Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uQr1xWQSE3nPPhDILgyYHshqNbA.roa
File: uQr1xWQSE3nPPhDILgyYHshqNbA.roa (raw, json)
Hash identifier: Z2p5pWbC+qD/NdpuA18ESp6ztrmaR4vgrUZiU2q05vs=
Subject key identifier: B9:0A:F5:C5:64:12:13:79:CF:3E:10:C8:2E:0C:98:1E:C8:6A:35:B0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0194A79821129442FA39EAB60F99FB2F49CA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uQr1xWQSE3nPPhDILgyYHshqNbA.roa
Signing time: Mon 27 Jan 2025 11:49:12 +0000
ROA not before: Mon 27 Jan 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202941
IP address blocks: 2a0c:9a46:900::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:98:21:12:94:42:fa:39:ea:b6:0f:99:fb:2f:49:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 27 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b90af5c564121379cf3e10c82e0c981ec86a35b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:63:0d:dc:e4:18:66:66:38:8a:34:77:ea:
31:0c:9b:f8:86:6b:52:c4:06:e6:c2:bd:a8:16:4f:
1a:f1:38:d5:cc:ad:f5:c5:0a:7d:82:54:af:a6:b6:
ae:45:04:62:51:a9:33:4a:fd:f8:f0:63:28:18:ba:
81:9d:29:b6:50:4f:aa:f9:c3:db:c9:c3:f2:40:16:
93:f4:74:89:97:7a:a9:fe:0b:8c:97:e2:ea:6d:43:
5e:b1:95:b4:69:c8:9f:f6:db:34:e5:bf:70:2b:76:
68:af:4a:21:ea:f5:a2:4a:83:06:58:2e:2f:b3:cb:
da:b6:5a:ea:8d:d0:2b:2c:11:23:ae:6f:95:94:48:
0f:ba:d4:d4:f8:6a:7b:51:48:7d:1d:84:0d:87:54:
d3:ca:ca:46:ac:36:77:32:6a:e3:28:10:23:16:28:
5b:81:35:50:cb:c5:a7:9e:b3:c0:c1:11:73:58:8b:
13:9f:80:2c:27:97:31:23:20:47:e4:62:8a:9a:f8:
a0:98:2f:68:f6:72:96:88:06:ca:85:75:9d:4e:4a:
46:fa:03:38:48:64:25:9d:65:48:52:6f:2e:ba:d8:
cb:13:c7:bc:15:12:9d:d3:0e:f5:7b:e0:ab:71:b2:
a7:50:12:86:9c:19:6d:6c:a9:11:30:cd:a7:e1:9e:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:F5:C5:64:12:13:79:CF:3E:10:C8:2E:0C:98:1E:C8:6A:35:B0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uQr1xWQSE3nPPhDILgyYHshqNbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:900::/40
Signature Algorithm: sha256WithRSAEncryption
85:3f:9c:b9:82:83:0d:07:18:67:8d:16:31:c2:c3:9b:58:dd:
93:2d:da:7e:2d:28:d7:51:9e:d5:50:d1:e0:6e:a5:f8:c9:3c:
30:6a:15:d9:cc:92:50:8f:89:08:3f:64:db:7e:db:45:52:94:
74:74:0a:83:67:f9:46:be:d0:d4:74:44:ff:98:dd:eb:80:db:
1d:25:8b:7a:01:eb:4b:57:b4:c0:51:1e:4e:45:79:f3:9e:36:
df:9e:89:1e:be:d3:53:49:f0:0c:2f:6a:3f:2f:7e:63:78:15:
71:c0:87:45:74:58:52:8d:15:a2:e5:85:6f:59:47:d1:ff:ce:
cb:10:d9:f5:b2:f3:6d:e0:3a:cd:a1:6d:76:6e:da:e0:2c:0c:
7e:4b:1a:64:83:a6:b8:30:02:5d:92:0e:65:2e:1b:89:53:e1:
85:2a:e3:91:2e:0e:4a:be:73:94:b9:da:be:d4:37:22:b9:08:
00:cb:17:59:af:58:31:93:ea:94:27:0e:91:f7:94:ca:99:c6:
93:fb:5a:74:ba:05:a5:0a:26:f9:0f:fd:d4:9a:91:91:df:f4:
27:9a:92:a3:e5:71:b1:09:85:22:bb:72:e4:55:e8:6b:a0:fa:
60:71:79:ad:7d:06:cf:4e:b7:b8:87:6c:35:fe:80:c4:76:68:
57:f0:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:51:58 2025 by rpki-client