Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/UTuku2NoRg5M3213fHsTSechO5U.roa
File: UTuku2NoRg5M3213fHsTSechO5U.roa (raw, json)
Hash identifier: mmVExhdm+qlv5wjD1nNIr2CTIIUIWrulidPSaVkzZdU=
Subject key identifier: 51:3B:A4:BB:63:68:46:0E:4C:DF:6D:77:7C:7B:13:49:E7:21:3B:95
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 0194252172E7548129951747F8E0024C15AA
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/UTuku2NoRg5M3213fHsTSechO5U.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39704
IP address blocks: 2001:67c:f14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:72:e7:54:81:29:95:17:47:f8:e0:02:4c:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=513ba4bb6368460e4cdf6d777c7b1349e7213b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:cd:d6:d1:59:4c:25:da:f2:b0:c5:5b:06:
68:ca:42:a1:60:53:46:67:af:b2:31:3c:53:59:e3:
6a:40:a0:60:d8:a6:26:ef:56:95:8e:d9:24:5c:cf:
71:c9:d5:d6:bd:70:a5:60:39:5e:65:85:fe:f1:c2:
05:52:7a:d3:c3:a0:c0:34:70:cc:63:07:6e:ea:d6:
cd:a2:7c:63:97:57:76:bc:fd:3c:0c:c1:29:6b:59:
c9:30:1a:d9:38:ab:2a:56:4d:b7:61:5b:c1:5b:0b:
1d:e9:49:bc:d9:32:68:fa:02:77:86:2d:7b:58:c9:
7b:ff:da:d1:e9:72:a5:cb:ec:e7:02:3f:5f:da:43:
a5:70:c2:39:c8:ed:64:f1:a4:b8:b3:c7:05:99:59:
58:ee:fe:e8:6b:50:9d:be:39:bc:f7:9c:23:5e:a0:
00:a8:a4:78:83:08:24:17:d0:5c:d8:98:eb:07:9c:
b9:0f:43:e7:ee:9c:3f:2b:02:da:7b:bc:5c:1f:dd:
4e:33:45:dc:d1:8b:95:dd:27:28:8a:39:30:d8:99:
8f:43:95:04:8f:77:66:c2:e9:16:ae:29:97:97:72:
77:94:c9:44:ed:f8:98:cf:c2:d1:3f:2f:d8:71:5f:
1a:82:06:2b:b3:5b:07:41:93:cc:f0:93:22:48:10:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:A4:BB:63:68:46:0E:4C:DF:6D:77:7C:7B:13:49:E7:21:3B:95
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/UTuku2NoRg5M3213fHsTSechO5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f14::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e4:32:c7:73:cd:09:d5:c9:ca:be:4e:14:73:ff:ec:76:dc:
e5:11:02:a2:1d:90:71:81:d5:8c:ab:bd:69:b6:ae:1b:e2:81:
fa:6f:d8:6a:19:c2:48:56:f8:f6:c7:2c:c9:ec:5d:5a:93:7d:
dc:33:53:b9:2c:35:d5:0b:98:26:de:48:26:96:13:6b:72:36:
f5:cf:9c:68:8b:89:e8:8b:96:23:2c:25:51:f8:74:a3:b3:9c:
41:54:23:18:a9:71:af:85:21:b7:25:e9:0a:fa:79:bd:07:02:
aa:72:10:2f:b1:29:0c:97:bd:91:fa:54:a1:da:c8:cd:24:91:
90:f8:cd:cb:d4:36:26:f5:1e:36:25:ba:33:25:41:fc:fc:6a:
cf:37:f8:0a:61:2c:87:22:9f:d4:d5:87:53:97:33:13:6e:73:
78:1c:76:3a:8b:0f:9f:56:7c:f3:c3:b1:dd:08:4e:97:56:30:
3a:20:05:c9:ab:59:29:d7:05:58:7a:06:1c:7a:85:34:2c:66:
d8:65:a6:f1:bb:19:28:dc:89:f5:80:bd:ce:4e:5e:b7:5d:e6:
07:bc:61:01:f4:ec:3a:c4:b7:2f:69:f0:9b:2a:d1:da:a9:a1:
28:8b:5d:db:dc:23:90:fd:20:04:e6:a4:52:28:58:21:73:8e:
02:c3:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:04 2025 by rpki-client