Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa
File: UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa (raw, json)
Hash identifier: Iv5M96f/4AyXNBfTo49Zxh554cDlKiW0Et8FXEewisM=
Subject key identifier: 50:9F:7F:15:E2:06:38:E8:E0:65:12:43:99:BD:E6:7D:BE:01:25:9B
Certificate issuer: /CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Certificate serial: 019424B2751B1A230D133501305723D60065
Authority key identifier: 4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216195
IP address blocks: 2a13:fc41::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:75:1b:1a:23:0d:13:35:01:30:57:23:d6:00:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf9c3ec47fccf01d9305fe0d7d481b306b0d48c
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=509f7f15e20638e8e065124399bde67dbe01259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:64:b7:aa:91:49:71:1a:1f:1c:2b:4d:bb:
c1:25:a2:3a:eb:c9:07:c0:96:d4:a9:6a:98:42:fb:
47:f9:79:ec:55:f5:b4:e1:aa:27:65:e2:ba:2e:7e:
b0:e7:4b:34:78:7d:6c:26:4e:de:26:4e:8b:d1:87:
1a:54:a8:d6:91:df:07:e8:99:00:54:89:9a:09:89:
4c:6c:40:bc:a4:0b:95:55:0e:c5:70:de:90:20:1b:
a4:6e:ec:e3:59:2b:15:40:80:ce:f7:81:ff:8e:f8:
31:ae:c9:c5:fc:e3:57:ff:d2:20:1e:e2:c6:6c:bf:
83:a1:5e:5c:ac:d7:ee:44:b6:04:b3:cf:cb:c5:02:
64:ac:05:8d:00:ba:21:d4:b3:c3:78:36:e5:a2:db:
13:d4:36:d4:97:a3:c3:d3:f6:25:f6:d1:68:6c:95:
ec:81:98:0c:ff:97:43:f8:c0:49:c8:6b:fd:86:05:
02:e9:46:be:ab:51:d1:de:7c:54:b9:bc:1d:d5:8d:
8e:b7:85:06:2f:a2:59:c5:cd:e6:8d:2d:f9:aa:5a:
45:bf:8f:ca:b7:94:99:64:48:40:53:a6:59:1e:d2:
d7:88:28:db:a2:71:79:df:71:5e:d5:c0:10:9a:cf:
f4:0f:39:e7:ab:ab:ea:ea:47:83:6c:9a:82:28:1d:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:7F:15:E2:06:38:E8:E0:65:12:43:99:BD:E6:7D:BE:01:25:9B
X509v3 Authority Key Identifier:
keyid:4C:F9:C3:EC:47:FC:CF:01:D9:30:5F:E0:D7:D4:81:B3:06:B0:D4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPnD7Ef8zwHZMF_g19SBswaw1Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/UJ9_FeIGOOjgZRJDmb3mfb4BJZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b3fa64-f8b1-44e8-aba6-8601663395eb/1/TPnD7Ef8zwHZMF_g19SBswaw1Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc41::/48
Signature Algorithm: sha256WithRSAEncryption
0c:78:d2:e8:92:ec:89:50:7d:b4:8e:21:d7:89:fb:3b:aa:bb:
d1:85:f5:dc:0d:5b:c7:fc:8f:90:57:82:d8:3d:56:62:53:9b:
28:da:a6:0b:61:09:e4:45:9a:c7:82:da:d5:b7:8d:e5:c0:3e:
47:30:cc:54:37:aa:f2:1e:70:00:f5:cb:f6:29:c3:87:fc:59:
85:de:8b:ec:ca:9b:e3:ee:7e:08:52:93:41:bd:d7:62:02:27:
20:25:73:61:de:35:66:bc:0a:00:17:32:b3:cd:1b:99:71:4b:
3c:67:22:22:b6:f6:15:21:b4:cc:16:3c:0c:c6:73:95:8d:3b:
c8:e6:b7:03:1d:8c:83:2e:86:21:30:9c:b9:3f:ad:57:2b:c8:
14:27:ca:0a:36:bc:ac:2a:54:8d:c7:dc:7f:59:61:58:58:1e:
d6:1e:74:34:2f:6a:50:ab:42:ee:07:15:cf:f9:99:32:c4:43:
9e:8d:a9:8b:c7:bb:ec:5a:98:66:93:ea:92:a0:1b:93:35:42:
88:83:ff:7e:ab:a6:8d:71:fa:2a:ca:ed:fa:f1:96:23:81:e0:
b8:83:e0:41:ed:7f:b6:8e:ab:37:23:18:69:d0:84:a4:c0:f1:
b3:c8:dd:0c:ac:ba:d2:30:f5:09:e3:4d:ec:d4:d9:dd:24:1f:
36:13:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net