Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/uoIeYfnylNfjlZQZoQi39c5kYW8.roa
File: uoIeYfnylNfjlZQZoQi39c5kYW8.roa (raw, json)
Hash identifier: ZlvwkUflglCQFRXXOihpexJLLIkoN3ZRIM0eCvRASsE=
Subject key identifier: BA:82:1E:61:F9:F2:94:D7:E3:95:94:19:A1:08:B7:F5:CE:64:61:6F
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 019425FD6FC131151F1D0DE3B1D338190435
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/uoIeYfnylNfjlZQZoQi39c5kYW8.roa
Signing time: Thu 02 Jan 2025 07:49:13 +0000
ROA not before: Thu 02 Jan 2025 07:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 2a0b:ee40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6f:c1:31:15:1f:1d:0d:e3:b1:d3:38:19:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 2 07:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba821e61f9f294d7e3959419a108b7f5ce64616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:9a:fe:d5:48:43:4d:04:85:26:c7:fb:6e:
3a:cd:a8:84:63:cb:7b:f4:2a:b0:c4:59:2b:51:18:
62:32:e6:28:20:fe:24:6b:81:8d:16:eb:85:8f:59:
cb:a4:d0:f0:68:f6:06:90:34:1e:d7:21:07:0b:d7:
91:d9:29:a5:c3:ce:27:59:05:2d:8e:8c:fe:40:b3:
08:f4:79:32:f6:6a:c9:f4:7d:4f:75:87:7a:e4:3e:
df:aa:3b:c2:9d:4d:b6:e7:31:1e:74:1c:cf:4a:6c:
12:85:9b:7e:cd:dd:e1:06:e7:68:6d:4f:a6:88:f1:
a3:03:f1:3e:a0:b6:df:c0:9c:e6:16:28:a0:8a:c3:
33:c0:e0:9b:62:ed:21:bb:5a:a5:91:6b:b5:56:08:
c0:a7:69:b5:de:d2:7b:17:b4:a8:8f:bc:94:02:b1:
e8:ec:e4:87:14:ab:33:50:ab:4f:7c:c4:f4:2b:0b:
0d:a5:4d:5c:b2:9c:58:66:01:c1:f0:5e:df:f0:95:
28:0d:5d:7b:f9:6a:7d:7c:44:d6:ed:12:6c:db:49:
56:75:07:95:57:84:1c:6e:64:4f:b4:21:19:db:36:
1b:2f:15:0e:2e:0f:d6:7f:b0:f9:ca:3f:bc:01:ad:
22:e4:c0:88:49:26:7e:65:f4:92:64:fe:48:a8:f6:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:82:1E:61:F9:F2:94:D7:E3:95:94:19:A1:08:B7:F5:CE:64:61:6F
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/uoIeYfnylNfjlZQZoQi39c5kYW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ee40::/29
Signature Algorithm: sha256WithRSAEncryption
32:bd:4b:fd:5f:9e:67:01:5b:d4:55:c6:78:d0:36:13:9a:72:
3d:8a:f6:59:78:00:82:4d:eb:6d:17:6e:85:a9:51:5f:d9:50:
66:9b:5c:0d:e9:da:b8:22:2a:93:c9:eb:d4:ae:c5:4b:cf:df:
e8:75:19:4d:00:9f:69:1c:20:e5:f8:d6:ff:4b:f0:cd:dd:4f:
b9:b2:40:da:71:30:78:28:5a:e3:08:71:cb:ed:79:e0:f0:18:
5e:aa:83:10:b9:80:00:3b:3c:5f:97:35:38:fd:37:19:ae:cb:
22:14:20:7b:36:81:18:85:76:95:0f:d6:3e:72:a2:81:5b:3a:
7f:ea:e4:b3:5f:aa:c9:d8:95:32:5f:0b:14:e4:b8:7b:52:d4:
b0:60:f1:33:7e:20:51:64:84:67:b0:9f:b1:57:02:a0:43:50:
1f:36:e2:f8:85:ff:76:35:c4:68:0f:bb:35:7a:95:2f:85:5d:
d9:70:32:48:ce:2e:af:f4:2c:81:a8:34:07:4b:1c:49:38:b2:
49:81:95:d6:3c:34:5d:e7:32:42:2f:2c:b1:77:90:49:48:e0:
ee:d4:f3:47:f1:81:f1:01:d6:a7:89:21:aa:15:26:2f:a8:63:
6a:30:8c:d7:ef:59:db:0f:cd:7e:e7:d5:a6:b7:65:cf:90:8a:
d9:9d:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:39 2025 by rpki-client