Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/uaKWn-B_tKDfBy53xs-X6OMt7l4.roa
File: uaKWn-B_tKDfBy53xs-X6OMt7l4.roa (raw, json)
Hash identifier: UbSrRt+W8ih39ekwzt6e9vsWqJVFD6qG3/hlKmBbAME=
Subject key identifier: B9:A2:96:9F:E0:7F:B4:A0:DF:07:2E:77:C6:CF:97:E8:E3:2D:EE:5E
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E20F688476786A937C9F6EA0683B
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/uaKWn-B_tKDfBy53xs-X6OMt7l4.roa
Signing time: Wed 01 Jan 2025 05:47:46 +0000
ROA not before: Wed 01 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 2a12:3fc2:3001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e2:0f:68:84:76:78:6a:93:7c:9f:6e:a0:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9a2969fe07fb4a0df072e77c6cf97e8e32dee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:bc:96:7a:d6:69:57:81:ef:7a:1d:29:3e:
51:4e:78:56:2d:9c:52:ec:aa:87:2d:1a:23:60:a6:
42:fb:83:3b:f8:6f:fe:ab:d9:b0:13:99:06:30:83:
8b:70:d0:81:27:54:d6:b0:dd:06:d2:be:d1:b4:bc:
29:04:5a:d7:51:2b:e0:0f:b0:5c:23:10:c5:75:ce:
96:86:d2:71:3c:c1:d3:f9:2c:d5:ca:f5:33:53:66:
6d:b8:28:02:67:43:9e:8e:1d:cc:19:27:58:bd:14:
fd:ab:95:d8:c8:a4:26:85:ff:ee:42:94:4b:57:94:
cc:f1:45:bd:6c:1b:eb:6f:52:3d:a7:b8:7f:03:3a:
58:56:a9:ec:f2:bb:b9:b1:8b:63:e7:cc:09:17:b8:
31:f0:ef:8f:a7:fc:db:d5:3e:65:d0:aa:91:b3:9e:
be:38:72:3a:3c:ea:fa:20:f0:c3:0f:9a:76:b3:f7:
05:00:05:5f:fc:3b:1d:cf:dd:30:8b:ad:09:c3:8d:
4a:99:ae:f5:28:81:db:27:3c:b0:f2:3c:e6:b2:d4:
f2:15:e7:76:2f:aa:11:e4:b7:46:5d:c6:36:e9:61:
3f:3e:6d:b6:2a:b9:11:be:44:0d:f5:e8:14:8a:e2:
45:08:57:3d:c0:09:db:6e:e0:3c:8d:80:28:33:26:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:96:9F:E0:7F:B4:A0:DF:07:2E:77:C6:CF:97:E8:E3:2D:EE:5E
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/uaKWn-B_tKDfBy53xs-X6OMt7l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:3001::/48
Signature Algorithm: sha256WithRSAEncryption
4f:53:2f:95:1a:8e:b5:5e:c4:6f:dd:9d:f4:a8:19:4c:c4:5b:
44:e1:b0:1e:f4:f0:05:35:80:cc:a5:1d:cc:fd:2c:38:c9:55:
7c:6f:56:f8:46:da:37:90:75:b1:62:fe:14:52:a1:cf:9e:12:
fc:93:97:f2:90:6a:60:0a:3b:b6:3a:ac:4b:4f:5c:1e:b2:3d:
0c:2e:66:7b:87:36:d6:d8:af:bb:9f:04:9b:5b:5c:ce:a0:0a:
d3:db:d1:04:3a:58:f7:c8:16:09:80:44:b8:3d:f5:3e:4d:a7:
45:a1:04:3d:e1:fc:58:57:ff:df:31:43:af:8a:fd:bc:74:d7:
a1:30:ca:75:6f:0b:fa:42:46:2e:3d:0d:6f:b3:cf:41:54:8a:
8d:e0:7d:a2:65:07:e3:12:65:61:8d:d0:eb:75:18:91:ee:82:
b8:46:59:ec:2d:75:12:85:db:25:28:f3:99:b1:d7:22:7b:8b:
a1:26:7f:b0:85:9f:97:cd:60:8e:0c:5a:e3:9a:b3:34:27:70:
c4:49:76:db:25:2b:06:c6:b7:c0:4f:bf:58:7c:5c:7b:98:c0:
33:1a:be:b9:08:c7:f4:c5:41:b3:ec:8f:40:3f:f3:92:e0:49:
c1:08:96:0c:0d:53:dd:8f:25:15:e8:cc:fa:d4:4f:7a:df:ed:
00:83:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:44 2025 by rpki-client