Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/_uc6ePERzBPoPdpauMr-UXjyyZU.roa
File: _uc6ePERzBPoPdpauMr-UXjyyZU.roa (raw, json)
Hash identifier: vCpgESgcY5qI/pPtl3hBvs20Co9NLRffYPoazf5J82E=
Subject key identifier: FE:E7:3A:78:F1:11:CC:13:E8:3D:DA:5A:B8:CA:FE:51:78:F2:C9:95
Certificate issuer: /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial: 019473BCE46E1581ED774038FAFDE3546327
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/_uc6ePERzBPoPdpauMr-UXjyyZU.roa
Signing time: Fri 17 Jan 2025 10:09:06 +0000
ROA not before: Fri 17 Jan 2025 10:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 130.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bc:e4:6e:15:81:ed:77:40:38:fa:fd:e3:54:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Validity
Not Before: Jan 17 10:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee73a78f111cc13e83dda5ab8cafe5178f2c995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:c5:f9:ff:51:61:9f:d0:76:57:42:b8:91:
6d:a4:f0:81:46:63:05:85:e9:be:40:29:c5:b3:83:
4b:8a:1a:c9:33:ef:77:bf:73:5c:2b:43:1f:2b:d4:
3a:b1:4c:52:cc:4a:8a:95:34:53:48:ec:09:ab:fd:
3a:1c:32:a2:97:c1:f4:2a:9c:87:35:36:6b:c9:09:
25:bf:96:f3:aa:5c:ec:90:4d:07:ef:73:06:05:c9:
ec:88:83:93:a7:7a:37:f9:3b:b6:7a:5d:b7:a5:b8:
7e:27:52:fa:aa:11:57:09:eb:87:76:32:f6:14:d7:
31:dd:be:ff:bf:02:8f:be:99:bc:d9:27:a8:ab:2a:
fa:86:49:92:55:49:40:d9:9a:d0:84:2e:1e:62:ae:
12:d4:ae:f3:ab:ed:ea:f2:79:ff:23:58:5c:df:3b:
f2:0c:d9:e6:e2:3f:1d:d5:63:36:c9:01:87:3c:9f:
67:9d:02:9c:6f:30:61:f0:a0:20:8d:dd:5c:ef:3b:
06:05:71:49:6a:a6:25:c8:28:7b:c3:70:93:0b:27:
d7:d4:69:44:b1:80:00:06:53:80:e3:ca:bf:6d:37:
03:32:e6:90:a6:f1:14:ce:2a:38:36:f2:d1:30:fd:
8f:5e:af:90:56:fb:82:0d:62:7b:de:38:26:bf:13:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E7:3A:78:F1:11:CC:13:E8:3D:DA:5A:B8:CA:FE:51:78:F2:C9:95
X509v3 Authority Key Identifier:
keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/_uc6ePERzBPoPdpauMr-UXjyyZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:c9:76:aa:f8:62:25:53:17:e4:2b:4a:0d:d7:1b:c2:21:80:
45:22:63:26:62:14:a3:29:82:64:cb:47:1f:5f:ce:e4:cc:25:
af:66:01:4f:3e:99:5b:e1:ac:85:33:8c:9e:cc:f0:0d:98:f3:
b3:f5:e9:3c:43:a1:fc:ba:a2:31:11:56:4a:96:91:d2:d1:7d:
28:b2:54:62:3e:60:f3:53:cd:cf:27:2b:5b:35:84:ab:9f:75:
61:bc:e8:09:63:02:50:0a:b7:78:53:47:ce:67:6b:95:dc:9e:
9e:31:ef:46:a8:04:3a:c6:82:bb:60:c8:18:fd:cf:a0:e8:f8:
5e:6d:1e:91:7c:2f:e0:b2:7d:6a:63:16:0f:77:13:39:bc:9b:
3e:9a:14:19:31:6f:a5:a6:e3:43:b9:51:40:c5:47:f2:0d:92:
6e:fa:1e:1f:d2:3e:f6:1b:63:d0:8a:44:b7:aa:6d:38:f7:12:
98:53:3d:ce:b1:ee:74:79:3d:23:34:7d:3a:56:c5:1e:41:2a:
04:63:3d:bb:51:03:a3:6e:9f:01:de:96:82:3a:5d:80:29:47:
e1:27:e5:7e:31:73:37:07:2e:49:66:19:c5:1e:a6:a6:23:8c:
42:cf:60:6b:2a:a2:3d:40:39:f7:bb:3e:d7:7e:99:9e:ab:1a:
49:bc:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:54 2025 by rpki-client