Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa
File: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (raw, json)
Hash identifier: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=
Subject key identifier: 52:8C:A1:8F:3B:B5:0A:71:E8:F2:D9:7B:9E:4F:D9:84:AC:25:E6:15
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D46DF0D813F6B258022D5F3EFB03D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205214
IP address blocks: 2a0d:2146:8480::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:46:df:0d:81:3f:6b:25:80:22:d5:f3:ef:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=528ca18f3bb50a71e8f2d97b9e4fd984ac25e615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:44:b4:73:c4:1d:b3:a2:30:ff:b1:ca:99:
7e:2c:91:9f:b9:43:73:66:92:77:7e:18:be:8e:be:
cf:20:9e:18:20:89:f0:8b:4e:81:17:ef:bb:85:63:
e8:94:6a:28:10:6d:07:4f:63:ea:09:8f:0f:76:c3:
b4:8b:e7:99:8b:87:76:49:ca:47:c0:c9:fb:ab:aa:
05:99:39:fb:bc:cc:31:69:39:12:de:42:4c:cd:e7:
e5:d4:25:29:f5:08:36:95:9e:1d:b0:b3:27:dc:71:
68:e5:61:73:f1:2f:0f:74:a0:d3:72:72:45:cd:72:
80:6a:49:d9:0a:ba:2d:1c:7d:34:78:c2:9c:40:0d:
f1:26:50:6d:28:d5:04:c3:16:d1:28:5d:cc:2e:d5:
8c:90:4a:2f:2b:83:42:6e:ff:e4:f5:7e:08:aa:f0:
99:6a:84:3d:e6:f5:9b:94:36:1e:b0:b4:a8:be:70:
b3:7c:c2:1d:40:f8:29:a8:3d:7e:49:12:74:a1:71:
fa:91:6c:44:60:a1:6b:2a:b3:39:30:92:5e:03:00:
fe:fc:dc:e4:dc:12:3c:82:0c:24:9c:9a:81:e1:91:
c1:7b:c3:e8:f6:8e:48:39:a6:d2:c0:bd:90:5c:55:
7e:48:a2:35:a5:05:80:69:a8:9a:c5:bf:7a:a6:15:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:A1:8F:3B:B5:0A:71:E8:F2:D9:7B:9E:4F:D9:84:AC:25:E6:15
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8480::/44
Signature Algorithm: sha256WithRSAEncryption
7c:b5:87:2b:35:71:68:24:eb:32:ba:b2:7d:c9:2e:df:af:fd:
4b:a1:74:99:80:30:b5:58:34:6f:58:8e:a4:32:dc:96:63:4f:
ed:c0:67:7f:96:29:13:1d:1e:a7:37:bc:7a:10:39:af:5f:a9:
56:f5:22:24:cd:07:f9:1a:73:76:a4:d2:b5:13:04:16:e7:0c:
33:04:f0:f8:14:67:4f:59:36:04:92:81:aa:7e:50:fa:fa:bf:
38:ee:2d:01:c3:39:19:9e:3b:db:8a:75:80:8d:f7:fe:46:fb:
d9:f5:d0:cd:1a:80:4b:1d:91:b1:66:54:9b:9a:0a:ed:7b:d0:
33:05:48:de:f9:cc:20:87:75:71:ad:95:5f:45:c4:a8:bb:35:
74:2d:c8:a5:d6:3c:85:26:45:32:cc:ae:1b:9d:5c:3f:fd:45:
95:9c:c3:7f:3d:bd:92:54:00:8b:ca:fb:9c:78:1e:fb:87:5b:
5f:54:e0:25:6c:42:ca:c9:0a:31:f5:04:a9:fa:c8:26:14:ba:
3b:95:d8:d1:99:56:4e:d8:3f:2b:aa:54:0a:3d:49:21:b9:2a:
4d:51:7f:aa:e0:2c:c4:f3:c2:c1:11:84:b3:19:36:85:2d:af:
f2:4b:2d:bc:51:b8:71:67:f0:3e:0f:96:4a:7d:80:0b:98:30:
b8:d9:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:57 2025 by rpki-client