Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa
File: U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa (raw, json)
Hash identifier: QxEX5rbeLCQiv5QJ1QrJpxAQPPcED/CkB9BmO957WyU=
Subject key identifier: 53:80:41:E0:7E:CF:ED:77:3A:C1:C4:7F:43:72:AE:12:0F:0C:A0:12
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 0194258FB5A077A9E1C92F6735E22ABEF3A9
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48011
IP address blocks: 2a01:4ac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:a0:77:a9:e1:c9:2f:67:35:e2:2a:be:f3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=538041e07ecfed773ac1c47f4372ae120f0ca012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:d5:b5:24:6f:b3:de:79:33:21:38:a0:0e:
a6:42:61:f8:82:fa:ff:7f:a6:ee:5e:2d:63:f7:3e:
1f:74:f5:b8:dd:7e:9d:ba:f5:b7:db:7d:9e:e4:47:
9f:f6:1e:36:42:b7:54:30:55:c1:bf:c4:83:36:d0:
28:c0:04:f3:cc:37:51:ec:02:b9:90:0a:cc:c1:40:
00:9f:fc:a2:7a:28:25:32:b1:66:0a:dd:31:f0:66:
5a:50:0d:46:60:58:79:18:b7:46:ec:13:19:2d:4b:
08:13:a1:f8:20:da:7d:4a:d1:36:b1:73:4a:74:39:
e4:88:5b:11:35:6a:bf:e9:5f:ad:b1:2f:1e:61:d2:
0b:e5:ec:1a:d1:86:29:f6:f4:fd:20:61:b1:d1:ae:
ab:2b:5a:b2:ec:83:fb:cc:4a:34:02:a7:f3:3d:2c:
d6:33:70:98:ee:b4:61:00:c4:d4:2f:2d:cc:90:9c:
7c:75:64:0c:ae:1f:6f:8b:fc:4c:43:be:f8:59:65:
07:9e:fe:1c:b0:63:57:d9:bf:e8:23:e5:93:1a:01:
0f:f7:b3:c5:ab:9e:0a:8d:21:45:ac:f8:55:9b:6f:
88:e4:de:e6:3d:a4:b6:22:3c:8b:c4:d7:a8:63:e8:
be:7f:cd:92:e3:0b:fa:cb:d3:4b:04:e6:94:28:f8:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:41:E0:7E:CF:ED:77:3A:C1:C4:7F:43:72:AE:12:0F:0C:A0:12
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/U4BB4H7P7Xc6wcR_Q3KuEg8MoBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:db:4f:54:e4:d5:cd:a3:ca:a9:67:cc:1c:b3:b4:9f:96:8b:
4c:e9:52:4d:90:cc:31:06:f3:dd:66:9f:39:3e:31:f3:89:51:
ba:56:f1:95:ed:df:b8:b8:13:ce:e2:1c:9d:a0:e5:a0:e8:10:
42:27:3a:54:5c:a1:37:16:f5:b0:cb:c4:c7:d9:3b:79:bd:03:
b5:0d:50:75:a4:08:fc:92:a6:6e:01:6f:86:33:25:ae:dc:1c:
02:08:fd:b1:2c:6a:eb:11:24:3c:e2:28:c8:67:d7:9a:fd:5b:
79:68:eb:af:a4:ce:88:42:22:53:4d:30:8b:09:93:6b:e6:14:
37:fd:13:ee:e0:f0:60:9d:07:c9:07:49:5b:17:d2:88:90:f7:
56:de:d2:06:a6:24:14:a4:18:c2:36:6b:81:00:b3:fa:9f:a5:
13:26:39:9c:bf:34:26:00:0d:cb:03:2c:f5:b3:4c:cb:c5:cb:
2b:b1:41:45:8b:2f:36:ac:d0:76:76:c8:d9:4a:69:f6:8c:90:
da:c1:9d:b5:48:00:1d:92:f2:34:69:05:50:09:3a:d1:30:8d:
a0:17:ef:0e:fe:85:e4:6b:90:17:57:3d:51:1b:25:99:29:aa:
35:c5:3e:0e:4f:7d:10:32:56:5b:2a:56:c7:d3:0d:4d:a7:bb:
55:cb:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:13:47 2025 by rpki-client