Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/uvuzmRx8-6cGlxneouFp2r3cQLs.roa
File: uvuzmRx8-6cGlxneouFp2r3cQLs.roa (raw, json)
Hash identifier: Q8jSuQVbZnL0m4YW+amp+qk6XrA14M8l2UlAYa8wHIw=
Subject key identifier: BA:FB:B3:99:1C:7C:FB:A7:06:97:19:DE:A2:E1:69:DA:BD:DC:40:BB
Certificate issuer: /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial: 01862C4C664BB6C7F30D96419A29E4524EB0
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/uvuzmRx8-6cGlxneouFp2r3cQLs.roa
Signing time: Tue 07 Feb 2023 14:34:09 +0000
ROA not before: Tue 07 Feb 2023 14:34:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 2a13:9300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:4c:66:4b:b6:c7:f3:0d:96:41:9a:29:e4:52:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Validity
Not Before: Feb 7 14:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bafbb3991c7cfba7069719dea2e169dabddc40bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:0e:63:2f:1a:63:52:02:59:80:43:16:ec:
b2:6e:f6:02:1c:09:77:e1:5d:56:83:a2:51:ab:50:
3c:1b:a6:10:55:e8:60:28:8a:7d:a2:75:71:86:a6:
a0:bc:b4:05:df:66:df:a7:74:19:a3:51:16:e0:39:
80:33:08:63:d9:e6:ec:f8:f8:b2:2d:65:c0:a7:9a:
a5:77:df:60:7b:86:d3:46:50:69:8d:ff:ea:6d:f6:
55:3e:95:41:19:8d:82:18:c9:d4:89:c3:a1:39:d8:
9f:1d:08:76:71:1c:e5:6f:ee:0b:36:84:90:29:b5:
ec:e0:e4:1d:1a:7f:1c:47:68:24:a9:d6:c7:cc:83:
07:14:60:3c:7a:06:84:74:45:81:77:77:ed:8c:2b:
5e:e7:75:2c:a8:19:7a:eb:2b:83:f4:bb:2e:57:87:
f1:8c:7b:69:97:f5:df:b0:5b:ce:9f:a6:b0:ea:75:
2d:f4:ae:40:85:db:d2:e0:dd:0f:28:6f:aa:a9:0e:
ae:aa:f5:a6:79:8d:06:3a:5b:16:0b:3e:6e:da:bc:
d8:4c:9c:82:10:ad:1e:09:f7:cf:6b:f7:5a:30:1c:
65:f5:cc:24:7e:ac:7a:9c:ba:22:e9:fe:a4:f9:c2:
26:30:74:2e:34:de:25:46:e9:0f:e6:50:8b:08:6e:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FB:B3:99:1C:7C:FB:A7:06:97:19:DE:A2:E1:69:DA:BD:DC:40:BB
X509v3 Authority Key Identifier:
keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/uvuzmRx8-6cGlxneouFp2r3cQLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9300::/29
Signature Algorithm: sha256WithRSAEncryption
04:33:ee:6e:48:8b:5a:26:2d:7d:89:ab:e2:01:58:54:93:cb:
1c:c5:09:25:60:1b:d8:38:20:ef:72:f5:a0:25:a5:b1:34:68:
0c:0c:f9:25:70:04:97:e9:e1:9c:73:fc:06:92:7c:d9:0f:8c:
ff:7c:a8:b4:d9:98:1c:4b:33:10:11:e1:f3:37:e1:2e:81:35:
c9:bb:40:0b:9b:80:3c:ea:8d:37:70:1a:6d:ba:bf:26:67:aa:
ee:12:5a:5c:15:33:75:4e:4b:bd:5b:7c:b6:f7:b2:f0:9d:e6:
ae:67:3b:fd:ee:cc:05:c2:3e:02:04:f4:8d:10:ad:92:fc:51:
5e:92:e6:36:f7:57:c6:28:83:3a:4a:00:75:24:fd:34:bd:f2:
ec:46:95:3b:b1:94:4a:3c:28:fa:3d:98:8a:64:84:d1:0b:1e:
51:41:39:41:80:31:61:f0:76:86:dd:86:14:7a:9e:28:cf:a8:
f5:b3:f3:fd:31:37:27:a3:21:8b:03:08:9f:90:9a:7c:34:52:
c4:0c:1b:2e:0d:3c:f5:fe:10:76:e8:fc:e0:d6:2e:2e:c8:06:
bf:47:4c:0d:24:2c:6c:42:03:21:62:8b:75:65:85:18:f6:00:
45:45:4f:6a:b0:0a:33:4a:d0:8a:96:4b:71:5c:3d:f3:9f:a2:
a8:b4:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:10 2025 by rpki-client