Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UQLQ41kKouyXK6sQgDbW2ayhBJY.roa
File: UQLQ41kKouyXK6sQgDbW2ayhBJY.roa (raw, json)
Hash identifier: 4/k6m2VywLEBBJc7Iv6JQeLT4XGzFX3N56BAkjVEgHQ=
Subject key identifier: 51:02:D0:E3:59:0A:A2:EC:97:2B:AB:10:80:36:D6:D9:AC:A1:04:96
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBBFBD22543E80DB4B8B59CAA92DAE
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UQLQ41kKouyXK6sQgDbW2ayhBJY.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13830
IP address blocks: 2a0c:9a40:8084::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bf:bd:22:54:3e:80:db:4b:8b:59:ca:a9:2d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5102d0e3590aa2ec972bab108036d6d9aca10496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:19:e1:55:29:97:8f:97:66:59:b4:3d:d1:
27:26:be:cf:f4:f0:a9:41:af:73:61:9f:48:5b:1e:
03:26:c4:a1:53:b8:0b:2a:ca:c4:11:c7:f2:90:81:
d5:d1:b9:06:76:34:a4:77:21:31:2c:35:58:4b:b8:
b2:bb:3d:92:5d:98:d5:c9:f0:4f:d5:23:76:a2:9d:
fc:59:3d:f1:25:6b:11:23:d0:27:5f:62:9d:20:91:
8f:d5:41:a1:66:24:20:11:f5:59:9a:b9:75:32:47:
54:4e:43:34:75:42:d8:63:7b:63:e5:32:cb:d4:2c:
e3:ee:78:c0:c0:b6:cd:47:40:17:6b:1a:22:31:06:
71:ff:1f:72:7b:14:f0:1e:a2:d7:8b:28:d9:d9:7f:
f2:cf:60:d2:de:ec:0d:d0:6e:01:0a:f8:12:aa:95:
56:db:32:fa:90:c5:d6:29:53:63:9b:93:34:59:1e:
59:65:5e:c0:40:3f:16:2d:9d:05:d2:70:d7:1f:35:
95:87:50:1b:58:60:b5:1c:ba:c6:de:81:43:ad:64:
56:c1:57:30:7f:59:ce:71:8d:d5:bd:6a:61:59:ab:
f0:f5:3c:40:63:4f:c9:61:6d:b0:bd:e1:6d:7c:45:
5f:a7:a6:be:4a:5e:ae:a6:31:a4:31:6c:60:f1:c6:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:D0:E3:59:0A:A2:EC:97:2B:AB:10:80:36:D6:D9:AC:A1:04:96
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UQLQ41kKouyXK6sQgDbW2ayhBJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8084::/48
Signature Algorithm: sha256WithRSAEncryption
99:58:69:27:f1:cd:24:83:be:73:aa:84:95:6c:df:b0:5b:c0:
6e:c1:ce:0f:85:2e:75:7e:b1:d6:ab:a9:70:ab:22:c6:ae:f7:
d3:d6:c7:33:a5:3c:f8:63:de:39:d0:1f:74:82:fd:6f:f8:5c:
00:ed:d7:d8:e8:e2:ee:76:a2:3a:80:b0:aa:fa:57:65:39:97:
44:f0:a5:e4:50:2f:3f:9d:de:cb:b0:f1:58:49:19:78:65:10:
8f:72:46:07:9e:ce:e1:d3:21:73:8e:f9:e1:00:4a:79:50:e4:
e7:92:06:77:26:34:82:19:a1:79:71:c3:59:f1:21:0e:55:3c:
1e:b3:1c:32:16:40:75:90:05:e4:3e:ee:97:af:88:d9:db:71:
e8:ff:02:32:5b:0f:19:41:64:0a:f6:70:d8:43:82:06:b3:88:
eb:ec:3d:ee:88:14:e6:a2:24:06:30:1a:03:0e:5a:d3:c7:f6:
47:a0:3b:84:c1:13:50:3b:06:51:cd:c7:ca:e6:01:98:fb:92:
84:dc:63:0e:8b:a0:53:92:e8:ed:88:6b:09:cd:6e:23:a6:19:
5d:05:96:55:da:1c:2c:bb:c9:05:5f:ed:92:17:70:c9:f6:45:
c1:00:56:cd:9c:39:68:9b:be:b3:ac:55:da:ca:de:e2:39:42:
22:82:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:39 2025 by rpki-client