:d4:36:31:9c:67:9e:9f:a1:ff:21:a4:a4:15:df:
b2:2d:a7:4f:36:20:29:c9:51:8b:63:46:c2:81:eb:
33:bc:fa:3c:cd:08:5b:a2:7d:b6:12:1a:99:96:96:
0f:86:14:95:5d:d0:f7:b8:80:fb:42:47:be:22:38:
93:42:df:02:1f:0b:d4:94:ab:8d:25:f9:f8:2c:c5:
92:2e:15:24:b1:b3:1b:4b:12:11:b7:74:fa:50:9b:
fa:a1:ee:8c:ac:d2:4c:86:d7:5d:b3:61:ba:5b:e3:
47:3a:8b:fd:cc:4e:b6:d6:81:f2:7e:e3:1f:46:40:
a5:f3:0a:8d:a1:4f:e9:52:60:b3:b9:03:6b:3b:b3:
17:c3:1f:f6:4b:17:10:fe:d7:42:fd:11:1f:f4:26:
90:7b:48:f4:07:f5:57:ff:ee:47:24:89:a3:16:13:
51:aa:7e:63:c3:6a:82:6a:8c:a5:cb:1f:5e:b0:60:
99:32:19:74:60:a0:90:4d:25:51:55:0d:fa:4d:52:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:02:AE:0F:55:34:F8:E3:42:EE:56:40:CE:B0:BA:DA:B1:19:2D:F5
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/uwKuD1U0-ONC7lZAzrC62rEZLfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2b00:20::/48
Signature Algorithm: sha256WithRSAEncryption
a8:17:d5:21:bd:3c:1d:0d:a5:3f:84:af:15:e7:e2:28:72:0d:
e2:00:9c:dd:85:91:41:10:46:7d:98:57:af:c8:04:93:e6:d0:
6b:80:4d:f1:10:fb:65:49:23:88:82:71:4d:a9:86:b7:75:0e:
66:c1:d1:6e:be:d3:3d:45:c6:d9:d2:72:24:35:98:a0:68:b6:
25:e0:0e:0c:60:e3:33:01:b5:3a:f1:c0:7f:7b:f7:47:8c:55:
0f:2d:d5:23:2a:df:ab:49:32:89:62:5f:09:a2:ed:a3:21:08:
ea:5a:6a:0f:ee:ff:ac:95:33:f0:c0:d7:d0:5f:e3:6b:1b:2f:
ad:1d:e5:6a:d9:87:b6:7c:a1:7c:7a:0c:bb:7b:66:a3:21:8c:
b8:79:c9:a1:10:ca:ec:dc:c4:b5:25:d5:c2:f5:3e:49:28:c0:
28:2a:b5:c8:d9:44:85:40:7a:21:5b:bf:a0:b4:7b:eb:ad:92:
36:75:ac:61:d2:23:48:ea:59:2d:b9:cf:4f:e2:ca:90:15:92:
a3:00:0a:f6:dc:08:f2:e5:75:c4:2c:71:4c:97:62:2d:10:2c:
8d:f7:8f:cc:0f:9b:9c:c7:ec:b4:0a:56:46:f6:6c:5f:da:62:
ff:ff:f9:0d:fa:6a:37:82:c6:58:88:21:6c:62:db:3c:bb:f8:
25:ed:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:02 2025 by rpki-client