Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/umFBgs224fvHmv7UVIkmk-cu2a0.roa
File: umFBgs224fvHmv7UVIkmk-cu2a0.roa (raw, json)
Hash identifier: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=
Subject key identifier: BA:61:41:82:CD:B6:E1:FB:C7:9A:FE:D4:54:89:26:93:E7:2E:D9:AD
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 01942067CE2E439812BB23951B82A9D41A4D
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/umFBgs224fvHmv7UVIkmk-cu2a0.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43595
IP address blocks: 2a06:4180:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ce:2e:43:98:12:bb:23:95:1b:82:a9:d4:1a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba614182cdb6e1fbc79afed454892693e72ed9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:75:eb:e5:fe:48:a6:54:44:20:05:d7:1c:
2f:e7:0c:e7:d9:a8:b5:cb:4f:56:61:d4:48:d8:9d:
06:66:0e:be:0d:5b:ae:1b:93:24:b9:d1:f9:66:4c:
af:d3:ac:d6:a1:eb:b3:c0:d8:05:b7:14:69:b0:0d:
98:18:ab:f1:06:45:4e:05:77:14:d2:2e:56:4a:fc:
fd:3e:d2:df:0d:c5:bc:71:0c:e0:05:21:11:fd:56:
78:3d:3a:11:53:3c:f5:bb:b7:79:32:0e:c7:63:f2:
14:87:2d:13:30:28:31:e8:38:94:91:58:ba:c8:1c:
46:03:d8:b6:fc:71:0e:b4:81:f4:f8:31:0c:05:84:
e5:9d:96:f5:a8:f7:5e:e3:0a:17:5a:1c:9f:0f:d2:
9c:64:57:1e:36:eb:f9:96:30:73:a0:41:f8:d6:13:
85:ee:a2:c0:49:32:92:dc:93:41:1b:74:b2:1a:3c:
e5:dc:d6:a7:0e:60:e7:40:25:4b:1a:47:e5:c3:51:
af:97:6b:89:e3:d0:88:a9:52:5a:83:69:c3:ce:1d:
05:f0:37:02:73:0e:93:aa:b1:6e:53:91:36:63:e3:
a4:dc:8b:da:5a:44:62:37:42:bc:85:cf:45:01:60:
ba:35:0f:7a:2b:e4:17:f4:55:45:67:35:46:b8:25:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:41:82:CD:B6:E1:FB:C7:9A:FE:D4:54:89:26:93:E7:2E:D9:AD
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/umFBgs224fvHmv7UVIkmk-cu2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4180:1::/48
Signature Algorithm: sha256WithRSAEncryption
80:ea:3c:0a:46:4f:3e:9b:c1:29:ef:62:95:f1:cd:1e:f1:88:
c6:76:41:37:ba:e4:5d:75:f8:9e:89:f8:44:b5:a3:32:7d:bf:
1e:b5:04:02:3c:d4:29:e2:98:3d:e3:17:80:d4:35:5e:55:1a:
1f:7a:ce:e1:4d:20:97:c4:46:e2:8c:27:b5:b7:ce:2e:f5:63:
a7:68:cf:16:4a:db:a7:4e:cf:f5:f4:c2:88:31:85:eb:33:3a:
70:a9:f9:62:68:02:3c:fd:e8:6d:06:83:d2:8d:07:a1:a1:8c:
29:09:73:5e:14:b6:86:4c:d9:6e:e7:a4:bb:1e:30:7c:d8:f4:
f7:0d:ef:a1:ca:49:46:61:ba:46:c9:18:c4:67:8c:da:09:99:
c9:32:5d:54:ab:dd:01:7d:ae:0f:36:ea:96:18:f5:b8:97:ab:
ea:ad:13:9f:8e:62:56:65:91:e6:9e:93:5f:82:4f:e0:b3:3b:
83:c0:88:24:48:ca:03:da:90:ce:bb:74:9d:9d:df:84:cf:2b:
5a:c9:60:1d:be:62:f2:8a:f4:0a:f0:ff:0e:ae:55:ec:b2:02:
7a:82:58:63:a3:4f:98:df:7c:8c:a8:71:38:22:a3:d2:c1:c5:
b2:ce:46:b5:11:90:b2:fb:b8:f0:5a:f0:0c:f9:f0:9c:1d:8a:
5b:4d:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:55:05 2025 by rpki-client