Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/Udcyh9xzQW1YB7w7NIcIIjVCEwU.roa
File: Udcyh9xzQW1YB7w7NIcIIjVCEwU.roa (raw, json)
Hash identifier: JpPJi+U/jDISuz3de3t+ru8IfJCRhRiHKzxnkaOFnDY=
Subject key identifier: 51:D7:32:87:DC:73:41:6D:58:07:BC:3B:34:87:08:22:35:42:13:05
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07E0F9D8
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/Udcyh9xzQW1YB7w7NIcIIjVCEwU.roa
Signing time: Sat 01 Jan 2022 01:55:51 +0000
ROA not before: Sat 01 Jan 2022 01:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207616
IP address blocks: 2a04:ff00:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132184536 (0x7e0f9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51d73287dc73416d5807bc3b3487082235421305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:83:c5:af:33:c3:7d:e7:83:14:41:8f:32:
42:78:10:e6:9c:37:79:ff:4e:44:7a:c4:89:12:8f:
5a:f1:80:65:1e:65:5b:bc:5e:d6:5b:76:2b:95:2e:
3b:1e:a0:ed:6b:8b:59:25:e2:5c:10:06:76:82:f7:
3b:ea:4c:dc:62:d4:43:62:9e:2b:32:97:c3:8d:61:
75:f2:a7:26:00:9e:48:79:f3:5a:20:d7:ff:26:90:
01:79:17:66:3d:b9:af:ae:c5:d9:66:82:d0:ee:0c:
97:3a:35:05:a0:a1:da:90:53:59:c5:37:06:3a:25:
93:6a:b8:96:0c:21:4e:e3:d1:9b:33:b7:67:9a:19:
66:05:9c:43:8c:3b:0a:0f:a9:13:2c:a1:e6:8b:ed:
a8:d5:57:c6:42:2d:12:ce:d6:6c:eb:2b:0d:6a:72:
c1:f9:50:52:c0:e7:02:67:43:3f:9e:45:37:c2:6c:
1f:42:c9:6a:6c:1a:06:8f:98:f8:95:5b:e6:a7:bf:
3c:da:d7:97:03:56:3d:ea:02:d5:24:14:60:e1:6c:
02:0b:63:84:cf:c5:f1:69:e6:70:6a:f3:94:06:d6:
78:4d:8c:fa:1a:78:e1:dd:2a:e7:e8:48:2b:5d:0c:
d3:2b:d7:0d:05:ee:09:9f:3d:48:36:ce:a4:dd:3d:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:32:87:DC:73:41:6D:58:07:BC:3B:34:87:08:22:35:42:13:05
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/Udcyh9xzQW1YB7w7NIcIIjVCEwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:101::/48
Signature Algorithm: sha256WithRSAEncryption
6c:91:1f:93:0b:91:3e:40:08:74:be:d6:bb:09:c9:d6:b6:03:
1e:32:1e:05:f8:92:d8:c7:aa:51:c9:2e:ed:44:de:15:a7:75:
a2:6a:29:ac:e9:c0:9d:d0:af:48:a6:aa:a0:bf:55:63:f1:a8:
88:f9:72:95:f8:19:a3:8f:9c:9c:21:01:19:8a:c8:81:31:11:
75:c0:d7:dd:51:48:d9:ee:5f:24:5b:77:9c:70:43:3c:79:c8:
9f:98:18:bb:93:09:83:b7:ae:0a:05:83:22:2f:88:df:57:bc:
d9:56:60:32:3f:c4:ae:2e:71:4f:93:63:27:7e:b2:4a:fc:2a:
0a:c8:77:a5:cb:b6:b4:ea:cf:52:67:36:4d:a6:dc:18:ac:ba:
3d:a5:cf:33:ff:de:80:ff:d0:40:be:34:8c:41:b2:90:d0:36:
8c:0e:0f:1a:ec:cb:5e:bc:58:a3:8f:1a:6c:b9:a5:98:b9:7a:
98:62:fe:a4:05:1a:99:49:5c:0b:6e:8c:f1:16:28:70:09:b3:
38:22:7b:65:0a:45:ce:8b:31:20:e7:87:df:de:75:c0:86:b5:
1f:69:e0:39:d0:9d:25:bf:c7:7c:f1:25:1d:0e:be:37:0e:7a:
58:02:4f:c6:56:e8:7d:d7:26:4d:94:2e:f4:5e:c8:1b:b9:98:
62:53:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:14 2025 by rpki-client