Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/UasGj-ZJPpnAvM8w0Hafk0h2RF4.roa
File: UasGj-ZJPpnAvM8w0Hafk0h2RF4.roa (raw, json)
Hash identifier: 27/bT+REBIA0rRBrLxMgwhCbIOFEBIKfHmYEon6dfpc=
Subject key identifier: 51:AB:06:8F:E6:49:3E:99:C0:BC:CF:30:D0:76:9F:93:48:76:44:5E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0196F2673E659F619516F9D767B823C00C43
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/UasGj-ZJPpnAvM8w0Hafk0h2RF4.roa
Signing time: Wed 21 May 2025 10:32:54 +0000
ROA not before: Wed 21 May 2025 10:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42375
IP address blocks: 2a01:48a0:8000::/33 maxlen: 33
2a05:1e41::/32 maxlen: 32
2a05:1e43::/32 maxlen: 32
2a05:1e45::/32 maxlen: 32
2a09:2987::/32 maxlen: 32
2a09:a800::/32 maxlen: 32
2a09:a801::/32 maxlen: 32
2a09:a802::/32 maxlen: 32
2a09:af80::/32 maxlen: 32
2a09:bc00::/32 maxlen: 32
2a09:bc01::/32 maxlen: 32
2a09:bc02::/32 maxlen: 32
2a09:c700::/32 maxlen: 32
2a09:cf00::/32 maxlen: 32
2a09:d700::/32 maxlen: 32
2a09:dd00::/32 maxlen: 32
2a09:e300::/32 maxlen: 32
2a09:e700::/32 maxlen: 32
2a09:ef01::/32 maxlen: 32
2a0b:9001::/32 maxlen: 32
2a0d:3c43::/32 maxlen: 32
2a0d:95c6::/32 maxlen: 32
2a0d:afc0::/32 maxlen: 32
2a0d:c106::/32 maxlen: 32
2a0d:fcc0::/32 maxlen: 32
2a0d:fcc1::/32 maxlen: 32
2a0d:fcc2::/32 maxlen: 32
2a0e:3f40::/32 maxlen: 32
2a0e:5880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:67:3e:65:9f:61:95:16:f9:d7:67:b8:23:c0:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: May 21 10:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51ab068fe6493e99c0bccf30d0769f934876445e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:d2:91:c5:3e:6f:bb:ec:86:02:28:a6:84:
18:04:be:e6:72:99:5f:e7:61:02:85:11:18:00:59:
e5:a1:b7:40:43:48:7a:e9:7e:d2:1f:73:f3:c2:1f:
76:c3:16:2f:81:5e:82:e0:8c:fa:90:45:58:d5:6d:
27:37:9b:9c:9b:14:28:8a:0c:cf:63:51:96:0a:d7:
b6:f7:e9:ac:f4:c8:d4:51:99:78:49:f8:10:ee:3a:
fa:43:83:aa:ef:00:ba:39:4c:a3:12:00:53:0b:f1:
c9:e4:e2:07:81:51:20:51:73:f3:a9:fa:b9:6d:60:
f8:f1:49:a7:5a:c6:69:01:b7:c6:83:2d:b1:b1:c2:
57:08:53:0c:c8:c9:4a:d1:5a:42:b1:80:ae:31:e2:
3a:a7:b3:7d:2e:31:2f:ac:71:a5:c7:65:b9:ef:1e:
c6:94:8e:5a:51:a8:98:af:36:08:d0:37:b2:7a:07:
fd:fc:43:d4:7b:05:41:8f:92:d1:ce:84:bb:2d:97:
5d:dc:6a:10:96:d0:2f:9b:c9:2e:f5:1f:4d:62:9a:
9e:54:43:dc:54:bd:f2:c1:f0:d1:c8:fd:3a:49:fd:
2a:5b:3a:7b:b5:e2:b7:76:b0:ce:0d:5e:4d:83:a9:
61:8a:a2:ba:9f:3b:a7:1b:65:5e:ed:3f:fd:f3:b5:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AB:06:8F:E6:49:3E:99:C0:BC:CF:30:D0:76:9F:93:48:76:44:5E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/UasGj-ZJPpnAvM8w0Hafk0h2RF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:8000::/33
2a05:1e41::/32
2a05:1e43::/32
2a05:1e45::/32
2a09:2987::/32
2a09:a800::-2a09:a802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:af80::/32
2a09:bc00::-2a09:bc02:ffff:ffff:ffff:ffff:ffff:ffff
2a09:c700::/32
2a09:cf00::/32
2a09:d700::/32
2a09:dd00::/32
2a09:e300::/32
2a09:e700::/32
2a09:ef01::/32
2a0b:9001::/32
2a0d:3c43::/32
2a0d:95c6::/32
2a0d:afc0::/32
2a0d:c106::/32
2a0d:fcc0::-2a0d:fcc2:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:3f40::/32
2a0e:5880::/32
Signature Algorithm: sha256WithRSAEncryption
93:10:bc:59:f8:f8:05:00:3f:61:e6:fe:2c:ea:ba:fb:59:c6:
69:0c:69:83:3f:41:fb:97:b0:b9:4c:75:b0:26:39:15:78:b4:
20:72:e5:ef:43:08:cc:b6:e0:d6:68:19:9a:80:92:77:4c:d1:
7e:dc:f2:4b:ae:fa:23:e0:34:e0:69:b2:36:da:7a:ea:33:69:
1c:36:c1:ba:6e:cc:dd:c0:41:c5:e4:b6:4b:db:8d:3d:41:6e:
d0:0c:10:91:eb:44:50:1e:54:fa:f6:c6:2e:27:9c:ca:58:6f:
06:6f:e4:06:69:2b:00:f6:67:e9:d1:0e:5c:43:9b:4f:32:41:
d9:6d:99:dc:83:74:7e:c6:c2:9b:a3:b0:1b:e3:76:21:cd:86:
e6:31:a1:7c:3f:38:d2:04:8f:c7:12:c0:05:ce:4f:1b:d1:ec:
51:05:7d:d6:4a:d2:5e:ff:cd:08:cd:8f:be:e2:1a:68:a5:b5:
69:84:a3:2b:5a:54:a9:0c:67:e5:18:65:27:29:12:75:11:de:
e4:db:73:81:69:5f:f3:23:f1:ec:65:5e:41:a1:89:7c:d8:bd:
8f:85:ed:db:9d:24:0e:30:7c:81:b0:4f:5f:47:2a:8f:9e:04:
5c:c7:36:93:f6:7c:52:fe:8e:e2:cc:fc:9e:d8:37:f6:88:f2:
4d:2c:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:15 2025 by rpki-client