Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa
File: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (raw, json)
Hash identifier: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=
Subject key identifier: 51:24:3A:87:50:66:19:7F:F9:97:AA:FD:26:CC:E2:3B:55:22:D5:5C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 01941F8C46F50AA23FA52ECA8CC2B2B08D33
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1267
IP address blocks: 2a02:b000::/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:46:f5:0a:a2:3f:a5:2e:ca:8c:c2:b2:b0:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51243a875066197ff997aafd26cce23b5522d55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:43:ad:b6:15:da:1d:25:d4:e6:4b:1e:93:
45:f7:d1:0a:75:c1:29:07:39:6a:fe:c8:fa:32:1f:
4b:07:dd:83:0a:c8:95:b0:9a:71:50:a9:07:67:98:
c7:25:0d:6d:02:e8:1e:9f:92:61:fe:bd:dd:d8:a3:
41:df:29:04:2b:21:fd:a7:95:40:1c:ed:19:15:83:
66:a4:a9:ca:eb:e2:ee:08:88:5e:5e:eb:5c:7a:f9:
fc:ff:cc:4e:3b:84:9d:6e:35:3f:3d:12:60:3f:d3:
05:c8:43:e6:8c:96:2b:c4:87:95:93:24:80:65:b8:
f0:a0:45:4a:25:9a:46:f8:9e:0a:6a:0f:78:b3:34:
f7:64:04:f3:bd:7c:85:4b:91:2c:b1:79:c9:e3:e1:
c1:e9:01:bd:aa:05:82:45:cb:56:6c:fe:91:65:b0:
b8:6d:53:6f:7d:8d:12:e0:85:2d:e6:a3:93:d8:bd:
d3:2b:c9:0c:ba:d7:cb:e9:82:a8:fb:ed:22:13:97:
00:be:8f:be:c9:2a:bb:9a:48:72:19:09:ec:51:94:
b3:d5:c5:0f:31:ad:c4:9c:82:2f:37:cc:16:69:70:
29:76:82:ba:bc:fb:2e:04:b9:3e:98:3c:ce:a0:32:
d1:91:f0:71:e8:58:fe:a9:13:31:1b:75:e9:ef:5e:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:3A:87:50:66:19:7F:F9:97:AA:FD:26:CC:E2:3B:55:22:D5:5C
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:b000::/23
Signature Algorithm: sha256WithRSAEncryption
18:57:dc:11:c2:64:0a:1f:8f:36:e2:e5:33:cb:0b:7d:6d:6d:
7f:c5:2e:c5:1e:75:b6:9c:3d:f0:c5:05:c8:9f:46:b4:03:30:
71:c1:1a:11:6f:e6:c6:4e:e1:23:82:f3:ee:e5:97:d8:0f:b0:
b5:e8:64:0b:73:03:f6:e5:cf:b6:12:81:cd:13:b3:a1:7f:04:
d7:64:57:70:b0:17:2d:a6:9e:fb:62:a1:31:58:3e:36:0c:24:
9b:d4:37:90:9e:f8:1e:d3:18:3e:3f:d5:68:7a:4d:03:5c:c7:
c7:1f:df:7b:92:74:8b:a7:69:99:62:49:a9:dc:fb:fe:48:2d:
5b:a2:e2:96:70:84:f0:0a:37:67:3c:84:6a:0a:ef:43:4d:9e:
1e:97:72:e1:c5:08:28:32:ad:5f:d3:58:54:fc:16:63:1e:7e:
ed:c0:df:f5:ae:62:95:dd:11:46:82:a8:d4:45:3f:87:03:fb:
3d:13:64:dc:71:39:59:50:2d:a8:bf:bf:22:6c:43:65:c5:f5:
8e:7a:6f:82:4e:a4:41:6f:37:fa:bb:9f:fb:de:58:1c:c9:48:
8e:1c:be:fa:ea:e7:bd:a9:33:6d:1d:6b:35:51:16:13:f1:8a:
f0:8a:b5:28:23:9c:6e:8d:ab:ad:0b:65:6f:8d:7a:c6:52:51:
18:ae:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:50 2025 by rpki-client