Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uKn0ykKJS7V-Gimh_y3uOqTFkoc.roa
File: uKn0ykKJS7V-Gimh_y3uOqTFkoc.roa (raw, json)
Hash identifier: FJgAGaJzBuQKibQDaevWJV0SLdRtHAbQlBmg2hqfYf4=
Subject key identifier: B8:A9:F4:CA:42:89:4B:B5:7E:1A:29:A1:FF:2D:EE:3A:A4:C5:92:87
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01935CD6A0DC7C5C885F70FF74A8493A964C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uKn0ykKJS7V-Gimh_y3uOqTFkoc.roa
Signing time: Sun 24 Nov 2024 06:23:10 +0000
ROA not before: Sun 24 Nov 2024 06:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 2a12:a341::/32 maxlen: 32
2a12:a347::/32 maxlen: 32
2a13:2980::/30 maxlen: 30
2a13:2984::/30 maxlen: 30
2a13:ac80::/30 maxlen: 30
2a13:ac84::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5c:d6:a0:dc:7c:5c:88:5f:70:ff:74:a8:49:3a:96:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 24 06:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8a9f4ca42894bb57e1a29a1ff2dee3aa4c59287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:5e:34:a8:34:53:f4:74:48:90:dd:3b:8f:
c7:b2:f1:c5:7f:1f:27:39:83:57:e9:8f:35:41:06:
b7:19:84:75:ef:c3:04:33:9f:40:e5:5e:e3:81:80:
2e:52:99:dc:89:c6:3e:e0:b1:dc:7e:81:a6:49:07:
7d:f5:98:3e:e8:b1:ef:93:48:be:9b:b7:4d:53:ab:
51:43:5d:0b:9b:67:a1:cf:3e:1d:a5:9d:2e:14:37:
85:cc:0b:ac:21:59:1b:75:e4:14:e8:fd:18:37:88:
87:01:33:dd:1f:4a:02:df:21:50:64:f8:7a:66:24:
47:96:73:3a:24:ec:02:23:16:15:fb:e0:3b:83:6f:
4e:ea:f0:c8:67:6e:f5:cf:e2:94:90:1e:1b:3d:7d:
dc:00:06:7a:01:af:2a:6f:b6:fa:9d:72:53:8c:a9:
6a:52:52:aa:eb:01:38:97:48:23:c8:4b:65:09:8e:
6c:d6:2d:3a:4a:6c:d0:55:7f:1c:a8:5b:78:ff:89:
11:e5:3b:01:9e:d7:c9:e2:95:73:62:b8:e1:b9:42:
a4:6f:cb:34:c8:78:f1:c3:64:75:f4:4f:1a:76:b5:
d7:80:fd:ec:07:15:98:60:eb:9b:3c:c8:82:fa:28:
a2:2e:d9:03:16:02:eb:40:f2:95:53:57:ca:84:f2:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:F4:CA:42:89:4B:B5:7E:1A:29:A1:FF:2D:EE:3A:A4:C5:92:87
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/uKn0ykKJS7V-Gimh_y3uOqTFkoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a341::/32
2a12:a347::/32
2a13:2980::/29
2a13:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
9d:f3:85:03:c8:29:98:ca:b5:db:28:31:6b:2a:76:74:51:c7:
28:e4:5e:72:4c:cd:b1:44:cb:fe:98:05:eb:85:b6:10:12:16:
a4:38:2d:be:39:25:04:ef:7b:34:6f:54:0e:62:10:14:0a:e2:
6e:6d:97:70:b6:f5:54:da:30:32:26:37:1a:79:46:e8:01:7c:
cb:1f:69:80:ac:1d:5a:da:18:e7:1f:1e:bc:5c:74:3e:b8:7c:
e4:e2:34:c1:ad:25:6e:6c:f5:35:fe:94:b8:18:e4:f4:92:25:
ec:85:8a:36:f6:b6:c0:dd:3c:2c:5b:1d:a6:2f:5c:7a:8f:3f:
a4:59:96:ae:99:72:3e:4e:94:f5:91:f4:0e:8f:7d:de:5f:7c:
aa:14:d5:dc:ba:9b:87:13:74:90:4f:85:22:ac:80:1f:31:92:
c2:5b:4c:cc:bc:13:6e:13:a8:34:68:03:73:87:7d:e5:f7:e3:
37:31:ed:eb:45:aa:60:3b:d1:78:1b:5f:a5:c3:a0:f8:a3:0a:
4f:c8:90:3e:c8:70:52:d5:41:09:f2:a2:8d:ba:93:2d:90:0f:
e1:eb:53:89:52:08:61:dc:bf:e8:2b:e1:58:2a:c5:64:2b:38:
fd:7d:47:fa:a6:a2:36:a6:83:ac:c6:a8:e1:69:83:5b:e9:ac:
96:de:56:48
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZNc1qDcfFyIX3D/dKhJOpZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQxMTI0MDYyMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGE5ZjRjYTQyODk0YmI1N2UxYTI5YTFmZjJkZWUzYWE0YzU5Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNReNKg0U/R0SJDdO4/HsvHFfx8n
OYNX6Y81QQa3GYR178MEM59A5V7jgYAuUpncicY+4LHcfoGmSQd99Zg+6LHvk0i+
m7dNU6tRQ10Lm2ehzz4dpZ0uFDeFzAusIVkbdeQU6P0YN4iHATPdH0oC3yFQZPh6
ZiRHlnM6JOwCIxYV++A7g29O6vDIZ271z+KUkB4bPX3cAAZ6Aa8qb7b6nXJTjKlq
UlKq6wE4l0gjyEtlCY5s1i06SmzQVX8cqFt4/4kR5TsBntfJ4pVzYrjhuUKkb8s0
yHjxw2R19E8adrXXgP3sBxWYYOubPMiC+iiiLtkDFgLrQPKVU1fKhPIBWQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFLip9MpCiUu1fhopof8t7jqkxZKHMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvdUtuMHlrS0pTN1YtR2ltaF95M3VPcVRGa29jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKhKjQQMF
ACoSo0cDBQMqEymAAwUDKhOsgDANBgkqhkiG9w0BAQsFAAOCAQEAnfOFA8gpmMq1
2ygxayp2dFHHKOReckzNsUTL/pgF64W2EBIWpDgtvjklBO97NG9UDmIQFAribm2X
cLb1VNowMiY3GnlG6AF8yx9pgKwdWtoY5x8evFx0Prh85OI0wa0lbmz1Nf6UuBjk
9JIl7IWKNva2wN08LFsdpi9ceo8/pFmWrplyPk6U9ZH0Do993l98qhTV3LqbhxN0
kE+FIqyAHzGSwltMzLwTbhOoNGgDc4d95ffjNzHt60WqYDvReBtfpcOg+KMKT8iQ
PshwUtVBCfKijbqTLZAP4etTiVIIYdy/6CvhWCrFZCs4/X1H+qaiNqaDrMao4WmD
W+mslt5WSA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:54 2025 by rpki-client