Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/UkqG3VMYAz9uABWF42sKAydGWoA.roa
File: UkqG3VMYAz9uABWF42sKAydGWoA.roa (raw, json)
Hash identifier: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=
Subject key identifier: 52:4A:86:DD:53:18:03:3F:6E:00:15:85:E3:6B:0A:03:27:46:5A:80
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 0194258EF817CDA465367E617BF39B9FAFD6
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/UkqG3VMYAz9uABWF42sKAydGWoA.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5524
IP address blocks: 2001:67c:23b8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f8:17:cd:a4:65:36:7e:61:7b:f3:9b:9f:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=524a86dd5318033f6e001585e36b0a0327465a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:f6:11:2b:ba:10:65:46:76:a8:88:78:ad:
e4:bf:2c:c0:90:01:55:de:06:b6:45:65:1f:d8:5a:
5c:32:a9:e3:72:ed:9c:af:9f:52:ff:c6:2b:7c:ea:
40:c5:24:01:01:f0:f9:9c:25:b7:93:be:ae:8f:99:
21:92:84:0b:ba:89:91:bb:98:35:56:29:1c:ea:8c:
4a:f8:cb:e8:94:4e:b7:7a:c1:ac:4d:47:56:ea:da:
7e:8f:fc:53:55:6a:bd:07:54:28:4d:d5:23:e4:7d:
02:0c:3c:25:d1:8e:82:35:f4:02:81:d0:2e:65:7a:
81:14:06:92:3a:cd:d9:4b:34:e8:c4:e1:3c:ac:bd:
61:13:07:da:d1:3f:eb:45:e8:43:02:95:b3:6e:5d:
21:d2:78:16:79:af:33:2d:7d:19:75:8c:5e:70:4c:
30:d7:2d:b2:ad:66:44:cc:11:70:bf:f0:b2:11:69:
12:9a:0d:f9:8e:b2:bf:74:b9:54:f7:64:ac:60:56:
84:e5:b3:68:08:39:9b:aa:17:23:2a:84:ff:a2:0f:
1a:c2:cf:34:56:54:6c:4b:e2:d4:b6:ea:8e:9c:3e:
01:3f:33:98:b3:6b:e3:61:6f:dd:16:d8:96:bc:a4:
dd:be:88:c9:c8:e9:54:0c:83:38:31:3a:dc:c3:a8:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4A:86:DD:53:18:03:3F:6E:00:15:85:E3:6B:0A:03:27:46:5A:80
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/UkqG3VMYAz9uABWF42sKAydGWoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:23b8::/48
Signature Algorithm: sha256WithRSAEncryption
23:c3:87:88:d9:2b:ec:06:81:67:78:c2:9a:f5:9d:34:11:b4:
3d:20:da:6a:3e:74:62:dd:d5:a1:a0:d1:52:b3:24:7b:13:d8:
77:c5:8a:84:a2:46:7e:d9:fa:d9:15:60:66:5d:58:3a:e4:5a:
05:bd:71:0d:ee:d9:99:90:e1:08:1a:a3:6d:e9:8c:84:a0:52:
1a:fd:e5:d2:97:2c:52:fc:58:c6:95:bf:0a:4e:84:39:8c:43:
f8:a5:26:35:e9:d9:c2:93:e5:80:06:ae:46:81:a1:d8:f8:7c:
c6:23:96:aa:6d:23:47:df:05:87:45:da:e6:05:e3:89:6b:e1:
cc:6e:5e:d9:9c:f5:28:7c:df:70:fb:35:53:e8:54:a0:54:e8:
25:76:17:88:45:66:0c:1a:b6:be:36:62:e7:33:76:ab:18:cb:
64:d7:ee:b6:e4:50:fb:c3:34:37:ed:c3:10:9c:c0:90:a7:83:
6e:70:20:e6:33:e1:1b:15:76:e1:d8:44:ae:bd:6d:6a:a4:40:
98:da:39:07:82:d4:24:a5:c8:e1:4f:42:83:ac:8b:19:43:f0:
56:11:3b:d9:ae:73:cc:77:5b:4f:d3:9f:7d:31:42:7e:32:be:
8f:dd:fa:c3:e1:48:e9:74:2e:cf:1b:40:af:f1:eb:ca:ac:65:
1d:c8:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:23:14 2025 by rpki-client