Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Uodpw6qU_qFxcg_52Hv2jDO0p7E.roa
File: Uodpw6qU_qFxcg_52Hv2jDO0p7E.roa (raw, json)
Hash identifier: 6vOS92DIx2bZApg7RN81XNB6jrEREumsQY3iqtM8zGI=
Subject key identifier: 52:87:69:C3:AA:94:FE:A1:71:72:0F:F9:D8:7B:F6:8C:33:B4:A7:B1
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 01946E4D4A466C869696E27FBDB043B94025
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Uodpw6qU_qFxcg_52Hv2jDO0p7E.roa
Signing time: Thu 16 Jan 2025 08:49:06 +0000
ROA not before: Thu 16 Jan 2025 08:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35491
IP address blocks: 2001:1a68:15::/48 maxlen: 48
2001:1a68:15::/64 maxlen: 64
2001:1a68:15:1::/64 maxlen: 64
2001:1a68:15:254::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:4d:4a:46:6c:86:96:96:e2:7f:bd:b0:43:b9:40:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 16 08:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=528769c3aa94fea171720ff9d87bf68c33b4a7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:37:2f:2f:07:35:bc:9f:23:c4:e9:4b:bb:
1c:e3:e9:56:05:45:41:a1:1c:7e:f9:77:70:8a:23:
21:8e:5b:7a:bb:b2:8b:81:8b:00:fe:62:28:c5:00:
46:b9:01:3a:3c:f7:75:77:9f:f3:1a:27:75:22:86:
05:ec:be:00:aa:f2:3f:ef:9f:e1:43:d0:c1:e6:77:
ee:db:d3:30:b9:ba:33:89:42:9b:5c:d9:fb:85:9b:
bd:f6:0f:cb:f4:fa:ff:f7:68:96:ae:cd:20:89:c2:
d4:fb:40:69:8b:8c:0f:7a:7e:b2:06:fd:db:bc:1f:
f9:37:56:47:d5:80:c2:22:b2:0c:18:34:ca:ec:c8:
41:86:75:36:7c:23:76:02:60:a7:0c:26:e4:e3:a6:
2e:7c:44:97:8e:34:aa:b4:c6:39:3d:13:ed:bc:11:
78:98:a7:94:8f:46:d1:48:09:9c:64:80:c6:87:13:
5b:be:82:34:d7:45:bb:02:43:9b:1d:f5:ec:19:e4:
8b:35:f2:45:39:f6:25:6a:74:23:d9:22:e2:37:1f:
ef:03:bc:99:a9:9c:55:50:89:6e:35:67:72:18:d2:
fc:6d:43:1e:09:d1:77:11:a4:8f:6d:03:d2:48:20:
55:4f:26:1e:36:f7:d1:6b:aa:da:1d:b7:fb:06:a5:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:69:C3:AA:94:FE:A1:71:72:0F:F9:D8:7B:F6:8C:33:B4:A7:B1
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Uodpw6qU_qFxcg_52Hv2jDO0p7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1a68:15::/48
Signature Algorithm: sha256WithRSAEncryption
47:97:05:43:e3:e7:6b:b5:38:ad:0f:43:b5:35:e0:48:0a:3d:
43:27:4e:35:79:d7:30:0b:06:3d:09:19:94:50:66:fc:98:d7:
de:d8:29:bc:b4:86:a3:5b:6c:c3:6b:f0:bf:7a:24:9c:5e:52:
46:18:47:bc:61:93:eb:d4:06:23:0c:79:8d:53:e8:0b:23:93:
5f:68:8a:ed:06:18:88:b5:8e:be:03:68:3b:32:f5:6e:25:a6:
84:0f:cc:4b:c4:4b:41:55:e5:60:05:e8:25:20:a1:ca:dd:9b:
90:bd:54:b4:99:2a:93:30:6c:2f:ec:05:35:72:e9:a1:6c:04:
0d:85:5e:29:8c:3d:46:ad:38:6d:6c:cc:2e:79:61:26:92:9e:
33:ef:d1:7e:bd:26:d1:8e:d9:51:9f:d3:57:17:63:c1:ba:4d:
9d:77:fc:bf:61:2e:53:b4:b3:8a:a0:c3:82:3a:bf:76:32:71:
c0:71:63:a8:b6:08:98:96:18:f9:22:d9:4c:fa:10:ce:03:30:
89:71:4d:b5:b4:6f:9a:d3:4f:70:34:c4:66:90:f2:c1:06:66:
45:b2:c9:60:f8:58:58:49:9b:51:8c:d6:dc:41:94:bf:eb:a0:
a9:bd:d5:a4:a0:fb:8b:1b:ce:3e:4a:b0:f9:24:1e:bf:b0:ef:
29:1f:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:15 2025 by rpki-client