Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/UDp62naPERYR3-_c7AAiDa5bgb0.roa
File: UDp62naPERYR3-_c7AAiDa5bgb0.roa (raw, json)
Hash identifier: +F+H8KEJkZZ4tfIEN5yCScrKO7+DlekPCaCaQk1YX7A=
Subject key identifier: 50:3A:7A:DA:76:8F:11:16:11:DF:EF:DC:EC:00:22:0D:AE:5B:81:BD
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 018C1B567B7D1A674894BAEE9F1487DED46B
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/UDp62naPERYR3-_c7AAiDa5bgb0.roa
Signing time: Wed 29 Nov 2023 13:48:21 +0000
ROA not before: Wed 29 Nov 2023 13:48:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 2a14:b80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:56:7b:7d:1a:67:48:94:ba:ee:9f:14:87:de:d4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Nov 29 13:48:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=503a7ada768f111611dfefdcec00220dae5b81bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:7a:09:8f:de:ed:5a:a9:8f:57:b0:ed:16:
1c:96:53:59:27:da:b5:6a:64:1c:82:fe:26:18:97:
af:df:3a:d1:5e:0c:39:8e:4b:c0:9c:2d:f2:aa:bb:
1a:57:ce:c8:04:ba:04:53:7c:c1:c5:cd:63:c6:5e:
de:ca:e0:aa:0d:85:03:11:67:85:1c:b5:52:3a:cf:
a4:f9:54:9a:5c:8c:34:76:0d:60:f9:1a:53:d0:c4:
e5:06:64:06:15:a2:27:ab:59:8f:43:53:96:52:16:
e3:fa:22:57:bc:98:d3:56:46:70:f8:66:32:9a:df:
39:bc:b6:9b:36:44:c2:19:10:5e:5a:8c:29:90:4a:
be:69:24:18:e0:cc:b8:9f:67:39:76:c9:e6:4e:03:
75:6c:c4:24:9d:86:0b:ef:2f:ee:18:b5:71:36:9b:
ac:30:8c:c3:19:3b:de:16:5b:72:f6:9b:a7:c5:e9:
60:31:b4:44:0d:24:e1:ba:e2:33:ae:c9:a2:24:a5:
ba:c0:56:35:89:90:21:eb:bf:90:4f:bc:42:7e:77:
61:4b:fb:92:d2:62:cf:36:1b:28:c3:45:4d:c0:62:
82:ae:fa:82:1f:be:22:73:fd:9f:90:be:e9:cd:81:
e2:0a:d5:03:80:a4:f8:d0:ac:89:ac:bc:1c:cc:0c:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:7A:DA:76:8F:11:16:11:DF:EF:DC:EC:00:22:0D:AE:5B:81:BD
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/UDp62naPERYR3-_c7AAiDa5bgb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b80::/32
Signature Algorithm: sha256WithRSAEncryption
6a:81:d5:9b:80:b5:92:cf:79:5d:d3:ae:eb:27:49:97:63:40:
b1:b6:81:6e:c2:1c:3f:9f:aa:65:6e:b4:4e:9f:44:51:2a:82:
16:c7:0e:a1:6b:c6:1c:6e:43:f0:56:b3:47:11:e3:16:23:26:
8e:bb:cd:42:d0:4b:56:43:77:2f:15:08:bc:d0:7e:af:3d:1a:
87:4c:ca:e3:93:be:2d:72:62:f1:37:3d:35:d9:00:a0:0d:4a:
ad:c5:02:c2:7d:36:ab:43:c1:c3:63:74:09:f2:2d:a2:b6:d4:
37:c2:ee:c5:fb:67:af:43:cd:37:7f:20:8b:78:84:56:1b:53:
b0:36:e4:5d:d3:52:23:18:88:fa:70:28:4e:ed:3b:e0:1d:c3:
3b:97:90:10:23:e2:43:53:3b:4e:36:38:0e:6f:89:d3:5b:b1:
37:50:8a:8d:ce:ad:8f:66:fc:74:12:16:df:8a:96:d4:b6:20:
ba:33:91:c7:68:74:0c:51:bc:3d:0b:23:ff:be:86:43:b8:08:
a8:c8:c0:c0:4b:5a:90:56:91:39:4f:e3:fb:5b:9a:09:61:6b:
e2:39:1f:71:16:b3:1f:07:81:52:ec:02:e9:03:58:df:1b:b7:
9c:73:d6:1c:91:6c:6f:e4:82:32:78:50:18:be:8b:b7:63:7a:
a8:56:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:27:07 2025 by rpki-client