Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa
File: UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa (raw, json)
Hash identifier: WJgBs9fu0EqbOTPPX09p13+s2t3z4+KFfuC6Uu5dHzg=
Subject key identifier: 50:C8:06:DF:09:B4:5B:06:9B:BD:BD:7C:05:68:01:3C:64:CB:51:F4
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219EE8580DA89066B62A55ADC87B92
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201386
IP address blocks: 2a13:a5c7:1300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:e8:58:0d:a8:90:66:b6:2a:55:ad:c8:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c806df09b45b069bbdbd7c0568013c64cb51f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:17:3c:f2:c9:c1:8d:cf:40:eb:ac:00:85:
2b:e5:70:73:cd:94:62:6a:2a:36:c6:a9:ee:4d:90:
56:1d:29:bc:69:3c:0b:76:85:a9:cd:5d:14:5d:ca:
2b:07:fd:e3:e0:b9:78:fb:55:0b:41:60:3a:45:1d:
76:46:ac:54:ce:13:27:19:9e:a9:67:10:1c:21:d1:
2d:07:67:b6:4d:f1:f6:7b:e4:7f:f8:6b:bd:db:f9:
84:24:56:13:90:e9:a2:73:5c:7b:0b:be:62:ab:b7:
ce:f0:ff:67:fb:16:78:7c:fd:cc:38:e9:a0:09:7b:
7d:29:74:ba:cc:f6:74:a3:10:86:d8:1f:01:f8:18:
9a:1f:86:e8:6d:2f:e8:49:51:98:0e:2d:b3:32:9f:
dd:87:11:ff:6d:bf:fc:74:5e:dc:cf:fc:a8:f9:f3:
d9:40:23:73:43:0d:85:87:a2:28:b0:5b:92:29:5c:
57:cf:9a:8e:d3:d4:6c:53:be:fe:b2:8b:72:f1:f5:
54:eb:6f:53:60:a1:c8:18:6f:8a:46:c0:c2:dc:17:
3c:7e:80:e6:3f:ce:64:4d:f2:f8:69:2e:f1:0c:c5:
61:d4:aa:d5:40:d2:1f:d6:60:53:d4:d9:e5:70:4d:
f9:51:24:fd:47:6c:8f:39:9d:bd:32:e5:8b:6d:64:
74:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:06:DF:09:B4:5B:06:9B:BD:BD:7C:05:68:01:3C:64:CB:51:F4
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UMgG3wm0Wwabvb18BWgBPGTLUfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1300::/40
Signature Algorithm: sha256WithRSAEncryption
b7:01:9a:94:97:35:9b:79:83:24:b8:6b:ce:31:46:7c:47:50:
2e:78:1c:9b:15:ae:69:81:ee:5d:e5:63:34:0c:cc:2e:07:fb:
db:15:ef:b3:c2:7a:9b:8c:69:2c:9c:6e:6b:c9:c7:68:32:3f:
27:75:df:42:8e:bc:f1:e7:2f:bb:c6:34:bb:a5:b7:44:25:cb:
df:72:41:3e:8b:df:6a:0f:ab:b3:79:df:0e:5a:92:ea:34:ed:
44:ea:42:73:df:a5:c1:3f:3a:7e:f8:85:44:5f:7a:83:52:4b:
d0:b4:ee:e4:20:f5:10:ef:43:42:8f:97:dc:df:6d:97:3b:14:
08:c2:3d:0c:4d:59:e6:14:eb:1c:ba:da:49:57:7e:33:2a:41:
ff:c3:21:c0:e2:00:71:fa:ea:f9:59:03:3f:2a:3e:b0:d0:dd:
11:4b:f1:25:30:46:62:53:d5:ab:70:ed:0a:a5:ab:e2:88:ca:
ea:a1:26:de:1b:81:11:db:d2:5c:b5:df:b7:24:cf:72:bb:e1:
41:ad:52:1f:7e:b0:c5:4c:c0:58:36:47:07:1e:69:34:c5:1c:
7f:9f:4a:05:f2:df:41:46:51:a8:7c:26:4a:4f:c2:e9:e9:60:
8a:8e:90:3b:24:c2:3b:b2:19:c6:7e:49:7d:ce:e5:98:a6:ea:
81:3b:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:56 2025 by rpki-client