Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uA8sgnzrFDkmtmd4YbxzRNqvOSo.roa
File: uA8sgnzrFDkmtmd4YbxzRNqvOSo.roa (raw, json)
Hash identifier: mAZrshaSZfqhqtdjsgb3o561PCw+CZUleh+b5XZizAc=
Subject key identifier: B8:0F:2C:82:7C:EB:14:39:26:B6:67:78:61:BC:73:44:DA:AF:39:2A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220C58F4D796AE8BADB1DAAE642B44
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uA8sgnzrFDkmtmd4YbxzRNqvOSo.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202647
IP address blocks: 2a10:2f00:18c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0c:58:f4:d7:96:ae:8b:ad:b1:da:ae:64:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b80f2c827ceb143926b6677861bc7344daaf392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:b3:a7:37:71:27:c6:48:bc:c9:de:c0:e2:
ce:7b:5c:e5:09:73:1c:a8:e8:e9:cc:57:de:72:09:
53:73:20:4d:d6:13:5a:38:0f:37:65:17:06:7b:e9:
57:94:b3:0e:2a:b1:22:8f:55:74:be:26:11:9c:fe:
97:03:fe:b4:07:1e:96:60:cb:74:7c:e1:a1:69:1d:
ea:93:24:26:f7:2e:bf:c4:ad:6e:9a:96:5c:fb:96:
81:2a:af:03:f5:37:b9:bd:a5:2c:11:97:7b:f8:0f:
43:c1:6b:d6:1c:7c:8a:e8:e9:e3:12:0f:ad:c0:5e:
1b:c0:af:1c:ce:a8:2e:08:91:6e:d2:f2:f2:81:84:
74:1c:15:f1:fb:e3:81:ab:f0:0a:88:94:b2:53:39:
38:91:e9:8e:3f:72:55:33:4a:4c:b8:12:3f:80:52:
d1:b1:6e:50:56:19:85:4f:19:45:11:5d:db:42:ca:
e8:79:87:eb:57:f9:83:bd:b2:67:9e:d1:c5:68:1a:
1a:04:90:54:59:4e:84:25:56:59:22:1c:2c:0f:28:
f6:18:2f:ff:d5:af:bf:71:c4:26:81:40:ff:b9:da:
f4:8c:9c:cc:90:4c:94:c7:90:25:25:02:22:29:c6:
7a:0a:35:b0:91:06:d6:72:45:ad:0d:50:f4:f6:c3:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:2C:82:7C:EB:14:39:26:B6:67:78:61:BC:73:44:DA:AF:39:2A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uA8sgnzrFDkmtmd4YbxzRNqvOSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:59:e7:74:c6:7c:9a:5e:45:4e:28:a3:51:87:6b:94:cb:5b:
73:00:34:50:42:d6:5d:22:18:31:e4:ad:cf:24:82:d3:32:3f:
22:c5:47:71:6a:78:59:fe:bc:0e:e7:8c:4d:72:4f:52:e7:96:
da:38:99:09:93:21:ed:9a:58:22:89:cd:16:50:10:28:b0:9d:
c4:af:90:61:a0:37:5f:d3:1f:bd:e5:7c:d8:1c:2e:72:7a:46:
a2:89:b0:07:02:a3:8f:1b:b4:22:49:f9:63:e9:7d:7e:2a:b9:
b5:14:7f:66:9b:ee:99:14:ce:1d:47:5e:6e:97:61:65:a5:86:
fd:aa:ad:0f:48:12:64:de:26:b7:3d:e7:74:b7:ae:27:d8:14:
d1:0b:03:41:35:f4:60:ee:ae:16:62:33:f3:c7:32:dc:f9:9e:
0f:ba:c5:03:e2:9f:8c:63:8e:9b:04:4c:69:23:a6:e0:fa:31:
2b:61:c2:e0:3c:77:50:86:a3:34:c6:3f:f6:81:9c:07:e7:32:
af:c6:5d:39:71:e5:3b:f0:44:b1:89:c1:e7:91:e4:7a:00:7e:
ff:42:21:9d:0e:1d:75:b9:ed:cf:e3:61:9d:a8:5d:c5:2f:f7:
21:4e:03:55:3b:e0:c7:a7:60:ad:de:d0:25:2e:06:0d:3e:d5:
0c:13:bd:6f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIgxY9NeWroutsdquZCtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODBmMmM4MjdjZWIxNDM5MjZiNjY3Nzg2MWJjNzM0NGRhYWYzOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqyzpzdxJ8ZIvMnewOLOe1zlCXMc
qOjpzFfecglTcyBN1hNaOA83ZRcGe+lXlLMOKrEij1V0viYRnP6XA/60Bx6WYMt0
fOGhaR3qkyQm9y6/xK1umpZc+5aBKq8D9Te5vaUsEZd7+A9DwWvWHHyK6OnjEg+t
wF4bwK8czqguCJFu0vLygYR0HBXx++OBq/AKiJSyUzk4kemOP3JVM0pMuBI/gFLR
sW5QVhmFTxlFEV3bQsroeYfrV/mDvbJnntHFaBoaBJBUWU6EJVZZIhwsDyj2GC//
1a+/ccQmgUD/udr0jJzMkEyUx5AlJQIiKcZ6CjWwkQbWckWtDVD09sNzzwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLgPLIJ86xQ5JrZneGG8c0TarzkqMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdUE4c2duenJGRGttdG1kNFlieHpSTnF2T1NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGM
MA0GCSqGSIb3DQEBCwUAA4IBAQCoWed0xnyaXkVOKKNRh2uUy1tzADRQQtZdIhgx
5K3PJILTMj8ixUdxanhZ/rwO54xNck9S55baOJkJkyHtmlgiic0WUBAosJ3Er5Bh
oDdf0x+95XzYHC5yekaiibAHAqOPG7QiSflj6X1+Krm1FH9mm+6ZFM4dR15ul2Fl
pYb9qq0PSBJk3ia3Ped0t64n2BTRCwNBNfRg7q4WYjPzxzLc+Z4PusUD4p+MY46b
BExpI6bg+jErYcLgPHdQhqM0xj/2gZwH5zKvxl05ceU78ESxicHnkeR6AH7/QiGd
Dh11ue3P42GdqF3FL/chTgNVO+DHp2Ct3tAlLgYNPtUME71v
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:05 2025 by rpki-client