Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa
File: Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa (raw, json)
Hash identifier: QN8HhWjjJPearCTxHxonyEJ2yJIbW9sXZXyp6RMDaE0=
Subject key identifier: 51:E9:1F:87:ED:0A:DA:F4:5C:BB:3A:CB:CF:CB:81:5C:56:8E:AE:84
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 019425FC5C2ED11D06F815913C2B42199EB4
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa
Signing time: Thu 02 Jan 2025 07:48:02 +0000
ROA not before: Thu 02 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212900
IP address blocks: 2001:67c:abc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5c:2e:d1:1d:06:f8:15:91:3c:2b:42:19:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Jan 2 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e91f87ed0adaf45cbb3acbcfcb815c568eae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:9f:1e:6d:14:7e:a4:ca:ed:67:29:b9:c8:
21:30:2c:36:e8:48:10:35:8f:7e:a5:da:f9:4c:f2:
04:07:a3:e7:42:74:81:1a:8e:6d:54:16:f5:7a:ab:
17:b8:cb:ec:58:15:3e:91:f3:b5:94:1f:eb:7f:11:
52:93:78:b0:42:1c:4a:41:78:73:4c:2a:92:34:66:
59:2a:1e:58:58:31:e2:2e:b3:7a:0c:0e:8d:ba:54:
a0:cb:39:b3:7e:8c:f6:96:cf:e7:67:7d:b7:69:5a:
ec:4f:88:5a:19:dd:9f:67:9c:50:84:49:31:d7:af:
d5:54:02:dc:c2:66:60:c5:fa:42:ed:47:aa:46:fd:
da:ff:01:9a:ac:de:82:38:14:75:87:88:5e:09:c0:
2f:51:b8:4f:c1:a2:24:95:db:58:ba:07:b2:d8:67:
84:68:a0:fe:52:ab:74:aa:41:f9:c7:a7:a3:80:d6:
ee:8e:b1:80:0a:d8:7d:5c:c9:fd:20:3d:fc:8f:fb:
8b:90:48:84:41:1b:42:82:4d:3d:12:f1:4e:5d:29:
5a:26:cb:bb:34:b2:58:33:6a:fe:0d:a6:86:68:d8:
bb:f4:c8:20:d0:e7:70:83:e2:38:67:93:49:40:d4:
da:07:15:8e:3c:00:40:2c:5c:e4:be:43:6b:e0:4c:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:1F:87:ED:0A:DA:F4:5C:BB:3A:CB:CF:CB:81:5C:56:8E:AE:84
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/Uekfh-0K2vRcuzrLz8uBXFaOroQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:abc::/48
Signature Algorithm: sha256WithRSAEncryption
22:d0:b5:fa:22:fe:18:c4:57:2c:89:e4:05:55:47:5d:42:fd:
3e:ae:bd:e1:4a:b5:b5:86:15:de:95:b3:1a:91:31:a8:d3:ae:
c0:94:62:94:b0:95:d0:5a:6d:b6:a2:76:f3:08:48:f0:db:22:
4e:cc:74:03:f7:25:08:5f:53:a7:a1:68:16:5e:a7:30:87:86:
77:83:fe:bf:d1:89:bd:96:bd:21:b4:92:10:d7:12:f4:c0:03:
c7:ac:85:15:e2:ab:47:ab:e5:c6:12:e4:60:7b:db:3c:89:ff:
85:5b:49:8e:ee:d8:d9:17:c7:67:b3:86:33:92:51:e6:20:8f:
45:cf:c3:ba:c1:79:5b:e9:af:0f:00:58:02:01:d4:19:1e:72:
83:6f:ad:cb:59:21:ae:d5:66:5d:09:95:e3:7f:93:bc:cf:0d:
60:7c:bc:39:2a:9f:51:5d:fa:5e:ac:e2:ee:db:98:cc:b8:8e:
53:e0:c7:27:ed:f2:28:c0:c6:ab:0a:aa:94:4d:35:3e:aa:b5:
2d:8d:35:3d:0b:7f:6b:93:1e:ad:77:7a:7e:16:6d:cb:a5:d9:
eb:ad:d0:eb:a6:17:1b:dd:da:e2:33:0f:73:6b:e7:ea:f5:4d:
55:a4:54:dd:b7:16:81:eb:36:c1:8f:de:05:d9:84:be:6b:1f:
96:69:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:17 2025 by rpki-client