Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8f51d8-6269-4d7a-88e2-dd447cfe9257/1/UgutgsmCNwHnxOrJDJLpQ2Ct5Ss.roa
File: UgutgsmCNwHnxOrJDJLpQ2Ct5Ss.roa (raw, json)
Hash identifier: rlRm2U4w0ncUr7v/6IIMq3NazelSZjbXyjr/viR+vUs=
Subject key identifier: 52:0B:AD:82:C9:82:37:01:E7:C4:EA:C9:0C:92:E9:43:60:AD:E5:2B
Certificate issuer: /CN=104e382c1f727e75d515df8d19b63a80a08fe232
Certificate serial: 0184BE42D136E89A59C7EBA1583C203ACFBE
Authority key identifier: 10:4E:38:2C:1F:72:7E:75:D5:15:DF:8D:19:B6:3A:80:A0:8F:E2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EE44LB9yfnXVFd-NGbY6gKCP4jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8f51d8-6269-4d7a-88e2-dd447cfe9257/1/UgutgsmCNwHnxOrJDJLpQ2Ct5Ss.roa
Signing time: Mon 28 Nov 2022 12:42:40 +0000
ROA not before: Mon 28 Nov 2022 12:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39591
IP address blocks: 2a10:7180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:42:d1:36:e8:9a:59:c7:eb:a1:58:3c:20:3a:cf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104e382c1f727e75d515df8d19b63a80a08fe232
Validity
Not Before: Nov 28 12:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=520bad82c9823701e7c4eac90c92e94360ade52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:03:fe:43:6e:f2:88:e4:51:b5:0e:c5:5c:
85:2a:b4:f0:7f:3c:81:94:ae:1e:e8:a4:95:b9:9f:
6d:23:72:3c:ff:4f:d3:00:8d:f3:75:14:e0:aa:17:
83:24:c6:25:ef:86:0f:ba:4a:64:b8:dc:99:7d:10:
ac:bd:92:10:ee:4d:e6:41:d8:02:2d:36:b5:46:e7:
83:cd:b2:33:a3:66:57:f2:c1:c6:82:df:53:28:6b:
dd:2b:13:2a:fe:33:33:fc:77:54:ab:4d:5f:8d:df:
a1:33:56:08:6c:b7:ed:e2:f9:91:1c:02:f2:d5:cc:
a6:72:3b:1e:a7:aa:45:4d:65:56:ee:96:f5:15:70:
8f:9e:ce:1f:e1:2f:67:85:c9:c3:4e:a6:3a:e6:34:
58:94:7f:57:86:64:e1:16:25:87:c0:4d:c0:92:1a:
8d:e4:4c:e3:22:14:52:41:f9:f9:ab:1d:77:4b:5f:
56:a2:ae:d6:74:83:96:ea:ba:07:c8:c8:3f:a8:d3:
ff:86:ab:85:c7:d1:83:f7:d0:b2:92:64:28:a7:a2:
e1:40:ec:dc:8c:fc:b4:27:c7:df:66:79:8c:75:9c:
78:72:a2:39:92:be:b4:f6:e5:2c:d2:5b:05:53:3d:
ba:3e:ae:81:61:64:af:a1:6e:1e:ef:b9:55:40:bf:
82:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:AD:82:C9:82:37:01:E7:C4:EA:C9:0C:92:E9:43:60:AD:E5:2B
X509v3 Authority Key Identifier:
keyid:10:4E:38:2C:1F:72:7E:75:D5:15:DF:8D:19:B6:3A:80:A0:8F:E2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE44LB9yfnXVFd-NGbY6gKCP4jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8f51d8-6269-4d7a-88e2-dd447cfe9257/1/UgutgsmCNwHnxOrJDJLpQ2Ct5Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8f51d8-6269-4d7a-88e2-dd447cfe9257/1/EE44LB9yfnXVFd-NGbY6gKCP4jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7180::/29
Signature Algorithm: sha256WithRSAEncryption
10:6d:61:23:c3:fa:cc:c7:22:d1:95:a1:8b:39:97:25:b5:63:
da:e9:66:90:d2:62:90:d2:76:0a:7c:e2:05:85:b2:97:3e:f5:
dc:76:cc:30:33:b3:db:30:e5:33:ff:ed:ef:61:2f:ac:ea:5c:
51:23:65:fd:32:99:24:86:06:40:e1:2f:0f:66:26:9e:42:22:
1c:b7:d4:40:17:ef:4a:65:c4:03:96:28:11:aa:9c:e2:8a:64:
ed:b1:46:ab:4b:80:cf:97:0a:8b:f1:6d:6e:e9:b9:00:16:a6:
38:fc:0f:d2:5e:dc:62:59:32:a0:1a:1e:46:1c:95:e4:f4:b4:
4a:fd:98:a3:8b:c2:47:99:ac:d6:fb:41:3f:b3:23:39:2c:47:
8e:52:97:e3:a1:1a:d4:89:75:f8:c0:20:3c:ac:b8:92:b2:65:
da:77:05:ee:9e:a8:a2:7a:6a:b1:b0:60:b8:90:ef:c4:06:8b:
b6:41:11:62:c2:7f:57:7e:6e:fe:3c:0d:bb:44:18:dc:b4:b1:
95:5e:cf:22:36:bb:50:56:e0:95:ba:ae:15:91:74:73:88:35:
2c:d9:ee:b0:c5:73:c4:bf:ff:4d:58:b0:0f:8f:6e:96:92:51:
2c:6f:76:6c:e4:3c:8a:ea:3d:c7:43:a1:3b:6f:87:c6:28:71:
b7:38:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:53 2025 by rpki-client