Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/uJt3ug9lEbnDmzELLQyP_fU8I10.roa
File: uJt3ug9lEbnDmzELLQyP_fU8I10.roa (raw, json)
Hash identifier: FeAjuhWrX10zXNblotwE/9VYi4U41zljP++jtCq6jKc=
Subject key identifier: B8:9B:77:BA:0F:65:11:B9:C3:9B:31:0B:2D:0C:8F:FD:F5:3C:23:5D
Certificate issuer: /CN=0a7a1277ef1d56415498c712a943f53006b6cd17
Certificate serial: 018571DE74C77DECBA33AB59EA173201FA18
Authority key identifier: 0A:7A:12:77:EF:1D:56:41:54:98:C7:12:A9:43:F5:30:06:B6:CD:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnoSd-8dVkFUmMcSqUP1MAa2zRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/uJt3ug9lEbnDmzELLQyP_fU8I10.roa
Signing time: Mon 02 Jan 2023 09:44:42 +0000
ROA not before: Mon 02 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49238
IP address blocks: 2a06:aa87:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:74:c7:7d:ec:ba:33:ab:59:ea:17:32:01:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7a1277ef1d56415498c712a943f53006b6cd17
Validity
Not Before: Jan 2 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89b77ba0f6511b9c39b310b2d0c8ffdf53c235d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:5e:c4:7d:4e:09:8e:c5:d1:22:56:80:6b:
40:ed:0b:b7:50:31:1f:cb:69:94:e7:5a:fc:c6:e9:
d4:73:7f:a9:74:0a:b6:a3:66:65:6d:ca:b7:5c:fb:
33:82:8f:61:86:cb:62:e4:55:f4:dc:d0:9f:af:f1:
24:b0:a7:dd:e1:1d:ce:04:27:ae:c1:6a:18:34:e7:
d1:29:0c:57:48:9d:15:03:c0:25:63:c2:3f:4f:4d:
17:2b:84:cc:08:64:85:e0:f9:40:72:e0:96:5b:09:
3e:b0:a0:6f:3d:fc:26:e6:49:fb:ba:ba:94:e6:27:
13:e9:bf:8a:57:82:07:cc:08:0c:18:91:c0:0b:61:
df:84:f4:c2:7b:58:42:11:e7:3f:21:d6:74:22:c0:
cf:34:74:c7:a4:c8:85:47:1e:ca:dd:80:e4:93:4e:
1c:96:4e:83:9e:24:fc:f2:6e:80:c4:7e:80:99:9b:
32:6b:39:53:5a:96:08:14:75:15:f3:45:b2:b4:ce:
40:cc:b4:62:79:eb:33:74:5f:59:57:12:e6:74:a2:
53:a4:5d:c7:6d:6e:8a:ed:f3:b3:75:58:de:5d:a8:
33:b2:61:90:85:8e:8b:4c:38:d4:b4:ca:9e:a0:21:
12:cd:e5:c7:3b:75:6a:14:13:20:e3:44:90:33:81:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:77:BA:0F:65:11:B9:C3:9B:31:0B:2D:0C:8F:FD:F5:3C:23:5D
X509v3 Authority Key Identifier:
keyid:0A:7A:12:77:EF:1D:56:41:54:98:C7:12:A9:43:F5:30:06:B6:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnoSd-8dVkFUmMcSqUP1MAa2zRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/uJt3ug9lEbnDmzELLQyP_fU8I10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/CnoSd-8dVkFUmMcSqUP1MAa2zRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:aa87:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
c6:7c:1a:b8:89:ce:d3:cb:be:3a:9b:81:f9:23:e3:9f:28:2a:
54:09:95:bf:ce:5e:b1:d3:8e:e8:dd:22:88:b4:b1:4a:45:4e:
1b:1d:94:ba:9e:bf:ef:9b:ee:d5:29:fe:d3:5e:37:ac:bd:7b:
1e:82:68:65:b6:b1:99:5f:b4:40:c8:37:b2:71:8c:6c:51:7d:
bf:34:0a:4e:03:70:bb:5e:de:41:8e:68:15:d6:d6:2d:47:d8:
94:75:90:8e:8d:7c:7f:6f:f3:5e:04:90:87:83:ff:c8:12:cf:
57:ce:38:ed:38:37:1d:47:5e:1c:3b:59:71:ec:d9:1b:20:03:
f3:36:31:04:7f:05:6f:87:cb:4b:96:a9:ec:4e:de:3b:95:fc:
95:c5:a3:ed:20:ac:a7:66:79:0b:d7:a6:61:e4:9d:01:5a:16:
cd:18:1d:ed:89:4f:b2:53:3b:50:73:7f:34:e2:d5:58:59:f9:
d3:0c:56:35:c8:62:8a:d3:aa:3b:6d:8b:30:ee:b2:82:d1:b4:
6b:a5:e2:53:45:b5:05:ef:a9:ac:bb:f8:e0:12:1d:06:06:11:
27:c6:53:d2:91:79:37:5c:ce:9e:37:ac:31:37:72:6c:a2:5f:
1d:fb:8d:45:15:93:a6:53:99:0d:0b:cb:c2:a6:5b:c7:27:38:
de:da:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:28:27 2025 by rpki-client