Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ufGIW2C_Yj2nybXBRlTBjXFYwoA.roa
File: ufGIW2C_Yj2nybXBRlTBjXFYwoA.roa (raw, json)
Hash identifier: KpSV9iBrkJg0E2x6or141JfUNzyABw6013/mYFPjVAM=
Subject key identifier: B9:F1:88:5B:60:BF:62:3D:A7:C9:B5:C1:46:54:C1:8D:71:58:C2:80
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0194611593DCDEE74EC68AA0D25C98BF667C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ufGIW2C_Yj2nybXBRlTBjXFYwoA.roa
Signing time: Mon 13 Jan 2025 19:13:11 +0000
ROA not before: Mon 13 Jan 2025 19:13:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:15:93:dc:de:e7:4e:c6:8a:a0:d2:5c:98:bf:66:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 13 19:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9f1885b60bf623da7c9b5c14654c18d7158c280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:ed:57:3d:03:cd:9b:c3:96:02:fe:71:22:
ed:00:53:cd:7b:cc:15:ee:aa:bb:4a:d8:60:71:55:
73:ad:e1:bc:51:b7:3a:6d:a5:91:f3:24:ab:ed:f6:
2e:9e:e2:25:7a:36:24:2e:46:75:c2:15:d6:8e:d7:
77:19:36:ad:b8:3c:f9:c4:cd:06:9a:05:6b:fe:38:
7f:57:01:e0:fb:70:17:43:1a:45:41:c7:84:83:c2:
21:5c:ab:d7:ca:02:d2:e8:3d:b4:15:0b:11:43:f3:
69:1f:1a:e3:cb:e0:d6:71:23:48:ff:46:cf:18:06:
97:f0:17:d1:db:4b:a2:a7:c2:42:09:35:1f:8e:f3:
56:ff:84:f5:b4:01:70:46:57:39:5b:1c:ec:cc:b3:
b0:78:2a:8b:90:f8:98:62:ba:24:60:f9:f6:9d:0c:
09:d2:d2:a6:6a:8b:07:20:16:a9:fd:3c:39:f7:45:
a6:59:ee:8e:30:08:32:db:00:79:ae:4b:20:38:e1:
ad:5b:25:2a:ed:2a:3d:61:84:b1:e9:af:c8:2a:ca:
5d:92:bb:e9:37:08:e1:48:96:31:b1:1b:f4:37:ec:
53:5a:f6:e4:2b:c7:54:00:e2:97:ac:7a:9b:10:c8:
38:0f:f5:04:99:8e:b3:3b:98:fc:a9:1a:17:95:f6:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F1:88:5B:60:BF:62:3D:A7:C9:B5:C1:46:54:C1:8D:71:58:C2:80
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/ufGIW2C_Yj2nybXBRlTBjXFYwoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
05:f9:5e:a3:58:e8:d7:29:6a:37:57:d9:4f:96:6e:10:f8:3f:
b4:aa:7e:85:71:85:b7:e6:84:46:59:ab:e2:ed:fb:af:00:48:
0c:61:97:00:1a:11:83:b9:f5:e5:c9:a7:da:bb:5c:57:16:44:
c0:d6:c8:7d:bf:2d:84:e9:6b:ce:ce:7a:3a:38:c3:7a:7c:e4:
db:c4:67:c9:08:0f:73:7e:7d:a5:3c:1e:fe:79:7e:2a:8f:2a:
96:4c:80:60:ac:f7:fb:1d:3c:32:d3:64:01:43:64:1d:92:64:
75:fd:8b:5f:81:11:0c:ac:e3:ec:99:0b:23:f5:3a:66:58:7c:
db:ac:25:cb:c4:1f:e5:99:88:c5:62:1e:f2:64:73:c7:a5:8f:
05:71:f5:10:27:e2:34:d1:ac:7b:55:05:59:b6:84:40:03:9d:
fc:6a:f3:47:94:2b:13:c7:b6:a0:54:cc:f7:ba:53:3a:1d:b9:
c8:eb:17:ce:16:6d:12:f5:c8:bb:6e:34:68:ff:b8:3a:da:2b:
68:d9:60:10:70:00:83:7e:f9:c5:f8:b6:c7:9f:29:5b:02:04:
d5:a8:0d:0f:d9:12:5f:bf:24:6d:a4:43:1d:9e:c8:61:55:4d:
17:d2:5b:b7:99:f3:83:ea:75:64:80:48:1b:3b:66:55:d6:21:
41:cc:57:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:42:42 2025 by rpki-client