Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UoddXtwOr49lm5N9i-xRYdw3YIw.roa
File: UoddXtwOr49lm5N9i-xRYdw3YIw.roa (raw, json)
Hash identifier: C1CNzsw0mMFdq8eRWry5FUAuwknpQBgYdgMPYzK5TR8=
Subject key identifier: 52:87:5D:5E:DC:0E:AF:8F:65:9B:93:7D:8B:EC:51:61:DC:37:60:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274824B1B1103E1BB6E956FF3626621F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UoddXtwOr49lm5N9i-xRYdw3YIw.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 2a11:3500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:24:b1:b1:10:3e:1b:b6:e9:56:ff:36:26:62:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52875d5edc0eaf8f659b937d8bec5161dc37608c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:96:06:e3:2d:5c:a7:e1:5e:78:38:d0:8b:
5f:95:e9:c0:66:d6:ca:5c:26:f4:7c:db:a3:54:31:
19:d9:47:d4:6d:b2:12:52:dc:1f:c7:c7:48:5e:2a:
7f:cd:01:8d:89:36:72:b2:38:c4:ee:77:27:7f:e8:
af:8c:43:38:c0:8a:ee:41:a6:37:18:66:9e:80:b5:
86:fe:9a:9b:20:00:33:b4:0e:09:c5:54:a0:f6:26:
ac:bb:3e:a5:6c:7d:82:bf:a1:3f:bc:ba:6d:58:84:
4d:fa:ec:22:8b:48:9f:9a:22:3b:2b:33:8a:f8:d0:
85:10:fa:87:14:45:ff:72:79:92:64:d1:37:8f:ac:
08:b3:90:86:1d:80:c1:76:df:7f:1d:8f:ae:d6:d5:
8a:33:da:90:be:c1:27:6c:4c:b5:f8:79:7f:53:29:
d7:66:52:97:08:33:0b:ed:f5:0b:01:d4:11:27:9e:
0b:39:ef:54:f5:c1:aa:f7:81:54:43:44:b5:b4:26:
98:74:9e:22:df:b0:c3:61:d8:95:bd:c0:e1:5c:01:
13:c0:d4:31:47:9b:dc:dc:9c:15:91:15:1e:83:75:
dd:27:c7:18:b0:f2:70:2a:35:80:fb:2d:f2:cb:50:
2a:14:d8:8b:d4:8c:e9:83:b6:91:42:7a:ef:5c:0e:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:5D:5E:DC:0E:AF:8F:65:9B:93:7D:8B:EC:51:61:DC:37:60:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UoddXtwOr49lm5N9i-xRYdw3YIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
75:92:ea:3d:a0:9d:b7:c3:42:91:e1:e6:10:ad:f8:7a:06:c8:
4c:06:aa:b9:ef:ae:7b:0a:dd:a6:76:f5:15:19:04:f8:70:46:
58:10:a8:91:45:1b:0a:4a:c3:55:6d:fb:fa:ed:9d:16:89:7f:
62:72:f3:b2:3b:90:71:97:aa:14:1a:48:e9:78:cb:e5:48:68:
8e:85:7f:f0:0a:bb:cf:66:c7:2f:32:5a:d0:16:f6:71:fe:ca:
62:41:b8:16:15:6f:d7:78:67:3e:ce:22:bb:a1:6a:6e:fc:b7:
3f:1f:dd:ba:b8:5d:66:2b:0a:41:7d:9b:6c:79:63:b9:59:76:
ec:25:4c:62:48:07:b8:40:70:a0:75:4c:72:5f:f9:d8:8c:0b:
6b:15:c6:89:e9:b2:60:fb:bb:fa:e5:e0:d5:4a:2c:f3:26:f7:
27:80:6a:59:2a:ae:8a:90:30:2a:14:98:2e:fc:1c:85:91:86:
ea:0b:31:2e:6b:07:23:f4:fb:ee:ca:31:45:e2:e6:43:fd:e7:
2f:5a:2b:98:43:e1:d8:9a:82:8e:02:88:35:7f:47:a6:b3:26:
0c:88:31:bf:f2:29:73:4c:bc:cb:64:a5:9c:63:4a:10:86:3d:
f4:35:50:15:ff:7e:5b:a6:d7:9c:35:4f:f5:44:57:e2:86:52:
b9:ca:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:56 2025 by rpki-client