Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UqmxxAO4uacF9Pb8HLTLEWnexOY.roa
File: UqmxxAO4uacF9Pb8HLTLEWnexOY.roa (raw, json)
Hash identifier: XN/JeBVeWfks7oijB4p2uvOK4Se08vZvSC6ZP1KMNCI=
Subject key identifier: 52:A9:B1:C4:03:B8:B9:A7:05:F4:F6:FC:1C:B4:CB:11:69:DE:C4:E6
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6F2742BEDBE64A8E66043CA96E76
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UqmxxAO4uacF9Pb8HLTLEWnexOY.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 2a12:bec4:110::/44 maxlen: 44
2a12:bec4:10b0::/44 maxlen: 44
2a12:bec4:1180::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6f:27:42:be:db:e6:4a:8e:66:04:3c:a9:6e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52a9b1c403b8b9a705f4f6fc1cb4cb1169dec4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:39:2c:ce:86:c4:b1:2d:a5:5e:33:e6:6b:
0c:18:e4:17:67:bc:d9:fb:c7:4a:1e:78:c2:4f:96:
c7:da:29:be:e7:ba:a5:c0:03:50:1a:f4:1f:56:fb:
a8:46:1f:ed:7a:6c:27:1f:20:68:41:34:48:8a:f8:
7f:43:b5:85:1f:c3:47:42:d5:c6:93:f4:53:ab:b5:
1e:0b:01:f3:6b:77:62:1e:b4:d1:65:8f:ef:bc:f3:
27:fd:8b:65:07:bd:b7:6f:fc:51:43:f1:c7:bf:92:
2f:34:6d:86:0e:a4:9d:7c:43:59:cd:6f:62:6d:b9:
bd:49:39:e0:fa:b7:14:3a:15:79:97:3e:a1:de:ee:
fe:5b:bd:c8:c8:8e:74:82:22:5c:0a:35:45:bd:55:
a2:9a:b1:e7:66:57:b4:44:9d:38:25:5f:93:dc:48:
84:22:48:bf:b3:9c:f6:62:7e:bc:82:af:a2:40:3e:
38:a1:67:fa:ec:fc:fc:35:2e:91:22:ab:c8:da:7e:
ef:bd:2a:25:46:0c:19:f0:0f:60:72:00:01:de:5b:
f5:8e:41:8c:4c:88:8a:b2:7d:19:27:9d:cf:e9:62:
05:2c:62:3b:47:91:c3:be:19:9e:4b:1f:34:6b:43:
4b:95:c4:64:07:91:b4:90:34:87:1a:4c:3f:0e:52:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:B1:C4:03:B8:B9:A7:05:F4:F6:FC:1C:B4:CB:11:69:DE:C4:E6
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/UqmxxAO4uacF9Pb8HLTLEWnexOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:110::/44
2a12:bec4:10b0::/44
2a12:bec4:1180::/44
Signature Algorithm: sha256WithRSAEncryption
96:d6:be:5b:b9:1b:23:8e:33:da:d2:a0:4e:73:21:31:1e:6b:
26:1a:5e:21:76:6c:3b:2c:31:fd:2e:19:b3:08:cd:02:8c:d7:
a7:ce:a0:15:2b:19:80:bd:5a:5e:55:fa:60:cb:72:d2:da:ab:
97:c4:c3:f3:86:45:66:ff:2a:97:8c:4d:ee:94:0f:c4:14:5f:
18:84:8b:34:46:c7:70:45:88:9b:2d:57:9a:b9:4e:07:a1:7e:
e2:76:59:9d:9c:73:a5:74:5a:0a:5e:52:62:7b:e7:5d:41:43:
c3:e1:a4:91:a1:83:88:94:b7:20:43:c4:b3:b0:c4:69:88:6d:
bb:1d:64:28:1b:0a:d1:75:a8:59:64:01:b5:04:0c:a7:fb:ec:
7a:fa:6c:22:17:d6:37:8c:b2:eb:bd:cb:7a:ee:9d:0a:2a:07:
8a:ba:e7:69:58:24:7d:dc:30:49:17:1d:6e:df:73:1a:7c:fb:
3c:64:d8:9b:93:96:ef:40:cf:33:16:b5:85:36:a4:91:86:75:
07:19:4d:6f:2f:36:cc:6f:e7:f8:2f:f8:b6:dc:a0:91:45:6c:
3c:22:53:7c:0a:ae:51:87:4c:f4:53:c2:4c:d7:8f:d1:4e:9a:
29:b7:bd:1c:6e:dd:7d:75:bf:25:00:e8:91:84:86:38:44:17:
31:27:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:27 2025 by rpki-client