Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U2htW7Kq39y-8RU6yyHB2iAatNc.roa
File: U2htW7Kq39y-8RU6yyHB2iAatNc.roa (raw, json)
Hash identifier: 1+Rtg1VPZli2SRAXfBqrjkKQyR8rHAIFJC/dhq4FxcE=
Subject key identifier: 53:68:6D:5B:B2:AA:DF:DC:BE:F1:15:3A:CB:21:C1:DA:20:1A:B4:D7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427481BAE71A31A7527CFA77FF22EA019
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U2htW7Kq39y-8RU6yyHB2iAatNc.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28459
IP address blocks: 2a0e:1a83:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1b:ae:71:a3:1a:75:27:cf:a7:7f:f2:2e:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53686d5bb2aadfdcbef1153acb21c1da201ab4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:ac:c6:ae:6b:f5:c7:c3:8e:28:e5:6e:b7:
40:b8:d6:b3:ec:33:49:e9:65:81:02:86:3e:72:99:
28:84:dc:05:1b:67:be:d3:39:5b:0e:cf:8e:cf:17:
d0:1f:5a:09:8e:93:57:d7:0a:46:81:06:39:a5:6c:
89:2b:fd:c1:6d:2e:d0:5e:8e:97:8f:3a:45:37:5d:
e7:0f:c5:5a:30:25:52:e4:7f:36:b7:7c:fd:eb:94:
35:76:00:f5:63:55:d2:59:92:0b:d4:b2:4a:b4:c7:
3c:a9:3c:b3:5c:47:bc:92:f7:2f:0b:7b:c9:39:49:
c4:5a:42:1c:94:12:60:56:b5:d9:85:c9:54:cd:25:
82:3d:82:33:22:16:d8:8f:fa:c5:53:ff:83:48:c4:
00:e0:7c:d8:db:05:2b:d1:1d:78:e4:22:71:70:ca:
d2:ab:48:9d:f4:05:f3:87:26:67:a9:f5:09:1b:f9:
d0:72:ca:5b:0a:2b:e7:8b:73:27:c1:f3:84:a1:ee:
e3:43:d1:72:d3:1e:74:e1:ee:da:b4:a8:02:40:ae:
1b:80:68:ee:6e:7d:67:6a:f0:90:ea:00:a3:22:26:
cf:46:88:9b:ca:28:1c:0e:66:c6:4e:f8:d9:de:6c:
21:c0:12:89:1d:67:08:0b:11:09:a0:39:80:2c:0f:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:68:6D:5B:B2:AA:DF:DC:BE:F1:15:3A:CB:21:C1:DA:20:1A:B4:D7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U2htW7Kq39y-8RU6yyHB2iAatNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a83:1::/48
Signature Algorithm: sha256WithRSAEncryption
5f:ef:bb:26:c3:0b:8c:f4:83:2e:e2:53:12:26:f9:53:f4:12:
38:76:82:a7:06:6f:38:46:87:2a:cf:85:89:96:98:14:95:bd:
7c:72:de:63:10:3d:7d:ad:5b:de:14:b7:45:e4:88:69:c7:89:
e5:62:52:b0:7c:54:18:05:6f:99:b8:1c:90:2a:e4:e8:11:45:
f1:be:54:71:f7:28:28:b2:37:7c:c3:35:2d:6e:3b:96:ab:82:
4f:0c:15:f2:2f:8e:19:9a:71:01:0a:d6:7f:fe:6c:3b:e2:a8:
77:0a:65:88:39:09:0d:9c:1f:51:80:e6:e9:a1:c2:19:aa:bb:
01:c4:18:a0:56:70:cf:a3:d9:c5:3d:0b:61:a6:29:14:72:db:
12:a1:e8:2e:a6:f7:82:67:fa:66:62:eb:51:4b:d1:bd:19:07:
65:0c:ab:db:48:75:14:8e:67:97:bc:5b:f5:99:74:0c:73:41:
a8:c1:7b:05:2d:9f:21:99:fc:fb:71:d6:52:97:9f:c5:fb:10:
ca:5a:a3:57:8a:d7:4b:94:82:65:ca:82:e9:11:a1:43:b9:06:
c3:0b:eb:40:27:a2:a7:39:33:b6:3b:66:73:3c:da:df:6d:6d:
2f:66:9a:2f:bc:a1:2f:fd:37:15:20:2b:27:b6:40:71:16:83:
4d:8a:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:51 2025 by rpki-client