Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uP0pA77zOKxE-1ObZGSFy8_HPpY.roa
File: uP0pA77zOKxE-1ObZGSFy8_HPpY.roa (raw, json)
Hash identifier: xodvRuTfnUD07+nhhu3Z1nDqocsj8UzkdXrMSCuG864=
Subject key identifier: B8:FD:29:03:BE:F3:38:AC:44:FB:53:9B:64:64:85:CB:CF:C7:3E:96
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01902C493ADABAA4B0915EF5253DB34A4AEF
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uP0pA77zOKxE-1ObZGSFy8_HPpY.roa
Signing time: Tue 18 Jun 2024 16:58:34 +0000
ROA not before: Tue 18 Jun 2024 16:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214704
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7803:fa20::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:49:3a:da:ba:a4:b0:91:5e:f5:25:3d:b3:4a:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 18 16:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fd2903bef338ac44fb539b646485cbcfc73e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:cb:86:ee:ac:d9:60:6e:55:83:a1:e8:70:
5b:7e:e4:84:c4:91:df:f6:bb:f0:02:96:63:cf:eb:
e1:45:c9:f0:61:24:87:51:b6:27:45:f1:f1:ee:00:
3c:f5:79:bd:d0:8a:52:a0:3a:86:7b:a9:b5:3d:ea:
17:6f:82:d8:85:16:dc:61:1a:99:1e:e2:5c:e0:fd:
11:ff:3c:e8:5b:8d:c6:f3:bd:02:36:70:3b:92:51:
2f:56:af:48:71:55:e2:3e:3e:35:70:62:28:82:ed:
2a:89:5d:94:e3:f9:7d:e5:e7:07:7a:bc:83:24:40:
42:ef:ea:25:56:3d:09:65:3c:cf:2c:da:58:76:6f:
49:2f:73:4f:58:4a:d6:06:0d:e5:5e:a2:cc:bc:6a:
58:be:73:e5:5c:06:48:63:bf:49:72:4a:2a:89:18:
49:fe:d6:44:db:85:e6:fe:77:17:14:ba:8f:c9:11:
fa:f6:0c:ac:12:fc:b9:06:a0:4b:c7:4b:20:af:7f:
d1:cf:61:49:4e:20:a5:ed:ea:ea:5c:67:4a:48:9c:
2c:2a:55:31:c6:51:9f:be:fa:cd:7f:61:8c:b9:11:
70:36:68:35:54:bb:68:c7:62:9d:f8:fa:80:55:72:
8f:55:74:28:a5:9a:6c:47:d0:cb:4e:97:f9:9c:81:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:29:03:BE:F3:38:AC:44:FB:53:9B:64:64:85:CB:CF:C7:3E:96
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uP0pA77zOKxE-1ObZGSFy8_HPpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::/40
2a0f:7803:fa20::/44
Signature Algorithm: sha256WithRSAEncryption
21:53:10:e9:d9:d1:42:1e:56:87:09:ac:18:0a:ee:13:9c:55:
9f:2b:fa:35:bb:bf:0d:18:2a:e1:be:45:0b:5d:26:57:50:2c:
55:d3:74:40:c8:49:55:6a:0d:f1:4f:c3:84:b9:58:7d:ba:94:
56:58:50:cb:96:5b:c4:56:df:58:f2:cb:53:38:ad:a1:51:17:
f3:ee:21:75:24:58:09:2e:e9:4a:9f:7f:9a:1f:72:6f:37:04:
fb:95:d6:c8:fe:29:5c:5e:2f:53:bd:43:e8:b4:a7:b8:0c:7d:
06:a4:f1:00:f3:f3:5d:88:b1:80:cb:2b:b0:19:0e:a8:43:22:
73:82:39:22:c6:41:75:16:ee:20:6f:7d:ee:a7:b5:f3:e9:69:
37:b2:9d:a3:ed:8a:d3:f7:3e:69:a0:01:e3:8c:63:a1:c6:6c:
4f:89:eb:5c:5d:32:b2:fd:5b:6e:c2:cc:88:d6:a2:2e:56:dd:
4b:67:1c:6a:97:a8:28:df:d3:ce:8c:d9:f9:e6:87:51:91:d7:
cf:50:26:cc:d9:11:10:fd:2b:e5:01:6a:5b:c6:6f:ec:aa:b4:
9d:df:f3:a6:04:68:33:80:ba:46:19:7b:b7:19:e3:47:c2:74:
15:07:b1:00:99:ec:a3:e8:16:22:07:51:04:80:25:cd:dd:35:
a6:9e:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:42 2025 by rpki-client