Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/UOOUpMn7K1XPYPxsoVYAOW7VzOQ.roa
File: UOOUpMn7K1XPYPxsoVYAOW7VzOQ.roa (raw, json)
Hash identifier: qYfEBqoVkIm0Zf4yJBTU1ylp6p9ih0VpLn1lYKWuDn4=
Subject key identifier: 50:E3:94:A4:C9:FB:2B:55:CF:60:FC:6C:A1:56:00:39:6E:D5:CC:E4
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 01856D53DAE3F87C54F7B6D145459031A8C9
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/UOOUpMn7K1XPYPxsoVYAOW7VzOQ.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208850
IP address blocks: 2a11:29c0:3dfa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:da:e3:f8:7c:54:f7:b6:d1:45:45:90:31:a8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50e394a4c9fb2b55cf60fc6ca15600396ed5cce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:05:23:01:59:2e:13:bd:ab:d1:ec:86:92:
2a:76:80:34:ff:82:74:0f:43:68:26:75:47:8c:e7:
dd:c2:39:27:d0:76:b8:bb:86:52:3c:ba:73:da:22:
71:47:ac:63:a1:72:35:1e:ba:1d:67:a0:b2:82:90:
04:47:89:b5:ae:4c:46:e0:7f:7d:37:2c:e0:10:a4:
bf:f1:c5:cf:19:82:98:71:5c:16:30:3e:4c:39:49:
95:69:9e:98:2e:14:40:5d:63:be:e6:13:f2:4c:de:
c0:69:fc:92:46:72:40:48:a6:19:1e:bf:4f:eb:b5:
a6:d4:da:1e:a2:c2:0d:69:9f:6e:31:b5:7c:3e:10:
e3:d2:89:42:54:61:3e:26:78:74:05:f7:64:75:c3:
f3:0d:38:88:74:db:c2:d0:9c:45:0a:35:16:db:87:
35:a8:5e:85:ce:af:55:dd:94:49:a3:a7:03:d3:21:
87:60:ab:a7:22:60:19:47:b2:a2:50:d5:89:36:b4:
39:1f:9f:e8:1b:2d:f7:a7:83:9a:8c:81:7f:6b:d3:
10:90:ef:36:97:12:d9:58:ff:c7:fe:41:7b:f8:ef:
65:75:e8:13:47:9d:f4:79:0f:15:1b:f3:4d:90:b2:
31:00:4a:4e:6f:65:ff:b9:e6:b2:46:08:14:89:0b:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E3:94:A4:C9:FB:2B:55:CF:60:FC:6C:A1:56:00:39:6E:D5:CC:E4
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/UOOUpMn7K1XPYPxsoVYAOW7VzOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dfa::/48
Signature Algorithm: sha256WithRSAEncryption
60:da:52:4c:66:a5:a3:0f:f1:85:36:f0:d9:33:1a:6f:7b:22:
c9:f1:2c:4d:68:ef:50:2a:05:95:90:36:87:fc:fd:e1:8b:d3:
74:3f:65:99:78:82:03:e5:b6:f6:e3:48:5b:f0:5f:fd:9f:b5:
47:13:d4:2a:02:98:98:29:4f:d2:44:bd:b1:81:f6:05:a9:0a:
ce:e5:e3:47:3f:4f:60:8e:fd:4d:e5:d8:83:bf:b7:f3:5a:fa:
6f:44:c3:f3:53:03:e5:75:41:dd:63:28:f6:80:f2:30:c8:0c:
4d:8f:65:e9:b1:96:6c:df:92:15:aa:5c:0f:73:79:26:7a:a0:
17:26:50:bd:30:53:13:33:a5:91:ea:cd:81:08:bc:df:f7:3b:
3e:7e:20:e1:5d:d8:48:11:ed:2a:5d:c1:fb:a0:7c:32:42:64:
64:09:d8:3f:bc:9c:3c:2f:fd:7d:90:01:2b:a3:25:e4:aa:21:
11:ef:cb:b8:86:9f:17:bd:95:4b:e9:c7:2f:99:bc:af:39:16:
3d:92:dd:51:aa:db:76:92:6a:3f:1f:96:9b:3c:0f:a9:31:40:
9c:2b:57:3f:7c:9a:89:30:95:6b:31:bb:2f:50:d3:1a:08:cf:
db:36:3c:5e:2b:58:5d:47:ad:74:7c:de:00:71:60:15:03:a8:
ba:3f:58:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtU9rj+HxU97bRRUWQMajJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MTY4NDEzNjEyNGE1Y2FjYmU3YmY3ZDlmNjlmYTQyMWVj
Y2ZkMzcwHhcNMjMwMTAxMTIzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGUzOTRhNGM5ZmIyYjU1Y2Y2MGZjNmNhMTU2MDAzOTZlZDVjY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyicFIwFZLhO9q9HshpIqdoA0/4J0
D0NoJnVHjOfdwjkn0Ha4u4ZSPLpz2iJxR6xjoXI1HrodZ6CygpAER4m1rkxG4H99
NyzgEKS/8cXPGYKYcVwWMD5MOUmVaZ6YLhRAXWO+5hPyTN7AafySRnJASKYZHr9P
67Wm1NoeosINaZ9uMbV8PhDj0olCVGE+Jnh0BfdkdcPzDTiIdNvC0JxFCjUW24c1
qF6Fzq9V3ZRJo6cD0yGHYKunImAZR7KiUNWJNrQ5H5/oGy33p4OajIF/a9MQkO82
lxLZWP/H/kF7+O9ldegTR530eQ8VG/NNkLIxAEpOb2X/ueayRggUiQv4swIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFDjlKTJ+ytVz2D8bKFWADlu1czkMB8GA1UdIwQY
MBaAFHgWhBNhJKXKy+e/fZ9p+kIezP03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAt
NDJjMGI3NTYxZDI5LzEvVU9PVXBNbjdLMVhQWVB4c29WWUFPVzdWek9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZTI4MWYtNDA1ZC00NDM3LTgyMjAtNDJjMGI3NTYxZDI5
LzEvZUJhRUUyRWtwY3JMNTc5OW4ybjZRaDdNX1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEpwD36
MA0GCSqGSIb3DQEBCwUAA4IBAQBg2lJMZqWjD/GFNvDZMxpveyLJ8SxNaO9QKgWV
kDaH/P3hi9N0P2WZeIID5bb240hb8F/9n7VHE9QqApiYKU/SRL2xgfYFqQrO5eNH
P09gjv1N5diDv7fzWvpvRMPzUwPldUHdYyj2gPIwyAxNj2XpsZZs35IVqlwPc3km
eqAXJlC9MFMTM6WR6s2BCLzf9zs+fiDhXdhIEe0qXcH7oHwyQmRkCdg/vJw8L/19
kAEroyXkqiER78u4hp8XvZVL6ccvmbyvORY9kt1Rqtt2kmo/H5abPA+pMUCcK1c/
fJqJMJVrMbsvUNMaCM/bNjxeK1hdR610fN4AcWAVA6i6P1hy
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:38 2025 by rpki-client