Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uBJXwAdcBKBDFp33Ju7SgQ_Zfc4.roa
File: uBJXwAdcBKBDFp33Ju7SgQ_Zfc4.roa (raw, json)
Hash identifier: XYtjooHqcGkXm7RYBAMKtgnVAfFNohSGtrvYxRnK2yg=
Subject key identifier: B8:12:57:C0:07:5C:04:A0:43:16:9D:F7:26:EE:D2:81:0F:D9:7D:CE
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194731BC302F12EE9F46DE1A75488F9D4D8
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uBJXwAdcBKBDFp33Ju7SgQ_Zfc4.roa
Signing time: Fri 17 Jan 2025 07:13:06 +0000
ROA not before: Fri 17 Jan 2025 07:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:1b:c3:02:f1:2e:e9:f4:6d:e1:a7:54:88:f9:d4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 17 07:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b81257c0075c04a043169df726eed2810fd97dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:f6:b6:f4:45:11:ca:68:c6:cf:20:91:54:
6b:5f:98:b3:0d:be:54:1f:75:3f:8a:00:42:30:6d:
b9:54:39:db:dd:eb:fe:0a:ed:9c:e7:e2:25:1d:50:
36:c5:58:b8:b7:e5:09:c6:61:2a:8a:6b:e7:1f:11:
9d:c0:7f:f4:da:5e:9c:ee:b5:cb:3e:d1:10:d7:2f:
6c:dd:6c:8d:ac:7c:59:43:11:0c:09:61:5b:dd:67:
49:e0:57:94:78:19:28:dd:ae:01:36:c0:72:5d:88:
92:a7:4e:18:b0:e4:75:2f:1d:bc:ed:cc:a5:b4:d4:
5a:9f:ac:ed:b4:20:97:58:13:d1:56:15:c9:7b:58:
3c:e8:5e:61:8d:da:4e:5b:6b:f6:0c:c9:16:39:8e:
32:21:d7:31:5b:99:97:fb:4b:97:7f:01:4b:f7:49:
76:89:e7:09:bf:cc:01:43:26:f6:ee:2f:83:1e:c7:
ac:87:ca:90:d3:bd:bb:41:6c:e5:3d:0d:10:3a:92:
e3:27:ad:96:53:8b:0b:90:42:6e:27:f6:4f:57:a6:
aa:98:41:3e:cc:f1:ce:cf:7a:5c:a8:79:5e:7b:79:
3e:29:26:7f:8d:49:07:88:51:ae:3f:c9:bd:fc:14:
da:06:4b:70:db:de:09:0e:9d:0d:54:6d:f7:85:5c:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:12:57:C0:07:5C:04:A0:43:16:9D:F7:26:EE:D2:81:0F:D9:7D:CE
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/uBJXwAdcBKBDFp33Ju7SgQ_Zfc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
0d:46:03:00:eb:3e:9e:39:be:72:bd:7c:28:b4:2a:a4:27:05:
b0:36:68:41:6c:44:d6:c0:33:7f:50:ab:b6:3b:24:18:f1:53:
4d:c9:e3:16:17:93:a3:e0:a5:32:57:72:e0:eb:c7:a4:75:ad:
da:1c:be:21:55:fa:45:4c:1c:d7:da:66:de:b6:85:91:4e:d3:
de:c4:a4:f6:22:fd:79:88:96:88:6d:d0:56:33:e8:a8:9d:5e:
0d:ae:52:e7:07:e9:44:81:08:37:0b:88:1a:c8:c7:b9:46:e4:
d0:9c:e4:d0:e3:fd:61:21:e4:63:35:3b:6e:14:84:5d:53:b5:
b0:52:27:69:7c:45:c7:2b:c3:f7:31:4e:d0:a4:f2:57:55:87:
3d:9c:f6:ed:b3:8e:9a:6a:29:f8:9b:ae:74:6e:eb:ff:ff:cc:
91:eb:15:3a:74:a2:e0:40:21:e9:ad:98:22:c1:93:91:04:88:
61:91:eb:a4:64:7a:2b:98:b9:a7:35:7d:16:7b:23:29:bc:2c:
f0:0b:3f:c0:3d:41:6e:3e:a3:de:25:1a:25:35:fd:b3:4e:be:
06:56:41:a8:b4:40:05:64:af:62:65:bb:5f:2a:cc:39:55:81:
b4:94:f7:da:40:9d:bd:8c:c0:55:a4:90:c6:ab:d8:f8:84:5b:
dd:b0:81:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:12:00 2025 by rpki-client