Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/uybUITcrvPjkvZYJaTBp-dGjmzU.roa
File: uybUITcrvPjkvZYJaTBp-dGjmzU.roa (raw, json)
Hash identifier: fq2wQ4iZBwRkvdAC+FEcpiK3UXJx5WmwHuA+K3zLBNo=
Subject key identifier: BB:26:D4:21:37:2B:BC:F8:E4:BD:96:09:69:30:69:F9:D1:A3:9B:35
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEAC7EF0F0DB294A8D3C0395920A0
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/uybUITcrvPjkvZYJaTBp-dGjmzU.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212733
IP address blocks: 2a0e:aa07:e029::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ea:c7:ef:0f:0d:b2:94:a8:d3:c0:39:59:20:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb26d421372bbcf8e4bd9609693069f9d1a39b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:60:96:86:ce:51:6f:b8:70:e5:ef:26:5f:
6a:71:9b:27:1a:94:be:dc:fd:df:36:6a:45:cd:bf:
3a:9f:c0:2a:24:98:00:27:ab:df:42:20:e0:02:b6:
c0:96:4c:9f:a6:97:ca:7e:54:36:44:ac:8e:14:92:
64:29:4e:18:db:70:b8:fc:f5:e0:58:98:f7:bc:1d:
07:24:66:82:1e:19:1c:2f:14:45:d0:36:d6:d6:fe:
a4:d5:d4:2a:a0:16:1f:6b:39:45:b9:14:6b:41:70:
4e:7e:6b:e2:d5:03:6e:8e:db:2d:85:b2:f3:40:63:
af:06:25:a7:85:5a:79:d7:33:e4:7e:0e:25:86:07:
14:be:10:be:4e:6a:2d:a9:d1:d3:8d:23:78:f0:1d:
ef:a3:9c:61:32:0e:07:40:09:71:3e:af:e4:a2:52:
ed:cb:77:21:23:6f:22:b1:01:d0:ea:53:74:c1:2a:
cc:a7:bd:dc:c6:6d:43:bf:ca:64:65:a2:29:76:82:
91:bf:b2:10:25:61:5d:76:85:24:08:cb:62:15:04:
ff:86:6f:31:0f:87:47:6a:1a:89:db:6e:ab:c5:b6:
48:dd:f5:09:9d:f6:58:92:ad:4e:50:3e:72:08:50:
03:86:d9:1e:a0:79:b6:36:bd:9e:8e:7e:1d:0e:a6:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:D4:21:37:2B:BC:F8:E4:BD:96:09:69:30:69:F9:D1:A3:9B:35
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/uybUITcrvPjkvZYJaTBp-dGjmzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e029::/48
Signature Algorithm: sha256WithRSAEncryption
a2:1e:15:50:ea:3b:8b:f6:f1:4e:5f:e6:df:2b:8f:38:6e:8c:
89:87:6e:5a:2c:12:09:62:a7:b7:0c:ac:73:e8:43:ff:8d:f1:
d1:4b:60:0c:88:cb:06:32:f2:fe:57:de:fa:86:3e:11:a9:10:
d5:71:9a:73:67:02:2c:34:ae:cf:47:00:d9:b4:a7:0d:ac:a5:
55:54:41:5d:31:48:30:ab:3a:34:1c:78:70:4b:70:75:b5:4c:
11:3f:49:aa:db:a9:1e:8d:97:14:f8:1a:cc:95:57:8e:4b:c2:
53:f6:94:9b:20:11:9b:2d:dc:06:e2:78:2b:ba:b0:1d:0c:e0:
35:07:dc:eb:3d:31:16:93:2f:47:c6:74:e7:b7:23:c0:c0:d7:
75:14:90:ea:15:96:1d:7b:09:6c:60:28:1a:5b:d6:a6:60:7b:
a5:f6:0c:67:a2:87:48:2d:12:a5:9e:0b:b5:1e:89:e9:03:87:
f8:8a:5a:db:35:e7:4a:64:81:a1:7c:99:39:36:c0:a3:82:c6:
9a:49:ce:10:de:9e:70:74:cb:2b:4a:a8:00:9f:d6:06:70:d4:
fd:e5:0f:88:58:c3:e8:c4:ea:31:57:46:73:de:cd:5a:33:d8:
c8:db:bb:31:54:36:97:10:29:60:f8:67:67:1b:5b:bb:5c:85:
23:14:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:27 2025 by rpki-client