Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/1UuvvUSZ1dJJyYkcFcJhO38j-RM.roa
File: 1UuvvUSZ1dJJyYkcFcJhO38j-RM.roa (raw, json)
Hash identifier: 8WOuIrBUtSC35rdVsuls9xOK6IVHDOPVKI1ZFXMIPTU=
Subject key identifier: D5:4B:AF:BD:44:99:D5:D2:49:C9:89:1C:15:C2:61:3B:7F:23:F9:13
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369FA7C4A9A7B7F1F4017C40163ECAB
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/1UuvvUSZ1dJJyYkcFcJhO38j-RM.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215575
IP address blocks: 2a0f:7803:fa90::/44 maxlen: 48
2a0f:7803:fb20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fa:7c:4a:9a:7b:7f:1f:40:17:c4:01:63:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d54bafbd4499d5d249c9891c15c2613b7f23f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:e8:25:22:71:d7:51:43:a0:cd:5f:73:96:
03:35:1d:91:a4:1e:04:3f:c0:5a:63:cc:44:0a:41:
31:c2:85:99:47:57:ad:26:c0:0d:6d:7e:8a:1c:8b:
b2:6a:5b:78:7f:e4:51:37:63:a2:31:24:09:6e:6d:
43:c5:06:06:91:b5:bd:f8:79:af:6c:e2:8f:51:af:
7b:db:23:45:4f:59:e5:75:e5:74:ca:37:76:5c:72:
74:ed:bd:22:b9:5c:50:29:e9:2a:50:f5:24:d0:47:
93:e5:00:a9:bc:ad:9b:ca:c7:e9:77:24:c2:aa:8a:
c1:d4:61:0d:e6:5e:85:e5:ee:aa:91:be:08:87:a1:
db:bd:f4:fd:cd:4c:92:ed:39:17:03:45:f9:d3:c3:
52:3e:a7:66:bf:db:90:8c:90:9e:9c:9b:fa:41:83:
9c:23:9b:4b:55:3c:86:20:44:47:b8:22:74:98:1b:
a2:e6:36:5d:e9:d4:80:42:5c:d7:24:c0:38:47:b7:
a9:9f:4e:d9:bc:ea:79:06:f1:a2:ae:5d:75:0d:6d:
31:fb:a9:dc:db:cc:35:ed:99:b4:b6:8c:69:a0:d5:
16:02:0b:1b:12:60:0a:6c:da:b5:da:2c:dd:b9:2d:
79:86:d8:cf:c5:9c:3c:24:c9:d3:f1:9d:c0:50:48:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4B:AF:BD:44:99:D5:D2:49:C9:89:1C:15:C2:61:3B:7F:23:F9:13
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/1UuvvUSZ1dJJyYkcFcJhO38j-RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fa90::/44
2a0f:7803:fb20::/44
Signature Algorithm: sha256WithRSAEncryption
7a:71:03:6a:84:54:be:89:91:b2:1a:f5:00:38:f4:6b:01:3c:
af:66:a0:c8:5d:31:92:1e:89:ff:5b:a9:77:30:74:ba:fa:e9:
7f:11:f4:13:64:a1:15:24:28:c4:ec:47:6d:08:23:37:f8:42:
af:5c:17:2f:94:58:5e:e5:f3:33:17:36:77:14:9f:39:10:67:
8a:ed:e0:55:7a:d2:5f:92:68:49:91:c7:3a:c2:e5:0e:42:20:
06:05:84:83:09:63:04:ab:78:10:fe:72:73:83:60:eb:10:db:
00:0c:2e:6c:4c:b0:02:5b:ef:3d:02:77:e5:48:05:4c:97:bc:
42:8e:66:1c:83:d6:38:0b:7b:4e:79:1c:ae:bc:60:58:80:54:
8c:f8:d4:d8:f9:56:54:9c:e7:93:ca:1e:61:cf:c9:3c:e5:4c:
9f:6f:7f:e0:b0:2e:f1:7b:d6:b2:99:77:16:0e:d4:e3:c4:b4:
1a:71:35:8c:1b:c9:41:0f:dc:a4:04:0f:ba:cf:12:e2:15:eb:
37:e9:ae:db:e9:0b:9a:ff:1c:3f:fa:b4:6f:1d:89:b5:b5:26:
4c:07:e6:c4:26:40:d2:aa:dc:2f:99:14:90:5e:81:9c:a5:89:
ad:5a:ba:23:68:49:24:ff:20:f4:0b:1a:e7:79:c2:6c:aa:31:
2d:0b:8f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:26 2025 by rpki-client