Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uKZ5BJ-oq2HEyABUVXIZvOwsV60.roa
File: uKZ5BJ-oq2HEyABUVXIZvOwsV60.roa (raw, json)
Hash identifier: AGepSz6k1b8ORaVrDqzhuCOeZBI2ep4vsiimgKyTqhc=
Subject key identifier: B8:A6:79:04:9F:A8:AB:61:C4:C8:00:54:55:72:19:BC:EC:2C:57:AD
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01954C68512DBD31AE6BD7AEB834A8D1A7FF
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uKZ5BJ-oq2HEyABUVXIZvOwsV60.roa
Signing time: Fri 28 Feb 2025 11:54:19 +0000
ROA not before: Fri 28 Feb 2025 11:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2a13:93c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:68:51:2d:bd:31:ae:6b:d7:ae:b8:34:a8:d1:a7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 28 11:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8a679049fa8ab61c4c80054557219bcec2c57ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:d8:04:56:f5:b0:9e:79:00:b9:5d:65:34:
bb:81:8f:8b:e3:51:4b:12:ec:bd:7e:b1:40:6e:19:
52:f5:87:30:9a:92:80:82:65:69:72:7f:9c:b1:b9:
aa:a5:b4:a4:58:2c:50:e5:e5:c4:d9:6a:1a:1d:c7:
50:02:37:cb:0f:a3:65:c0:7f:b9:b3:33:35:31:d7:
ed:6d:30:d5:8f:76:fb:67:88:14:8f:68:a2:46:85:
9e:27:5e:0f:da:5a:01:ff:61:2c:9c:c6:54:30:a2:
e9:90:74:85:7c:f3:f7:fc:df:04:0d:99:cc:0c:74:
9b:04:d5:25:dc:cf:54:e1:73:6f:de:30:74:1f:ba:
02:19:ea:36:ac:2d:60:fb:5f:fa:67:55:2e:45:8b:
c2:27:3b:6f:7b:b2:7c:f0:22:a6:27:5e:c5:f5:e7:
a5:9f:74:aa:b0:97:9a:fd:04:bf:64:72:b4:bf:ba:
77:da:e3:5a:a8:10:32:6b:aa:5b:77:44:18:f7:96:
57:be:8b:02:8d:f2:1d:38:c5:9a:be:0e:43:6c:fa:
27:ec:50:e5:bf:6e:d6:13:5a:89:84:a3:7c:9e:f1:
c7:88:8d:4e:66:03:19:b2:69:dd:f9:de:4e:63:3e:
eb:b3:a9:01:ac:09:91:78:68:a6:4a:23:ae:d6:f4:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:79:04:9F:A8:AB:61:C4:C8:00:54:55:72:19:BC:EC:2C:57:AD
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uKZ5BJ-oq2HEyABUVXIZvOwsV60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:93c2::/32
Signature Algorithm: sha256WithRSAEncryption
bc:c3:4f:40:c5:b2:6e:af:61:8a:7c:51:5d:9e:f6:2d:7b:eb:
0b:55:a2:46:ee:36:0f:c7:f8:1d:84:6b:43:53:d9:af:96:6f:
78:28:53:c3:d8:16:a5:17:31:5e:e2:2a:70:98:8a:9c:67:6a:
8e:8c:f0:45:97:e4:75:f3:70:1c:1a:4b:11:18:eb:11:a8:dd:
c7:a3:49:3d:c4:1f:07:dc:8f:1a:c1:5e:2b:7f:e8:46:52:d9:
39:89:31:95:a1:eb:db:b8:c0:f4:66:ca:84:93:04:57:3d:62:
9a:62:52:bf:d2:24:e0:33:63:43:e6:b9:43:c6:10:f9:c1:a5:
5e:3f:5b:51:fb:c5:10:a2:d5:09:a3:37:63:62:f1:e6:d8:a0:
28:40:fb:02:10:be:c9:40:24:d4:5e:2e:1b:92:29:85:ab:82:
d4:2a:3e:2b:ab:18:74:43:c9:08:73:19:0a:21:83:a9:40:07:
0e:8e:29:b9:b9:a0:37:55:02:ed:13:6e:be:61:c9:cd:dd:25:
b0:2d:3b:c7:75:04:ab:9b:ee:41:68:2a:b3:6e:ff:cd:8e:0e:
d0:ee:ca:55:04:ed:92:f0:94:64:eb:59:27:e4:6d:6e:11:04:
7a:1a:24:42:df:67:08:0b:d2:52:ef:f5:94:9f:aa:4b:12:ce:
1f:56:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:33:42 2025 by rpki-client