Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/nububswUFWNKZFUv1-WT-nusbw8.roa
File: nububswUFWNKZFUv1-WT-nusbw8.roa (raw, json)
Hash identifier: vJnbRRzz2QWrTYEfK7eqJvsQka1cyruMLjOKXSilJ8Q=
Subject key identifier: 9E:E6:EE:6E:CC:14:15:63:4A:64:55:2F:D7:E5:93:FA:7B:AC:6F:0F
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0194252199C147FE8969DDC3F248B1D3BD01
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/nububswUFWNKZFUv1-WT-nusbw8.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47778
IP address blocks: 2a13:a5c7:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:99:c1:47:fe:89:69:dd:c3:f2:48:b1:d3:bd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee6ee6ecc1415634a64552fd7e593fa7bac6f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:b3:fa:5c:b5:bc:1a:4b:54:e1:a4:65:9b:
97:74:28:be:0f:d9:e1:a4:be:99:c6:72:a9:d7:f8:
b8:46:b4:1d:e2:84:bb:86:fa:ae:b9:4d:9a:6f:08:
42:d3:7e:6f:7c:3d:1f:b1:55:81:90:d9:d5:6a:b0:
b5:10:0a:18:e7:1c:81:a1:d4:ab:f9:3b:8e:6d:fc:
51:e6:86:13:aa:36:ce:c2:70:7a:83:c3:80:7a:7e:
93:e7:73:4d:95:4d:64:c0:c2:b8:7c:68:e3:36:27:
7a:b4:90:82:ee:85:99:6a:7e:b5:39:b7:65:0d:67:
d0:c4:3c:29:de:5f:80:c0:ec:43:35:fa:c4:98:42:
82:f4:bd:48:b1:d3:96:00:c4:ab:e4:ec:ec:83:7b:
0b:31:c7:30:fb:5a:2d:cc:59:12:fe:4d:f1:95:2d:
69:06:75:d9:46:4f:25:d8:22:ac:1a:05:d4:68:0c:
f0:55:d1:98:ca:0e:b7:ea:1c:87:66:61:d2:a1:9c:
67:71:e2:1a:1a:e0:f5:f4:37:c2:c1:1b:3c:df:01:
5b:77:38:64:e0:c7:62:2b:62:db:e6:6b:31:71:14:
be:2a:67:18:73:3e:24:ed:0f:e8:d6:4d:fc:32:4f:
c4:63:9f:e0:f7:7c:68:27:b5:99:a5:6b:c4:b1:e9:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:EE:6E:CC:14:15:63:4A:64:55:2F:D7:E5:93:FA:7B:AC:6F:0F
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/nububswUFWNKZFUv1-WT-nusbw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1000::/40
Signature Algorithm: sha256WithRSAEncryption
26:f7:40:81:24:d9:c2:bf:bb:45:7d:8c:e8:3a:bb:04:21:d5:
84:6b:14:92:01:b2:26:f0:53:94:e5:40:74:f4:88:f9:24:18:
bb:74:77:ea:3a:f9:44:73:03:b5:12:9d:ca:46:4f:6a:e1:55:
42:6f:28:5b:86:a8:3f:51:0d:9a:40:ca:9a:4d:83:d0:d5:5c:
a4:97:01:96:5c:10:54:25:02:e2:65:d9:2a:30:d2:b5:e6:94:
4c:0c:b9:f5:8a:c3:d9:d9:f9:4b:09:48:7b:e0:95:0d:1f:4c:
cf:4c:b0:f0:26:a4:08:7a:b3:2f:6c:1d:d4:e3:bb:52:da:41:
b3:b6:03:34:1b:95:04:1b:14:f7:ac:85:86:ea:e9:a7:d2:96:
b1:d7:91:a2:c3:ea:42:c3:15:73:15:b0:90:80:12:7d:54:92:
0e:a3:eb:b8:1f:8a:31:8f:05:01:39:de:1b:80:ef:59:42:29:
7f:03:94:e5:0e:f7:6c:ce:d1:e6:58:83:a3:07:37:1f:e4:54:
b9:03:f8:26:12:f9:25:9f:04:59:21:4d:47:af:6f:8a:81:e4:
b3:9f:d9:0c:38:f9:35:f2:d8:4c:74:c1:3a:a7:fa:05:ae:e2:
39:ce:3e:98:04:18:59:ed:f4:2a:02:3d:1b:8e:51:60:c0:60:
2c:e0:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:23 2025 by rpki-client