Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UpxvyaO1w4UW5ThzZNiK11i8Iec.roa
File: UpxvyaO1w4UW5ThzZNiK11i8Iec.roa (raw, json)
Hash identifier: ts6x4xf+obI23cPBJb6wwaavJqR740WuylL0f/ZOTmA=
Subject key identifier: 52:9C:6F:C9:A3:B5:C3:85:16:E5:38:73:64:D8:8A:D7:58:BC:21:E7
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0194252199120351B3667297B2FE718132A8
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UpxvyaO1w4UW5ThzZNiK11i8Iec.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44324
IP address blocks: 2a13:a5c3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:99:12:03:51:b3:66:72:97:b2:fe:71:81:32:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=529c6fc9a3b5c38516e5387364d88ad758bc21e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:ae:d8:c5:5f:8e:2e:d6:f0:99:83:2c:c7:
5a:b6:32:b9:77:e5:3b:67:48:41:6d:de:41:33:7e:
87:4d:23:dc:3a:7c:af:a0:cf:5d:64:40:6b:89:4a:
f4:3e:ea:91:f8:fa:21:06:85:86:82:ac:46:f9:4b:
65:06:19:1d:b1:69:3e:50:bd:e3:d6:99:87:a0:6b:
14:7f:88:be:e8:b8:bf:d8:7f:ca:b5:5b:bc:61:10:
c3:15:d6:4d:f0:22:b3:42:36:e4:28:2a:80:a6:5f:
eb:ae:90:4a:99:da:1a:5e:39:b5:a6:ce:98:9b:bd:
08:8f:ad:d9:83:6a:a2:eb:e4:cd:d1:47:8e:d1:7a:
82:8e:32:8e:e1:b7:48:19:e5:d4:9c:db:ab:4f:19:
eb:dc:9c:53:73:3b:65:68:e7:36:c0:d5:d0:63:0d:
f5:4c:75:46:05:32:72:df:ee:17:0e:a9:32:69:7e:
05:c0:21:e3:51:60:93:1c:00:16:ed:e1:5f:ee:58:
3e:ec:29:0d:14:f1:88:70:b0:7c:b3:8c:de:90:48:
a1:b2:17:88:ba:e7:b1:68:1e:46:11:48:a6:6a:9b:
88:a5:8c:3b:97:e2:99:3a:55:34:04:6f:2f:98:34:
8d:91:9e:89:e4:76:d9:86:33:68:59:8d:d9:bb:e4:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:6F:C9:A3:B5:C3:85:16:E5:38:73:64:D8:8A:D7:58:BC:21:E7
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UpxvyaO1w4UW5ThzZNiK11i8Iec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3::/32
Signature Algorithm: sha256WithRSAEncryption
47:78:b6:8f:59:93:23:bb:62:00:28:67:f4:6c:60:ca:c4:76:
4e:fe:fc:54:d4:2d:67:a2:50:88:76:35:f3:b9:c6:89:ad:9e:
7c:cf:26:1d:67:95:8d:84:a0:4e:ee:d7:57:50:7a:53:97:f0:
d9:92:23:14:25:ae:58:3a:e5:db:b1:e5:b0:43:09:4f:6c:76:
21:6f:c7:27:4d:83:d2:9c:c5:fe:52:93:e6:d4:e1:c8:0f:34:
1f:9b:c4:ef:ed:af:1b:2b:58:10:62:92:36:f4:d9:4d:79:9c:
eb:2e:76:8e:c8:de:20:06:01:86:90:be:64:e2:b1:29:07:9c:
d3:ad:f8:f0:c6:b2:0c:b6:cd:fa:e4:39:11:5b:3a:79:ff:7c:
ff:56:2f:8b:d7:0b:ac:22:a8:a2:50:e1:65:78:cb:94:eb:b0:
5c:24:d8:b4:5d:12:9f:68:50:d1:26:07:49:e4:5e:ff:51:0c:
9f:be:0d:2c:06:4d:f8:f8:a7:66:3c:6f:02:54:5f:8e:62:b0:
4e:ff:4f:20:32:d5:19:7d:94:8e:df:08:3d:62:75:c1:24:21:
53:25:dd:e0:e9:4c:e7:de:9b:d7:12:09:0d:27:73:e2:42:59:
82:bf:44:86:f7:a8:47:64:11:8e:38:2a:2d:45:d1:c2:d2:28:
62:8a:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:47 2025 by rpki-client