Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa
File: Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa (raw, json)
Hash identifier: tk3tIBSeQBab5qYJNuQXuIHm0Fnq+pfGnO25obHRvCc=
Subject key identifier: 53:2E:54:06:51:B5:C5:57:4D:9C:A6:D9:EF:1F:A8:EB:43:3B:4D:55
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A53A14B09787EA39BD464AC476A3
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214674
IP address blocks: 2a13:a5c7:2200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a5:3a:14:b0:97:87:ea:39:bd:46:4a:c4:76:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=532e540651b5c5574d9ca6d9ef1fa8eb433b4d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:6d:fc:ca:2a:e9:f5:76:fc:bd:57:ab:7c:
6f:d1:92:06:60:7a:0a:f2:bb:50:d8:5c:34:0d:d0:
fc:01:07:ec:27:1f:e9:6a:e4:92:c0:06:6f:73:93:
fd:03:89:a5:62:de:b2:ce:e9:0a:5b:3b:f6:1b:e0:
04:30:12:86:f0:f0:b2:af:43:b1:7c:fd:bd:ed:3d:
60:ee:64:7e:30:10:a8:c4:ac:fa:ca:e3:70:a2:33:
da:52:2c:6c:14:2c:15:f5:f0:1b:fb:c6:18:a6:75:
a7:45:9b:9b:8e:5e:12:ea:67:b4:c2:a4:00:55:ec:
8b:f4:d7:8d:72:0e:01:b1:e0:43:d7:21:7d:7a:c0:
93:53:64:8d:6d:79:ca:dc:a3:d1:1b:fe:a1:bd:e3:
37:af:61:06:0f:bd:12:b5:70:8f:f6:6f:33:7f:82:
c8:bc:ba:d7:99:1f:46:a0:d5:4f:18:04:6e:6c:28:
ca:2e:15:cc:bd:0b:74:c4:1f:61:f5:01:98:69:59:
c7:f9:4a:48:b2:f3:17:0a:70:a4:42:d0:60:9f:71:
59:74:b7:11:81:8f:d7:a6:15:1a:3f:1e:34:76:19:
59:b5:85:80:f4:cd:ea:ac:5b:13:a0:f6:d0:61:f0:
85:45:2f:cf:87:c5:08:82:e6:e7:b3:34:e8:da:b0:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:54:06:51:B5:C5:57:4D:9C:A6:D9:EF:1F:A8:EB:43:3B:4D:55
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Uy5UBlG1xVdNnKbZ7x-o60M7TVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2200::/40
Signature Algorithm: sha256WithRSAEncryption
8e:7d:fa:86:80:46:c0:bd:95:35:6c:3e:3a:07:1a:4c:99:30:
cf:4e:f9:d6:8c:d4:54:9b:70:e4:57:b9:f7:10:83:3d:c1:4a:
df:77:ee:d6:7b:57:aa:7e:e2:eb:a2:67:8c:91:58:8e:0a:39:
04:21:92:2d:e9:c2:fc:4a:fd:f9:a9:13:39:77:cc:4d:a2:2d:
0a:05:5a:cd:7d:a8:ef:70:1a:72:f8:90:72:80:a9:5d:fb:6e:
51:88:95:07:e8:04:26:0e:af:50:1a:37:5f:b0:c5:89:e7:29:
ea:66:49:74:f9:41:82:c4:8b:ba:e2:c0:29:f6:a7:96:a4:b2:
b1:30:11:ca:54:b6:80:fb:45:55:21:09:a7:d2:c4:56:9f:d9:
b8:31:b2:cf:b3:46:a3:09:a5:3b:1b:63:ed:d8:2b:f2:36:78:
00:fc:2c:26:f8:fa:51:9b:4a:10:b9:e1:78:4a:2d:88:cf:87:
a8:c2:21:31:31:d2:62:c0:10:2a:ee:be:8c:0d:74:1c:96:c1:
c9:77:4d:47:cf:77:89:89:53:41:99:7d:23:e7:7c:db:92:d8:
53:16:70:1d:6a:40:e7:66:98:21:84:a3:86:a7:1b:7f:9e:99:
09:2e:fa:aa:7a:de:2f:f7:7a:a9:b3:6b:e8:a0:a3:50:c0:76:
ee:d8:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:51 2025 by rpki-client