Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/Ungcud01aQHgTMIDHqxKgOj76qo.roa
File: Ungcud01aQHgTMIDHqxKgOj76qo.roa (raw, json)
Hash identifier: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=
Subject key identifier: 52:78:1C:B9:DD:35:69:01:E0:4C:C2:03:1E:AC:4A:80:E8:FB:EA:AA
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019420D5B8C7A7CBFEBA667A11AB54C29A82
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/Ungcud01aQHgTMIDHqxKgOj76qo.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42873
IP address blocks: 2a02:d480:240::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b8:c7:a7:cb:fe:ba:66:7a:11:ab:54:c2:9a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52781cb9dd356901e04cc2031eac4a80e8fbeaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:6f:33:73:d7:7f:7c:28:04:ed:8c:b4:1a:
c9:94:60:23:4b:f6:d0:93:88:51:e3:bf:fa:ba:b8:
26:85:15:c6:93:32:5b:84:4b:8a:d6:7f:71:64:a7:
5c:07:59:a6:bd:ae:74:8f:37:71:94:82:43:a8:57:
81:fb:9a:b7:0d:d1:47:de:a6:13:be:b8:7c:cd:64:
c0:f8:17:dd:65:17:85:c9:4b:ca:a7:e3:92:39:8e:
af:32:09:b6:c8:e1:57:9e:1c:02:6e:99:43:c4:de:
8a:2f:ce:96:47:6f:5d:0f:66:7c:42:e4:6e:75:d5:
c5:e5:78:02:0f:60:78:a9:67:32:ec:7c:c9:71:99:
97:8c:66:eb:11:c8:5a:e3:15:63:da:1d:4b:ee:1c:
18:c3:2c:78:fe:15:3c:9c:c4:1c:25:4c:2b:69:da:
9d:a0:f5:53:ed:cd:f5:12:64:3d:09:24:bf:3f:84:
0d:22:39:15:2f:bb:a6:51:c5:83:32:cc:c9:45:f1:
6c:cc:3b:85:ba:48:97:ec:99:a7:98:4b:a5:75:4a:
64:bc:75:3a:32:56:9e:57:b6:19:53:72:fa:72:5b:
fc:15:5a:ce:39:c1:ea:ad:4a:56:6d:e8:b2:e4:c8:
c0:78:19:c7:11:8f:c5:bb:ab:9c:33:63:7b:95:d7:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:1C:B9:DD:35:69:01:E0:4C:C2:03:1E:AC:4A:80:E8:FB:EA:AA
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/Ungcud01aQHgTMIDHqxKgOj76qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d480:240::/42
Signature Algorithm: sha256WithRSAEncryption
6a:74:f3:ba:83:63:1d:49:cb:03:ce:ca:c7:e5:1c:2b:93:6a:
5a:d1:77:ae:83:23:40:f5:ab:88:26:b3:b2:51:6e:ce:ab:40:
15:e6:74:14:fd:0a:55:25:5f:71:36:d7:2b:65:7a:9a:b7:7c:
d7:f0:36:0d:2f:cc:76:fe:49:8b:5d:72:fb:7c:8e:50:ef:68:
ba:24:be:04:20:9f:70:95:de:94:3b:bf:86:be:f7:f3:b5:6f:
dd:3d:7f:dd:89:23:19:43:a0:90:21:a4:0b:d1:06:66:ce:e1:
3b:b3:0a:eb:f6:fb:96:c8:fa:7f:6f:1f:f1:50:c2:1e:ac:de:
ae:b6:a4:97:5c:7a:a5:b7:23:8b:b1:64:c6:16:e0:04:47:5e:
ed:8f:b4:d9:52:78:35:be:05:16:f5:9d:dc:b3:f0:b3:01:e9:
6c:0d:dc:f9:b4:05:60:85:94:0d:50:97:8e:1a:20:16:7b:64:
c3:bb:1b:bf:0b:6a:a4:a3:e3:27:84:ee:50:fb:26:00:3c:1f:
65:60:a3:aa:c8:85:1e:e7:49:7d:e1:be:fc:f0:6b:a6:fe:03:
df:85:d8:8f:a5:00:8c:4c:1d:ff:aa:ad:60:aa:04:84:53:db:
38:45:81:d2:7b:e2:0c:e6:9a:ce:fd:fb:a2:a2:1d:e1:50:fe:
15:d5:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:07 2025 by rpki-client