Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/upnJZqHAB9u_UWtmD1d-YaDhsxc.roa
File: upnJZqHAB9u_UWtmD1d-YaDhsxc.roa (raw, json)
Hash identifier: 2T6vUVbZqx4u6CACRzu2Q3nKCLyf91uecik8i+q/6eI=
Subject key identifier: BA:99:C9:66:A1:C0:07:DB:BF:51:6B:66:0F:57:7E:61:A0:E1:B3:17
Certificate issuer: /CN=e955baa2e601ca899abdbfaf01ecaa8a230fd002
Certificate serial: 093ADA20
Authority key identifier: E9:55:BA:A2:E6:01:CA:89:9A:BD:BF:AF:01:EC:AA:8A:23:0F:D0:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VW6ouYByomavb-vAeyqiiMP0AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/upnJZqHAB9u_UWtmD1d-YaDhsxc.roa
Signing time: Sat 01 Jan 2022 11:02:47 +0000
ROA not before: Sat 01 Jan 2022 11:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57112
IP address blocks: 86.111.208.0/22 maxlen: 24
217.76.16.0/20 maxlen: 24
217.76.16.0/21 maxlen: 24
217.76.24.0/21 maxlen: 24
2a0e:6580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154851872 (0x93ada20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e955baa2e601ca899abdbfaf01ecaa8a230fd002
Validity
Not Before: Jan 1 11:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba99c966a1c007dbbf516b660f577e61a0e1b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:92:82:3b:95:37:79:aa:a0:13:98:c4:82:
e7:ad:97:49:d7:80:b2:72:34:4c:67:15:c6:1e:28:
78:82:da:69:87:65:c0:a7:4d:c2:23:67:a2:99:bb:
87:4d:9f:28:ac:2a:9d:ba:06:81:bc:6d:4e:1e:77:
dc:07:cc:fa:78:ee:4b:86:7b:f4:59:c4:58:67:01:
46:54:e8:38:5b:46:66:13:9a:c8:ec:f2:e5:0d:08:
72:3d:da:e6:3d:de:4c:b4:7b:2e:6e:8e:e9:13:88:
ad:6f:22:43:72:e6:64:a6:0b:01:00:dc:ca:da:81:
b1:66:38:03:09:df:d4:c5:82:32:1e:ad:94:47:c5:
bd:a1:45:09:f5:ff:53:6e:75:a7:dc:4c:fa:9b:49:
d2:40:11:c4:01:79:28:b9:79:54:bd:af:a9:d4:ff:
69:e5:c3:b9:f6:e8:ad:c1:b2:fe:9c:18:20:fa:5c:
94:3e:db:20:0d:44:eb:1b:c0:e6:c4:e2:e9:2b:ef:
9a:8f:76:fa:c0:25:37:47:90:76:59:33:63:57:5f:
c8:db:cb:24:d9:a6:f1:f7:2f:9e:10:9b:65:f7:84:
ed:bd:58:76:30:f2:8e:2c:80:cc:07:f7:86:b9:22:
69:30:5b:d4:e5:88:42:02:78:e8:55:ef:fe:85:37:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:C9:66:A1:C0:07:DB:BF:51:6B:66:0F:57:7E:61:A0:E1:B3:17
X509v3 Authority Key Identifier:
keyid:E9:55:BA:A2:E6:01:CA:89:9A:BD:BF:AF:01:EC:AA:8A:23:0F:D0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VW6ouYByomavb-vAeyqiiMP0AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/upnJZqHAB9u_UWtmD1d-YaDhsxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a7ce53-9a9b-40c9-ad50-ef3140f4185b/1/6VW6ouYByomavb-vAeyqiiMP0AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.208.0/22
217.76.16.0/20
