Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa
File: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (raw, json)
Hash identifier: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=
Subject key identifier: 50:5C:EA:E8:74:F3:2E:C2:97:40:38:88:C1:B3:15:C2:C4:AF:08:A1
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 0194228E0BB9DBDB1F4B698555B0FD423703
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210475
IP address blocks: 2a01:ffc6:4000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0b:b9:db:db:1f:4b:69:85:55:b0:fd:42:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505ceae874f32ec297403888c1b315c2c4af08a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:30:b4:12:92:3a:ec:a3:ee:81:ae:56:bf:
63:32:d9:59:e5:ed:a7:d6:ee:7a:2d:4e:11:b7:68:
92:1e:44:1c:e3:4e:4f:a9:ad:70:ef:27:1e:45:58:
f0:81:8c:aa:6b:ce:4a:6c:d7:65:66:83:24:f2:70:
db:b4:7a:d4:2e:f6:89:69:cc:ab:f8:a3:9c:31:c2:
fa:b3:64:99:51:6c:29:9b:8d:fe:24:55:71:b8:df:
98:e4:30:7d:31:55:ca:64:3e:90:b0:56:a9:be:a0:
74:25:af:3b:29:dd:48:5b:3a:38:73:b6:c4:e8:dc:
50:51:ea:b0:01:a9:10:39:ad:9b:79:27:0c:93:e2:
e9:cf:ff:9b:7c:b3:7e:0e:8b:e6:c0:af:ca:d7:6c:
b5:db:dc:c0:1f:67:18:87:e0:88:e2:79:e5:64:53:
09:37:97:f7:8a:c9:d9:ff:6d:cf:8b:65:da:d3:ed:
51:84:64:d8:c7:93:c6:32:42:dc:2d:2d:41:41:31:
aa:5f:0c:ae:52:b6:ad:57:2a:2b:8d:e2:93:3d:f8:
09:f9:f9:d1:ee:ed:04:e8:c9:0e:ea:5d:9c:64:de:
61:b8:5f:d4:53:80:a1:7f:30:2f:91:28:01:48:f4:
1e:e6:42:db:96:3f:42:c7:a6:f4:a0:68:93:f4:24:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:EA:E8:74:F3:2E:C2:97:40:38:88:C1:B3:15:C2:C4:AF:08:A1
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc6:4000::/34
Signature Algorithm: sha256WithRSAEncryption
37:4a:5d:2a:44:b2:ae:47:29:46:8b:4a:bc:02:ed:fa:ec:cc:
37:3a:3a:8e:e0:f5:9a:9c:dd:91:ff:06:bd:5f:d9:ea:60:04:
da:b3:ad:26:20:5e:db:f9:d4:10:bf:91:0c:d6:56:57:cc:a0:
2b:b5:72:eb:e4:d5:f3:4b:11:2d:58:52:d5:59:73:af:76:56:
67:10:09:99:a0:dc:d8:c1:96:1c:7e:ae:b4:d9:f1:0e:d6:df:
0d:73:34:a7:27:17:db:94:82:c7:21:9e:6f:c6:59:c3:ad:99:
34:db:ff:b3:9e:ac:72:c1:cb:59:2f:64:ec:d5:69:a1:10:e6:
54:b9:3a:86:29:de:bf:10:cb:e0:62:26:1a:23:2f:50:86:c5:
8c:27:81:5a:28:5c:a8:17:be:50:1d:32:66:3e:b2:cf:91:80:
69:a2:6f:d0:ac:d7:ce:2a:fc:83:1a:73:63:4f:f3:b2:e5:10:
ba:71:ef:ea:d1:8a:20:ea:8a:6b:51:51:30:9b:b9:58:48:0b:
ab:ff:aa:97:e0:b7:6f:75:f0:1a:f9:27:72:b6:ac:a0:9d:75:
05:b1:63:8f:3f:b5:65:55:5d:f6:f2:17:8a:37:60:b4:1f:de:
73:bf:43:32:05:82:1a:ff:16:75:4f:48:21:36:5a:5c:2a:db:
82:f6:02:f3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijgu529sfS2mFVbD9QjcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz
YjQ0MDQwHhcNMjUwMTAxMTU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDVjZWFlODc0ZjMyZWMyOTc0MDM4ODhjMWIzMTVjMmM0YWYwOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5awwtBKSOuyj7oGuVr9jMtlZ5e2n
1u56LU4Rt2iSHkQc405Pqa1w7yceRVjwgYyqa85KbNdlZoMk8nDbtHrULvaJacyr
+KOcMcL6s2SZUWwpm43+JFVxuN+Y5DB9MVXKZD6QsFapvqB0Ja87Kd1IWzo4c7bE
6NxQUeqwAakQOa2beScMk+Lpz/+bfLN+DovmwK/K12y129zAH2cYh+CI4nnlZFMJ
N5f3isnZ/23Pi2Xa0+1RhGTYx5PGMkLcLS1BQTGqXwyuUratVyorjeKTPfgJ+fnR
7u0E6MkO6l2cZN5huF/UU4ChfzAvkSgBSPQe5kLblj9Cx6b0oGiT9CT0vQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFBc6uh08y7Cl0A4iMGzFcLErwihMB8GA1UdIwQY
MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt
ODc2YzdmY2E0YjM0LzEvVUZ6cTZIVHpMc0tYUURpSXdiTVZ3c1N2Q0tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0
LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKgH/xkAw
DQYJKoZIhvcNAQELBQADggEBADdKXSpEsq5HKUaLSrwC7frszDc6Oo7g9Zqc3ZH/
Br1f2epgBNqzrSYgXtv51BC/kQzWVlfMoCu1cuvk1fNLES1YUtVZc692VmcQCZmg
3NjBlhx+rrTZ8Q7W3w1zNKcnF9uUgschnm/GWcOtmTTb/7OerHLBy1kvZOzVaaEQ
5lS5OoYp3r8Qy+BiJhojL1CGxYwngVooXKgXvlAdMmY+ss+RgGmib9Cs184q/IMa
c2NP87LlELpx7+rRiiDqimtRUTCbuVhIC6v/qpfgt2918Br5J3K2rKCddQWxY48/
tWVVXfbyF4o3YLQf3nO/QzIFghr/FnVPSCE2Wlwq24L2AvM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:41:23 2025 by rpki-client