Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/UhyDJklfvrsNdw-LpAkk4qwIOhc.roa
File: UhyDJklfvrsNdw-LpAkk4qwIOhc.roa (raw, json)
Hash identifier: qIQnMnOzpVCK/ey1S/UbasVg7e2c/nOuDZdHMV9uWCg=
Subject key identifier: 52:1C:83:26:49:5F:BE:BB:0D:77:0F:8B:A4:09:24:E2:AC:08:3A:17
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 0194266B68FBAB3D558AC61362808C9C4FA0
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/UhyDJklfvrsNdw-LpAkk4qwIOhc.roa
Signing time: Thu 02 Jan 2025 09:49:20 +0000
ROA not before: Thu 02 Jan 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202525
IP address blocks: 2a13:d040::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d046:fffc::/48 maxlen: 48
2a13:d046:fffd::/48 maxlen: 48
2a13:d046:fffe::/48 maxlen: 48
2a13:d046:ffff::/48 maxlen: 48
2a13:d047::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:68:fb:ab:3d:55:8a:c6:13:62:80:8c:9c:4f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521c8326495fbebb0d770f8ba40924e2ac083a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:1a:20:99:be:26:45:41:a2:73:ae:b4:c0:
63:89:a8:fe:e1:7a:a5:e1:3a:6a:dc:ec:7d:5d:5d:
c1:84:45:7d:3f:31:52:20:87:45:4e:14:b8:58:dc:
e3:e7:ee:30:16:02:b3:27:89:12:a4:7b:e5:36:e9:
f3:ae:f2:5b:ab:ee:7a:2b:ed:2a:9f:a4:38:9f:1b:
34:20:49:f4:82:58:c8:6e:3d:02:e7:ab:37:18:5c:
1d:fc:99:00:cf:64:c0:fc:09:89:a3:46:db:5a:fd:
b9:ff:b2:83:6f:3a:04:22:26:bf:81:0c:9a:e8:b0:
59:3b:e5:3a:09:50:a0:30:ef:b6:fb:08:c8:dc:d8:
3c:fa:05:9b:a9:f0:ad:97:bd:83:75:9b:08:b1:4b:
0b:03:fe:62:e5:ab:db:90:b7:eb:93:05:61:89:00:
91:b4:ae:73:f5:17:eb:45:68:5d:e9:56:18:06:c9:
74:4f:59:4c:bd:81:61:7b:58:6e:75:31:37:9c:02:
2c:cc:7d:c5:e8:f9:cc:ff:75:7c:d4:bb:de:e5:1e:
46:52:65:14:e3:0a:09:a6:dd:67:ce:9a:a5:6b:e1:
1d:bc:8b:e2:05:e3:58:00:6b:a1:b4:36:f6:e6:91:
a8:6c:25:02:10:67:e9:de:32:96:2e:bd:34:5f:fd:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:83:26:49:5F:BE:BB:0D:77:0F:8B:A4:09:24:E2:AC:08:3A:17
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/UhyDJklfvrsNdw-LpAkk4qwIOhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040::/48
2a13:d040:2::/47
2a13:d046:fffc::-2a13:d047:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:8e:56:fc:8b:fc:9e:dc:fa:c1:ff:4b:64:0a:1d:95:ab:56:
45:b1:f6:10:de:b5:37:eb:85:9b:c2:79:16:36:0b:d2:8d:fe:
f1:75:d9:cb:0b:fa:f7:7e:b5:85:ba:aa:fa:5b:92:8a:a1:54:
94:7b:16:c4:d8:7d:a3:48:8f:ac:87:24:d6:4f:75:52:0b:4c:
17:5f:c0:27:f6:19:65:e1:d7:4c:d7:23:44:0f:c0:c0:87:eb:
6e:9a:e2:8f:7c:21:16:74:7f:54:bc:14:e1:cf:0f:69:3b:e4:
a0:a7:21:b5:de:ab:4c:1c:00:6d:32:b2:1f:e5:6d:10:05:e1:
0f:77:ec:8c:21:15:57:78:98:e0:22:b3:96:57:97:9f:74:ff:
f6:8b:9a:07:ce:5a:4a:a0:e0:95:ea:4b:9f:d5:1e:50:f8:36:
f1:99:bc:80:10:c0:a2:d8:b9:45:f5:df:c5:0e:43:ab:33:02:
f5:ba:96:1d:1b:14:5b:32:1f:75:05:16:77:3d:2c:75:44:d0:
95:a2:a3:f6:30:37:d4:66:70:4b:c1:5c:e1:f4:75:df:af:68:
4c:95:d9:03:72:dc:18:9b:94:8a:18:7d:0e:6d:38:b1:6b:ba:
c1:2e:25:fb:04:32:dd:b1:37:f3:1c:90:09:8a:7f:e4:83:e5:
e5:b6:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:30 2025 by rpki-client