IPv6:
2a0e:6580::/29
Signature Algorithm: sha256WithRSAEncryption
ca:78:79:ed:31:7f:a5:82:4b:62:1b:a1:cd:4f:07:10:fa:3d:
71:51:82:d5:83:cf:e2:ff:48:9d:9b:fd:f8:c2:81:a7:a0:88:
8e:35:c3:a6:6d:d4:b0:6a:01:59:02:fe:c2:67:cf:22:19:f1:
e3:86:c9:9b:fd:d4:a4:28:89:14:1a:5f:8e:fd:d6:1c:7a:86:
fd:64:76:c1:11:01:3e:c1:de:dd:a2:f2:88:80:e2:14:f2:f5:
8c:0a:cc:c2:71:07:26:9c:70:d4:92:1d:cd:5a:e3:9f:5f:ba:
40:ae:e8:5f:23:29:46:7e:9b:c4:77:f7:f4:35:f7:76:a2:61:
fb:7f:c3:e9:77:ca:82:26:57:77:aa:55:39:79:c3:0b:e4:b1:
a1:9c:77:b9:b5:46:a7:be:4a:c4:3f:d5:b6:21:a5:f4:21:0c:
c0:e6:62:d8:19:87:1a:24:c6:1e:44:08:e5:3c:1d:1e:43:2d:
5b:9f:80:87:eb:e4:3e:60:72:d5:62:f8:10:01:d5:24:0d:0e:
be:db:05:03:d9:c0:56:9a:1e:0d:d0:e1:b4:be:3b:ab:4b:e3:
a8:99:08:27:02:ea:12:7c:81:55:67:05:3b:d6:5a:ea:23:86:
dd:d7:d1:bf:d2:93:74:a5:1e:07:49:37:98:2f:38:bd:f2:76:
8f:25:24:02
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECTraIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OTU1YmFhMmU2MDFjYTg5OWFiZGJmYWYwMWVjYWE4YTIzMGZkMDAyMB4XDTIyMDEw
MTExMDI0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE5OWM5NjZhMWMw
MDdkYmJmNTE2YjY2MGY1NzdlNjFhMGUxYjMxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOopkoI7lTd5qqATmMSC562XSdeAsnI0TGcVxh4oeILaaYdl
wKdNwiNnopm7h02fKKwqnboGgbxtTh533AfM+njuS4Z79FnEWGcBRlToOFtGZhOa
yOzy5Q0Icj3a5j3eTLR7Lm6O6ROIrW8iQ3LmZKYLAQDcytqBsWY4Awnf1MWCMh6t
lEfFvaFFCfX/U251p9xM+ptJ0kARxAF5KLl5VL2vqdT/aeXDufborcGy/pwYIPpc
lD7bIA1E6xvA5sTi6Svvmo92+sAlN0eQdlkzY1dfyNvLJNmm8fcvnhCbZfeE7b1Y
djDyjiyAzAf3hrkiaTBb1OWIQgJ46FXv/oU3wpkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBS6mclmocAH279Ra2YPV35hoOGzFzAfBgNVHSMEGDAWgBTpVbqi5gHKiZq9
v68B7KqKIw/QAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZWVzZvdVlCeW9tYXZiLXZBZXlxaWlNUDBBSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvYTdjZTUzLTlhOWItNDBjOS1hZDUwLWVmMzE0MGY0MTg1Yi8x
L3VwbkpacUhBQjl1X1VXdG1EMWQtWWFEaHN4Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
YTdjZTUzLTlhOWItNDBjOS1hZDUwLWVmMzE0MGY0MTg1Yi8xLzZWVzZvdVlCeW9t
YXZiLXZBZXlxaWlNUDBBSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAlZv0AMEBNlMEDANBAIAAjAHAwUD
Kg5lgDANBgkqhkiG9w0BAQsFAAOCAQEAynh57TF/pYJLYhuhzU8HEPo9cVGC1YPP
4v9InZv9+MKBp6CIjjXDpm3UsGoBWQL+wmfPIhnx44bJm/3UpCiJFBpfjv3WHHqG
/WR2wREBPsHe3aLyiIDiFPL1jArMwnEHJpxw1JIdzVrjn1+6QK7oXyMpRn6bxHf3
9DX3dqJh+3/D6XfKgiZXd6pVOXnDC+SxoZx3ubVGp75KxD/VtiGl9CEMwOZi2BmH
GiTGHkQI5TwdHkMtW5+Ah+vkPmBy1WL4EAHVJA0OvtsFA9nAVpoeDdDhtL47q0vj
qJkIJwLqEnyBVWcFO9Za6iOG3dfRv9KTdKUeB0k3mC84vfJ2jyUkAg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:43 2025 by rpki-client