Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Uwcq8EdUOE0lHX7RyAm7QqdGBDY.roa
File: Uwcq8EdUOE0lHX7RyAm7QqdGBDY.roa (raw, json)
Hash identifier: GJCrMJmHqqZ0aZF2dW3ByniyUAUfz8DesvbD9lLmGOM=
Subject key identifier: 53:07:2A:F0:47:54:38:4D:25:1D:7E:D1:C8:09:BB:42:A7:46:04:36
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE766458B4885C341CD430A7EEA51
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Uwcq8EdUOE0lHX7RyAm7QqdGBDY.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208751
IP address blocks: 2a06:e881:6700::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:66:45:8b:48:85:c3:41:cd:43:0a:7e:ea:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53072af04754384d251d7ed1c809bb42a7460436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:98:a0:ee:d3:7a:03:cb:ad:5b:28:ab:97:
a5:df:b4:39:a0:46:ff:1d:74:57:d1:07:5d:e1:93:
db:1e:b2:c1:ef:12:cc:2e:ae:b3:41:c2:c2:16:fe:
bf:af:46:f4:e3:f4:2a:41:f1:d8:24:1b:e1:5c:59:
4b:39:5e:e9:86:f5:a9:fa:76:17:ab:e7:a5:2a:07:
22:72:30:ed:87:aa:f8:67:8c:3c:13:8d:fc:77:5b:
42:83:e4:c5:25:76:a6:1c:c6:7f:19:9b:1d:e9:67:
78:10:ab:40:9e:e1:8d:f0:d5:fb:fe:44:86:73:1d:
63:24:3f:05:fb:8b:e9:d5:93:a3:23:4d:5a:cf:de:
df:5e:f3:7b:1a:b9:57:01:6c:92:1b:ff:81:28:f0:
3b:5e:d9:87:b1:98:fa:f5:0a:c7:78:bd:22:f0:65:
4d:4b:89:8e:4f:ed:88:5d:1f:62:31:51:a5:8f:a5:
71:ab:08:0a:ba:16:21:a4:8d:fb:cd:ce:74:83:62:
ac:6e:d5:e8:d2:5c:9b:ea:6a:92:67:7a:c3:7b:8b:
a1:6d:86:5f:84:86:95:76:3a:35:f7:bd:ac:06:8d:
fc:b4:c7:dd:2d:65:08:bf:bf:6b:41:b6:36:9d:68:
d7:2f:09:2d:43:38:aa:ff:0a:ce:49:50:0d:8a:33:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:2A:F0:47:54:38:4D:25:1D:7E:D1:C8:09:BB:42:A7:46:04:36
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Uwcq8EdUOE0lHX7RyAm7QqdGBDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6700::/44
Signature Algorithm: sha256WithRSAEncryption
51:60:b2:49:d5:3c:47:1d:97:9f:83:84:5c:21:48:30:a8:85:
cb:38:71:d2:a7:21:42:62:2d:f0:31:18:47:8b:de:5b:33:f2:
89:a3:b4:52:2e:85:da:c6:25:ee:c8:cf:c3:39:a8:18:1e:c5:
a9:a8:57:84:46:0f:d6:58:96:12:bc:4c:53:b5:a1:c8:81:1d:
1f:c9:d6:72:c9:d3:f5:2b:cf:d6:8a:50:59:f2:b4:87:c8:71:
9d:95:b2:8d:65:e7:5d:2c:d6:f7:d1:3b:18:a3:7c:4a:12:ca:
ec:2a:05:e3:a6:d2:19:41:88:48:d5:3d:36:e7:c5:c7:79:31:
20:85:5f:dc:51:b8:ac:74:6f:8e:b3:08:e8:15:4f:3d:35:57:
e2:29:49:e1:28:79:0a:76:31:b6:ca:72:a5:a2:fa:55:c6:2b:
4e:54:2c:69:ea:4a:53:2f:b0:d4:6e:fa:91:a8:61:f3:72:07:
88:b5:bf:ec:37:b3:e5:5d:0d:14:ff:46:97:5b:83:61:37:d8:
17:3d:a6:43:f0:9e:bf:f4:3f:2f:6e:3f:44:91:f3:f5:43:76:
12:eb:d8:06:7c:94:54:74:18:e6:3f:e4:98:94:10:c0:17:bf:
67:31:76:08:c6:9a:4f:88:a2:cb:a7:ff:c0:89:87:b3:eb:00:
0f:f2:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:09:31 2025 by rpki-client