Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uIgXIKzXuASOgLFOjg6N40T8Ptw.roa
File: uIgXIKzXuASOgLFOjg6N40T8Ptw.roa (raw, json)
Hash identifier: xh5QXvQKcLeChGzut7vhAGDxDYyPwAdY4WB1x7hexxs=
Subject key identifier: B8:88:17:20:AC:D7:B8:04:8E:80:B1:4E:8E:0E:8D:E3:44:FC:3E:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C3CFB68F8AC3B87944DF331440AC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uIgXIKzXuASOgLFOjg6N40T8Ptw.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9886
IP address blocks: 2a0e:b107:f08::/45 maxlen: 45
2a10:2f00:12a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c3:cf:b6:8f:8a:c3:b8:79:44:df:33:14:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8881720acd7b8048e80b14e8e0e8de344fc3edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:cb:3e:44:1f:d7:1e:91:7d:60:ae:99:81:
b3:9e:7f:92:2d:f7:28:cc:c2:33:26:ee:26:0b:8c:
36:45:0f:00:72:c8:1d:a2:60:a6:ea:ce:06:5c:ac:
32:5a:14:48:32:72:9f:94:c5:fc:5c:b2:40:5d:b0:
25:66:ac:ae:0e:34:0d:60:fc:0e:a2:fe:15:53:db:
97:b0:d1:80:19:60:08:9a:69:2a:cd:dc:1d:db:e7:
75:38:eb:96:a8:2b:e2:bc:cf:85:51:dc:10:5a:e3:
b2:2f:94:3a:f7:96:9a:f7:b6:c9:26:af:85:07:2d:
38:5c:54:a7:74:0e:79:e4:c7:c7:50:08:18:d9:8f:
81:33:59:e8:72:f1:aa:6d:3c:d0:fb:70:05:ac:e7:
d0:7f:a5:66:9a:dd:55:c8:7b:55:c7:cb:eb:ab:5b:
f9:5f:aa:a3:9b:3e:60:1c:ff:ea:66:bd:69:19:ca:
95:c7:2d:bf:9d:87:28:1d:47:5d:4f:d4:fa:cf:65:
c3:f7:b6:69:c4:e7:d3:b7:e2:3a:41:2d:b5:07:13:
1d:ec:72:c7:be:0e:6e:ec:93:06:ce:3c:24:c3:61:
1c:4f:22:44:8b:59:b9:5b:28:c6:d5:1b:bd:dc:49:
64:8f:c4:ce:bb:3b:f4:5d:0f:be:ad:47:3b:d0:7a:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:17:20:AC:D7:B8:04:8E:80:B1:4E:8E:0E:8D:E3:44:FC:3E:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uIgXIKzXuASOgLFOjg6N40T8Ptw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f08::/45
2a10:2f00:12a::/48
Signature Algorithm: sha256WithRSAEncryption
a3:65:0e:e6:bd:73:0f:b3:e4:1c:2b:6d:ed:0c:b0:7a:dc:82:
31:2e:30:e5:32:95:ad:ff:3d:76:4a:43:e9:21:71:7c:29:72:
e5:0e:07:a5:05:d4:63:23:a7:79:05:e9:6c:52:3a:3e:b9:d7:
f8:6a:eb:cb:5f:4f:73:9a:5e:67:ec:1a:2a:fc:bc:74:01:d0:
79:41:38:a3:dd:0a:85:d2:fe:d0:97:27:86:bd:97:a7:17:a3:
ac:aa:c3:3f:d9:d9:1b:e8:10:82:18:a0:90:01:c9:6c:af:b2:
bf:6b:1c:25:33:93:44:0d:e5:57:65:db:74:d2:20:35:22:ca:
8f:5f:f5:94:1d:9b:f6:96:98:95:62:1d:c6:d5:e5:4a:16:60:
c1:54:8b:5c:d9:a5:da:ab:5d:a2:bd:e2:aa:d2:f6:21:11:d6:
80:66:22:4c:45:7c:fe:cb:dd:c3:00:cc:57:15:50:75:21:ac:
4b:7c:d3:d0:fa:1f:d5:45:be:1c:a9:62:a4:53:29:5b:86:da:
b9:23:42:f7:85:22:a6:43:15:d0:3a:e2:48:5f:00:06:3a:6d:
eb:49:d3:38:14:87:02:06:85:c2:26:74:8a:54:fb:91:62:ef:
06:8c:f3:33:83:a4:98:dd:20:e4:7c:a1:86:53:89:57:69:76:
7b:48:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:57 2025 by rpki-client