Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uu50JuamPamC0dENYhTF8Ei25Uw.roa
File: uu50JuamPamC0dENYhTF8Ei25Uw.roa (raw, json)
Hash identifier: rKPtIOZwPIAeA+9p8QhHPYkIM2v7Z4woLBlI+xJCRRI=
Subject key identifier: BA:EE:74:26:E6:A6:3D:A9:82:D1:D1:0D:62:14:C5:F0:48:B6:E5:4C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCB5D908D92725DF8D5382AEB28B2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uu50JuamPamC0dENYhTF8Ei25Uw.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136620
IP address blocks: 2a0c:9a40:8080::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cb:5d:90:8d:92:72:5d:f8:d5:38:2a:eb:28:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baee7426e6a63da982d1d10d6214c5f048b6e54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:6b:2c:77:ae:f1:6d:e4:7b:f2:f4:1d:24:
cb:62:1a:58:5c:d9:de:0f:35:65:0e:41:d1:9d:0f:
d8:9b:d2:85:61:ac:43:91:23:79:a6:6a:27:1a:1f:
20:cd:60:21:bc:f0:46:aa:d2:47:be:00:7e:2e:54:
f2:5c:d2:40:26:c5:48:cc:16:7e:a1:8d:ba:3b:d7:
7e:8a:c7:c7:94:3b:52:7b:4f:d5:2e:ac:7d:bd:91:
38:48:9d:2b:f8:0d:e2:0c:f6:fe:09:e5:58:0f:f2:
25:ab:e0:42:0d:0a:ac:f0:fa:56:7c:41:14:e8:fb:
d8:fe:0c:5b:ef:33:af:9e:b6:65:e6:14:b4:af:ed:
0b:b5:97:4f:34:15:13:62:ef:38:28:d8:d0:94:18:
a2:6d:62:47:de:3b:60:91:aa:85:72:61:a6:7b:7b:
7a:79:03:7a:b3:0b:f1:94:fc:fa:68:1e:79:c4:4b:
36:57:ae:04:95:08:a6:8e:68:ff:f3:fa:a1:f5:40:
2c:7c:cb:06:36:07:10:5d:d5:ca:e0:03:09:b2:71:
42:30:64:6d:00:71:8c:3e:47:37:6b:b4:5f:76:39:
f9:ba:dc:1e:5d:53:fd:3e:bd:b8:bc:95:fd:ab:f5:
3a:e5:84:8f:e1:a5:92:db:cb:ee:06:07:75:4b:8e:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:74:26:E6:A6:3D:A9:82:D1:D1:0D:62:14:C5:F0:48:B6:E5:4C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/uu50JuamPamC0dENYhTF8Ei25Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8080::/48
Signature Algorithm: sha256WithRSAEncryption
ad:5f:93:dd:62:c3:3e:48:17:21:9a:e6:7a:76:2b:0b:0c:0d:
cd:74:9b:24:8e:11:14:bd:11:d9:a2:c2:1b:0b:01:da:01:3d:
07:53:67:3b:c4:58:61:f5:ff:99:a8:e3:fd:de:f0:45:fa:aa:
a8:f5:6f:f9:a3:33:e6:7e:27:11:99:6c:9e:16:e7:6c:6a:23:
3c:d8:07:89:b3:ff:ab:1b:46:42:8f:93:1a:5c:b3:17:1b:db:
02:7f:07:bc:74:a0:74:57:72:50:61:3e:fa:6f:9e:a8:dc:ad:
c0:53:15:38:ab:b7:eb:af:5f:28:4f:76:a1:a1:a6:a7:32:95:
89:cc:92:c9:6a:67:f8:6c:5c:b5:ae:8f:72:26:a3:d6:93:a2:
0e:1f:23:38:62:ba:e4:0a:67:7a:92:af:34:05:77:50:8e:d2:
60:83:56:67:8a:41:f9:5c:83:11:1e:35:1f:d7:fb:6b:7c:07:
91:79:70:24:08:99:f1:1d:50:7b:f0:7c:62:63:84:cd:33:f6:
d3:8c:9a:0e:ec:ea:20:e1:71:6e:c1:4c:bd:09:65:8b:5b:9a:
f1:60:c7:19:9a:35:d8:50:4d:7b:f1:be:50:1e:62:4e:bd:b0:
e7:0e:32:54:7f:88:9d:6f:87:33:f0:79:5e:cc:66:da:4c:25:
a0:f6:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:56 2025 by rpki-client