Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/URY1b88JEwAFcVzSKF0ndhRsCNU.roa
File: URY1b88JEwAFcVzSKF0ndhRsCNU.roa (raw, json)
Hash identifier: kfS3yL4knalmRWx9zMRrSJNC7bWnVKXO7FsPxvaVVZ0=
Subject key identifier: 51:16:35:6F:CF:09:13:00:05:71:5C:D2:28:5D:27:76:14:6C:08:D5
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01941F8C19274C482391E664AACFFB1C8284
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/URY1b88JEwAFcVzSKF0ndhRsCNU.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2a12:de41::/32 maxlen: 32
2a12:de42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:19:27:4c:48:23:91:e6:64:aa:cf:fb:1c:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5116356fcf09130005715cd2285d2776146c08d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:7f:c4:e2:b2:c9:72:ff:22:10:12:6e:13:
a0:0a:3f:0d:10:38:05:d0:e3:41:62:67:67:aa:08:
58:6d:3b:6a:5a:ac:c9:4f:54:da:81:29:0e:cb:5b:
94:50:19:ae:61:67:77:54:02:4a:08:d8:b8:1e:70:
11:cd:11:18:79:a5:8e:f6:e9:72:c5:e1:dd:6a:1d:
87:da:80:61:d5:ac:f5:3d:37:dd:ff:49:72:22:35:
cc:e2:c5:14:01:a8:d7:e6:e7:68:fd:b9:82:f2:e7:
f7:e9:79:83:f9:41:9f:92:a8:e5:01:e2:1c:a1:51:
75:a1:76:45:69:b2:20:ad:a3:e2:b4:af:86:71:b4:
c8:ea:ab:65:46:2d:8d:96:15:a1:ec:35:1d:52:19:
0a:c7:0c:0e:8a:99:c0:dc:14:16:96:2a:60:52:b4:
9c:6f:26:2e:52:4a:b4:53:f1:d5:f3:c1:ba:ca:ed:
d1:d0:fc:2b:31:76:25:94:72:1c:c8:b0:1c:50:3d:
59:5b:75:07:22:4c:f2:0a:ea:09:a7:50:98:04:a6:
d8:e0:36:6f:e1:8f:7e:de:84:d3:56:87:70:d3:ac:
01:a7:05:58:a3:81:4b:cc:7e:5e:72:b2:04:66:b8:
4a:a1:c6:ad:1b:3e:ee:e4:ae:90:00:51:6e:5f:06:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:35:6F:CF:09:13:00:05:71:5C:D2:28:5D:27:76:14:6C:08:D5
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/URY1b88JEwAFcVzSKF0ndhRsCNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de41::-2a12:de42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ac:8f:3e:ee:c3:17:0f:ee:1c:59:8c:40:dc:9b:09:d6:23:64:
7c:e9:8e:b5:4e:55:b4:e0:eb:5b:de:83:b6:a8:23:19:9c:e2:
a0:c9:d4:27:6c:d2:83:79:41:17:df:64:0e:f7:c2:1f:53:97:
e2:dc:1a:90:b1:1e:93:71:ce:fe:6c:5a:8b:9a:4e:5f:c3:89:
dc:ac:16:75:a1:66:e5:80:ad:49:6b:43:6f:f5:2e:91:8c:37:
f7:df:2b:ab:30:bc:cb:5b:e2:99:be:9a:36:61:27:b6:a0:28:
89:3e:ed:85:0d:94:79:93:ed:6e:72:63:69:f2:77:eb:b3:67:
92:de:b1:0c:78:09:ce:70:f1:90:fe:99:c6:c5:33:56:21:3b:
22:46:0c:41:f8:76:39:26:f8:d6:3b:c0:8a:77:1a:42:6a:6f:
80:dc:91:c2:b1:22:8e:a0:66:34:16:23:e4:56:06:31:4d:33:
10:f8:6d:5b:7f:e9:b0:8d:a1:7f:6c:a0:46:84:3b:8a:84:8b:
d8:60:a8:50:21:98:fa:5b:4c:aa:16:ff:26:46:12:48:82:40:
86:78:37:fd:cb:a4:b3:76:07:4c:44:f2:de:10:11:3d:5e:86:
ff:cb:82:f2:73:30:df:fb:31:4f:f0:d2:39:86:91:d0:fe:44:
d4:5b:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:35:37 2025 by rpki-client