Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/UNh6P6o5iukKyngJ923OKln6euE.roa
File: UNh6P6o5iukKyngJ923OKln6euE.roa (raw, json)
Hash identifier: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=
Subject key identifier: 50:D8:7A:3F:AA:39:8A:E9:0A:CA:78:09:F7:6D:CE:2A:59:FA:7A:E1
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA02384D8673ECE04358A49D1E87DD
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/UNh6P6o5iukKyngJ923OKln6euE.roa
Signing time: Thu 02 Jan 2025 11:50:09 +0000
ROA not before: Thu 02 Jan 2025 11:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59692
IP address blocks: 2a03:f86:2::/48 maxlen: 48
2a03:f86:3::/48 maxlen: 48
2a03:f86:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:02:38:4d:86:73:ec:e0:43:58:a4:9d:1e:87:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50d87a3faa398ae90aca7809f76dce2a59fa7ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:5b:db:78:cb:2c:75:45:01:10:f2:42:07:
fb:6d:2a:15:3a:7b:8a:50:58:03:a7:33:76:4c:ce:
a9:18:d5:9a:d6:ff:5a:c1:a4:31:eb:fb:eb:42:a0:
73:29:d9:40:11:22:86:e3:ea:cb:22:31:da:99:4b:
1b:ed:34:dd:b2:d8:f8:e2:c0:21:52:3f:a0:29:27:
b9:3d:bb:1c:a5:f3:c6:9e:ef:5d:ac:62:4a:4a:1e:
32:ae:b4:02:1c:75:b8:cc:06:7d:59:ba:69:17:0e:
6f:22:32:19:88:da:18:05:fd:5f:4c:3d:29:79:74:
b1:28:2b:d0:f8:5a:b7:54:bb:e6:17:5a:81:08:ab:
e8:28:64:81:de:1d:5c:70:ef:d5:08:1d:89:ce:46:
59:e0:bf:8a:66:13:c9:71:3f:18:51:89:01:99:44:
2f:b3:68:70:0f:60:2c:05:8e:66:7a:3b:df:7d:9a:
0e:b7:67:92:be:da:f0:b4:4c:0e:a4:b9:b5:80:23:
78:07:c2:f7:10:5b:7b:a5:75:a8:c6:16:38:25:9a:
47:87:18:44:64:4b:43:4f:44:d6:df:79:f0:62:a3:
f7:db:1e:ff:43:92:c5:5f:7e:08:75:c5:df:0b:21:
a5:1d:f4:b9:bd:1d:46:1b:c9:4a:88:55:dd:32:09:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D8:7A:3F:AA:39:8A:E9:0A:CA:78:09:F7:6D:CE:2A:59:FA:7A:E1
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/UNh6P6o5iukKyngJ923OKln6euE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f86:2::-2a03:f86:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:e2:dd:96:8b:67:3c:ca:67:d2:ad:68:52:d5:79:76:d8:0a:
d5:b7:b1:1a:77:cd:e5:b3:1b:02:32:8f:50:b1:b8:ad:8c:f6:
9f:dc:ad:75:ef:52:cb:c5:b5:7b:a4:84:c4:36:10:17:2d:a5:
6f:de:49:f9:e0:8f:01:90:5e:ce:88:f2:6a:84:2f:77:7c:ea:
7e:8c:44:c1:58:26:17:fd:e7:cf:e4:4f:38:dd:d3:cd:34:91:
47:ff:21:de:94:d0:47:ee:6b:b8:65:75:05:82:9a:7f:de:92:
18:51:d0:1e:f8:8a:31:5c:1f:c5:9d:b0:f5:3f:37:39:0b:34:
aa:67:04:99:5c:75:71:bf:a7:62:f4:9a:34:5d:57:d2:2a:56:
16:6b:3c:01:ff:be:4b:05:74:aa:fa:b8:e5:70:b1:fe:52:b5:
09:d2:fd:75:8e:2a:48:6c:de:31:95:44:80:39:93:75:05:f8:
b3:2a:36:69:d5:94:de:ee:8a:d2:48:0a:c3:4e:66:fb:a1:26:
c3:43:ef:2f:76:67:84:47:90:70:47:ee:02:91:01:54:da:0e:
e0:83:7f:fb:02:02:10:35:72:a7:c6:c2:57:a8:fa:3a:35:6f:
41:c5:dc:af:74:d5:bf:d5:ae:5e:e8:90:e6:5d:2b:c2:d8:90:
98:85:fb:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:22:49 2025 by rpki-client