Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UR5E7yZVl-AAu07ynLu4G2dliJ0.roa
File: UR5E7yZVl-AAu07ynLu4G2dliJ0.roa (raw, json)
Hash identifier: xsXdCilppHgK0gD54EDIGVtxY7bCcubsbTRZ1TwcNOE=
Subject key identifier: 51:1E:44:EF:26:55:97:E0:00:BB:4E:F2:9C:BB:B8:1B:67:65:88:9D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF2252E915C404549DB2762DB45FC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UR5E7yZVl-AAu07ynLu4G2dliJ0.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214726
IP address blocks: 2a0c:9a40:8470::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f2:25:2e:91:5c:40:45:49:db:27:62:db:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=511e44ef265597e000bb4ef29cbbb81b6765889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:f4:68:ba:be:53:1c:9a:c6:cc:09:d7:12:
aa:47:27:10:60:a0:8d:9a:48:0a:69:bd:c8:95:b9:
d8:7c:2c:c5:09:ad:d8:60:16:1e:1f:8d:80:23:03:
5b:66:a4:3f:46:f5:21:a8:29:a8:13:86:7a:c3:4c:
6b:8d:2c:88:05:11:f2:0b:a6:e2:5a:a5:87:76:8b:
98:22:6b:8e:fb:e4:e8:f6:2c:93:9a:9a:0e:3f:4b:
a3:8e:45:fa:1f:a5:ba:6b:0f:f4:6e:04:b4:f8:6e:
c5:61:ea:0e:43:ef:00:c4:02:d2:08:a3:2e:f9:dd:
76:c8:2b:de:51:95:18:04:a3:fe:c0:47:e4:69:09:
66:32:b9:f2:2e:95:5f:d7:5c:d2:a3:3c:8d:ca:62:
54:36:be:f1:09:b6:0d:8e:32:81:59:03:65:17:91:
91:58:99:9d:a1:04:fb:2b:79:8d:d4:e2:c0:f8:7b:
2c:83:68:67:ec:ef:e0:75:f4:19:23:af:7e:d3:af:
82:7c:57:39:53:ca:58:06:40:b3:2d:2c:14:cb:5a:
1a:72:1f:77:04:13:c0:f8:f5:29:c4:ea:fb:a0:ec:
d6:c4:1e:53:7f:75:e0:71:f5:fa:47:09:06:ee:b4:
b6:21:0a:f2:b0:98:d8:86:f7:b7:04:14:04:97:1e:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:44:EF:26:55:97:E0:00:BB:4E:F2:9C:BB:B8:1B:67:65:88:9D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/UR5E7yZVl-AAu07ynLu4G2dliJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8470::/48
Signature Algorithm: sha256WithRSAEncryption
4a:31:f7:be:5f:44:19:de:83:b4:ce:14:db:fb:07:d1:c6:b3:
b6:8b:fb:d7:9f:d1:8f:7c:fd:17:41:35:fc:7f:43:a3:3f:2c:
96:0e:4f:4e:09:f6:39:a7:c1:0a:68:d1:aa:82:d7:69:f3:50:
cb:eb:5b:d9:47:df:c2:9f:a4:e0:c9:06:c2:81:11:57:7f:26:
e1:2b:9d:45:f6:d3:3b:bc:2d:e7:65:57:b5:43:0e:6a:7a:83:
ec:d7:73:78:ec:80:7f:65:ea:40:38:22:93:49:08:31:d7:8e:
74:fe:02:cf:52:e2:a7:52:c4:f0:fc:8c:b7:c8:3f:31:68:71:
6c:c4:c1:34:24:2e:55:d6:39:04:c0:b8:59:ab:fa:4a:ff:df:
c1:f0:96:62:08:02:66:9d:9d:ae:d8:7b:ba:be:02:02:aa:6e:
30:c1:47:45:ac:c6:d8:f1:55:f3:fd:53:dc:b5:ee:15:27:9f:
2f:95:32:af:cb:1e:65:a8:3d:3a:3e:6e:7e:55:ac:d3:2e:f9:
32:c8:dd:42:21:4d:b2:fd:c2:fa:0f:bd:53:40:35:a0:5c:2c:
b2:4d:2f:db:b2:ac:14:a5:86:59:93:8d:b2:56:88:b9:12:b7:
03:67:aa:37:39:09:87:54:6c:44:91:f3:da:89:5b:54:4a:e0:
5b:14:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:17 2025 by rpki-client