Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa
File: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (raw, json)
Hash identifier: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=
Subject key identifier: BA:22:42:3D:FD:D9:62:D7:C2:F0:08:B9:F5:71:70:FD:B1:73:51:7B
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0194244591B9B1573B204E63A218E8409BF3
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197438
IP address blocks: 2a05:4140:2200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:91:b9:b1:57:3b:20:4e:63:a2:18:e8:40:9b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba22423dfdd962d7c2f008b9f57170fdb173517b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:de:9f:4b:f0:8a:33:d4:a2:2f:d2:4f:9e:
df:8c:a8:ef:88:03:a7:94:7e:2f:03:2e:b4:64:46:
04:15:85:68:42:2c:09:16:69:74:dc:1b:f8:25:56:
cf:48:d9:bf:fe:fe:6b:dd:97:3e:92:a0:15:4f:03:
94:dc:ec:2e:0d:43:a8:5b:4a:09:8c:ef:80:a2:d0:
2e:6b:ab:8b:59:e3:6d:b9:53:c5:1f:3c:b1:26:d1:
9e:36:77:88:42:b7:a6:c3:f1:4f:c9:89:82:35:4f:
a7:0c:01:9d:ba:38:79:d0:33:ef:dd:5f:31:28:95:
cc:3c:a3:69:09:a4:02:31:e5:7c:8b:89:0e:85:bf:
3b:f2:8b:dd:45:1a:fa:13:78:cb:3b:96:ba:75:46:
42:74:22:17:77:b4:2c:da:20:2d:2a:0d:95:fc:4c:
85:b9:a2:00:1a:55:15:94:9e:ef:cc:75:0a:8d:54:
0a:b5:da:8d:50:3b:da:c9:d1:9c:e5:c8:69:44:79:
4a:09:56:e4:fb:81:cc:45:7f:77:fe:18:80:ac:18:
48:e8:76:ea:0b:67:49:4b:47:04:0c:a9:17:fc:d2:
88:67:aa:26:5c:8f:84:50:d4:52:6f:79:b2:ca:15:
f6:00:6a:ef:45:29:a4:61:20:64:8d:43:fd:37:2a:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:42:3D:FD:D9:62:D7:C2:F0:08:B9:F5:71:70:FD:B1:73:51:7B
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:2200::/40
Signature Algorithm: sha256WithRSAEncryption
3a:ee:42:b8:66:af:aa:43:5e:ca:63:84:f8:8b:20:a7:3c:d9:
f1:92:24:2c:e3:57:ca:d3:c5:27:fe:ec:ee:d7:a1:0b:de:dc:
0c:74:67:4b:58:e2:ea:cf:d9:82:9b:e2:3a:9b:e4:e4:d0:87:
d5:0e:22:74:46:0f:68:f4:6f:f3:fc:c5:6d:22:94:15:17:35:
da:e1:be:35:59:57:55:26:d4:af:12:be:a1:8f:06:51:23:a1:
4e:46:57:f5:75:62:8a:77:92:f7:35:63:c6:a1:94:f7:99:20:
cf:67:0c:cb:b3:e0:35:8c:a7:71:b0:56:78:9f:44:04:fd:f2:
0e:cc:30:d2:b1:d1:aa:b7:c0:67:db:68:87:1a:f2:96:de:d3:
f8:e0:01:c1:39:db:b0:a1:20:bb:2a:ed:9c:87:8a:5a:43:65:
f2:b9:20:6b:75:35:c7:a7:92:73:da:c2:11:67:9f:1a:63:66:
86:ba:8a:c7:ef:30:14:35:2a:dd:d5:04:2d:75:29:d8:c7:ba:
8c:bd:f9:16:d6:be:59:4c:45:29:b2:af:d4:96:10:cf:9c:ae:
46:30:26:1c:14:1a:2b:ca:ce:cb:8f:98:5a:23:4b:a4:90:9c:
59:c4:33:c3:e1:0a:3e:fe:31:84:7e:fd:ab:da:ae:32:96:3f:
5c:4d:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:56 2025 by rpki-client