Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/UOCQKduqblhh9o-f86FvQfKHV0c.roa
File: UOCQKduqblhh9o-f86FvQfKHV0c.roa (raw, json)
Hash identifier: TOGEgHCgJiNTtsiSlbwmeQrH1soAdbmWm7mmYeknIE0=
Subject key identifier: 50:E0:90:29:DB:AA:6E:58:61:F6:8F:9F:F3:A1:6F:41:F2:87:57:47
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01942748487A0AAC596BC04BE685703AAF55
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/UOCQKduqblhh9o-f86FvQfKHV0c.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:5a46::/32 maxlen: 32
2a12:1541::/32 maxlen: 32
2a12:7301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:48:7a:0a:ac:59:6b:c0:4b:e6:85:70:3a:af:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50e09029dbaa6e5861f68f9ff3a16f41f2875747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:fb:2c:f2:82:29:58:e7:0c:e4:2d:ec:53:
7d:a3:f5:f0:2a:e2:3e:e6:93:b6:1e:75:41:67:31:
75:06:76:10:3e:88:8a:08:11:c4:36:ca:b9:8d:43:
94:fa:88:21:38:c1:35:c5:3f:44:c9:a4:52:bf:d5:
83:56:9e:82:0a:75:56:34:9b:2f:7f:62:7c:8b:28:
38:2e:7f:47:da:c5:77:95:ed:ca:ea:52:54:b7:59:
ad:b4:0d:f6:83:7a:70:9c:89:b9:f1:01:b1:80:80:
5b:b8:fb:0c:76:9c:25:db:a1:f2:ba:a4:8c:9f:49:
2a:3a:1f:8b:9d:30:07:59:26:f6:bd:4e:26:78:0a:
b5:71:5f:80:f9:31:ec:8a:df:76:11:99:6c:dd:07:
c8:fe:fb:2e:96:d6:05:12:81:d4:7b:e8:85:0c:36:
83:7f:5f:1e:76:1e:4c:31:89:a3:e7:29:e2:bf:df:
4a:0b:a4:2f:e0:68:d3:3e:04:88:0b:b6:99:a4:af:
f7:21:d3:90:b5:5b:26:ce:bd:b6:41:62:ea:fc:8a:
3c:e4:4b:3d:9c:7f:02:05:d7:6f:ba:13:4f:d8:af:
54:df:49:07:c2:ac:2b:62:c9:22:92:a8:8e:18:83:
37:ac:37:23:d1:4b:c7:35:56:cc:b5:31:ac:32:80:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:90:29:DB:AA:6E:58:61:F6:8F:9F:F3:A1:6F:41:F2:87:57:47
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/UOCQKduqblhh9o-f86FvQfKHV0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a46::/32
2a12:1541::/32
2a12:7301::/32
Signature Algorithm: sha256WithRSAEncryption
47:43:71:64:b9:78:fe:9c:51:41:1c:68:1a:17:d0:38:43:da:
c3:d4:2d:34:43:67:8c:78:da:42:2c:8e:2c:4d:9e:2c:f2:59:
3a:59:28:88:74:76:e7:2a:73:c9:5e:bb:f4:6a:46:3d:8b:2b:
8a:9f:44:b6:43:d7:61:fc:eb:f4:4f:b7:8d:d3:fd:df:d6:ce:
4e:74:90:1e:27:31:d0:40:7a:7d:bc:2c:58:dd:32:ed:f4:3a:
e0:eb:6b:b3:eb:9a:7e:9a:b6:69:1d:d6:6c:67:2d:7a:2b:64:
b0:66:6e:2a:c2:c8:56:20:bd:0f:84:3e:7c:2d:95:18:96:5f:
e1:d7:e7:61:55:b0:2c:2c:e4:cf:ab:3b:08:d6:f7:5b:18:81:
c2:e5:c8:ae:54:6f:3f:89:ee:e6:29:6a:c3:59:4d:25:dc:43:
ef:98:cb:a4:91:ee:cf:a5:5e:da:f4:ea:a9:c4:3b:45:e6:5e:
1f:75:cb:b6:75:8d:c3:8d:79:d9:9e:6c:c9:31:e5:1a:a1:78:
d0:5f:d1:8c:87:3c:6f:ca:69:fb:1e:cc:70:9f:12:4a:4e:ee:
c4:47:8f:a7:98:2c:45:07:92:56:61:3b:d4:c1:02:c0:97:0c:
d8:9d:13:03:af:fc:7f:08:94:21:52:58:73:ba:ad:b7:03:90:
a2:79:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:57 2025 by rpki-client