Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/UQO8ufM-s3mVowbt4MgFViLk2gE.roa
File: UQO8ufM-s3mVowbt4MgFViLk2gE.roa (raw, json)
Hash identifier: RzubMtN/AE7pmDNqkaBx2ob67ZwPT359paX6B2eoPoY=
Subject key identifier: 51:03:BC:B9:F3:3E:B3:79:95:A3:06:ED:E0:C8:05:56:22:E4:DA:01
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: E47F
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/UQO8ufM-s3mVowbt4MgFViLk2gE.roa
Signing time: Sun 06 Mar 2022 11:29:41 +0000
ROA not before: Sun 06 Mar 2022 11:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2607
IP address blocks: 193.87.0.0/16 maxlen: 16
194.160.0.0/16 maxlen: 16
2001:4118::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58495 (0xe47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Mar 6 11:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5103bcb9f33eb37995a306ede0c8055622e4da01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:ec:5d:f1:a2:6c:30:70:bd:e2:7b:31:04:
d9:6c:65:9d:53:60:35:33:32:38:04:45:80:56:d3:
53:a0:51:1d:ca:2a:2e:f3:b6:34:a0:09:85:98:c4:
0f:95:56:ab:64:b7:0a:7f:a1:b0:96:ef:f8:e0:11:
6f:90:35:c7:fd:f1:dc:1c:c7:c9:4a:d2:1a:d3:da:
27:27:5f:88:71:79:17:df:72:ed:b4:c3:7d:44:18:
52:c1:98:fe:d7:e6:ba:f6:95:7a:82:ca:33:b5:78:
31:5d:3e:65:4d:49:a9:c2:87:4e:7a:f0:18:93:f1:
ec:4b:9a:a0:38:1f:36:0e:20:97:44:fb:7c:52:b6:
06:16:46:a8:6a:b4:f3:1b:3f:f7:c8:f9:6a:47:ec:
81:ad:a7:4e:c1:ff:0a:66:1f:00:f7:72:2e:94:cc:
30:2c:01:54:b2:3f:92:42:41:4f:59:57:89:34:e3:
36:53:7d:b4:57:c7:c2:ad:02:fd:73:5d:96:35:48:
ce:ae:a0:15:38:5e:7e:28:97:79:f8:b1:87:e9:b4:
c4:bc:32:33:fa:39:98:d0:89:89:ad:a6:4a:f6:d0:
90:2b:ba:e0:fd:20:70:4b:c8:6a:7e:ab:30:d0:da:
f3:d0:30:da:f9:4e:48:d4:63:59:77:1e:cc:8f:ec:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:BC:B9:F3:3E:B3:79:95:A3:06:ED:E0:C8:05:56:22:E4:DA:01
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/UQO8ufM-s3mVowbt4MgFViLk2gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.87.0.0/16
194.160.0.0/16
IPv6:
2001:4118::/32
Signature Algorithm: sha256WithRSAEncryption
5b:76:94:fd:76:36:73:8e:2f:93:d5:46:08:5a:92:dc:c4:61:
a8:40:1a:a1:1b:5c:ed:16:39:84:fd:59:b7:61:80:4d:1a:d7:
98:5f:f7:37:0a:e3:0e:dd:2e:3a:20:ee:a8:f1:57:a9:53:d5:
2e:4a:1c:f3:45:c0:be:33:96:6a:0f:ad:bb:07:43:36:d5:17:
ff:ed:55:50:11:c2:59:d6:2e:8c:a7:cb:47:bd:ab:2b:eb:d7:
42:c2:a3:e4:3d:e3:9b:1c:4c:a2:27:1c:8d:84:5f:72:bc:dc:
ee:03:54:cf:80:fa:76:42:f9:e2:46:0f:12:90:ec:3c:47:b3:
17:21:27:6d:09:5e:27:40:fa:9b:54:c5:e6:9f:49:f5:d3:e0:
de:00:e3:17:1f:4d:f8:12:a2:66:0a:fe:46:6a:7b:3f:62:96:
51:54:4d:9a:c5:b4:44:9a:c6:6a:ef:e6:ec:be:f4:63:6a:33:
ea:19:84:f8:06:e0:e5:cf:80:1e:80:e2:b1:b3:d6:e1:95:13:
a8:55:2c:d2:75:8a:d3:00:3c:dd:be:69:a8:1c:db:01:20:74:
b1:11:32:8b:1e:4c:ce:d6:e4:05:b1:27:15:de:a9:3f:f3:a6:
ba:d9:31:b9:f1:34:8c:79:75:28:db:03:e4:64:21:98:0f:33:
a1:10:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:38 2025 by rpki-client