Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/UTkFLviAuMp27oxusgrRynHZwdQ.roa
File: UTkFLviAuMp27oxusgrRynHZwdQ.roa (raw, json)
Hash identifier: Ii/WBw2xk9JCG8JxkG4nU1eB0lMxdCzAPVKbTbiKeX4=
Subject key identifier: 51:39:05:2E:F8:80:B8:CA:76:EE:8C:6E:B2:0A:D1:CA:71:D9:C1:D4
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019428231B5CF30927C250E42453CA3E313D
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/UTkFLviAuMp27oxusgrRynHZwdQ.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395747
IP address blocks: 2a06:98c0:1c00::/48 maxlen: 48
2a06:98c0:1c01::/48 maxlen: 48
2a06:98c0:1c0b::/48 maxlen: 48
2a06:98c0:1c4a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1b:5c:f3:09:27:c2:50:e4:24:53:ca:3e:31:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5139052ef880b8ca76ee8c6eb20ad1ca71d9c1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:f5:05:2c:05:e7:aa:46:4f:7f:0c:54:f4:
91:16:52:4e:b5:00:94:3c:d1:15:a6:ca:74:f1:8f:
ea:14:2a:7d:ff:50:70:1b:fb:cc:5e:99:7e:c0:c8:
1e:b9:ca:0b:79:11:c8:53:e5:19:2c:be:e4:ac:07:
e4:10:b6:1a:37:fe:cc:c3:51:1b:1a:c0:0c:36:fe:
bd:ce:5a:9e:04:ea:5f:30:d2:d0:b1:c7:20:04:bc:
b4:34:47:5a:aa:0b:a5:a1:28:b1:bd:ff:a2:76:e1:
9e:19:81:41:bf:63:bc:24:7b:ef:3c:b2:b7:7e:f0:
c9:73:3b:b1:af:50:14:0b:cf:90:5f:ae:8c:53:31:
86:a4:91:16:17:9a:69:47:09:41:5f:87:3a:d7:e6:
82:97:83:ac:7e:45:04:0b:bf:d8:39:3f:bd:c8:8b:
5f:f8:ef:97:69:a1:86:b2:93:c1:58:14:33:85:86:
fa:73:f7:67:f7:30:73:41:60:43:ad:2e:14:e3:38:
bf:30:ff:5c:17:73:85:fa:df:eb:b7:55:df:8b:0d:
e3:b4:e7:26:05:12:ff:86:ed:64:3f:e1:86:84:f7:
c1:1d:23:9a:4f:a5:91:55:c9:e8:63:33:32:24:b6:
b7:48:62:54:ad:88:3b:e8:e4:f2:21:32:71:63:70:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:05:2E:F8:80:B8:CA:76:EE:8C:6E:B2:0A:D1:CA:71:D9:C1:D4
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/UTkFLviAuMp27oxusgrRynHZwdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c0:1c00::/47
2a06:98c0:1c0b::/48
2a06:98c0:1c4a::/48
Signature Algorithm: sha256WithRSAEncryption
7e:bb:db:65:0c:66:4b:b7:ee:f0:80:37:04:1c:fb:6b:e9:38:
be:e4:2b:ec:5b:e2:3f:44:b7:d4:8d:2d:93:92:19:39:49:ed:
2f:01:54:8a:2b:fb:72:55:1a:a8:70:1d:c9:3d:00:3f:d3:d8:
d3:fe:ec:90:de:2e:93:17:a4:99:c7:3b:be:b8:7a:50:c2:37:
ee:29:3c:71:09:db:42:a1:4c:1b:f4:25:9c:a4:d3:65:f6:34:
8b:c0:10:19:4e:cd:11:b8:4a:7d:df:19:51:1c:33:3a:b9:ed:
34:89:d7:01:d1:d3:33:92:f8:65:ec:bd:55:85:70:9d:bd:06:
4d:e0:6a:96:52:98:bd:75:b6:68:a6:77:24:b2:90:4c:46:04:
4b:3d:78:69:d0:a0:da:ae:e3:b0:92:20:54:ed:0a:96:89:5f:
b7:ca:49:8b:14:9c:b3:9b:c6:e4:71:6e:72:b5:6e:05:07:98:
16:d6:95:0b:9b:a4:b5:1b:37:27:01:ef:1f:61:db:f5:97:f7:
fc:64:5f:a7:3a:66:ca:8e:7c:2a:7f:98:e2:4b:cb:d2:3d:39:
9d:ce:78:fa:bc:d5:65:a8:60:19:f2:9c:3e:08:e6:e2:86:4e:
9a:73:58:70:b8:a5:d9:35:a8:e9:0b:3d:e7:2c:40:6c:6e:2c:
cf:8c:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:16:06 2025 by rpki-client