Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/upaJDfXlmdSZ6NW5vEbhnI0mFF4.roa
File: upaJDfXlmdSZ6NW5vEbhnI0mFF4.roa (raw, json)
Hash identifier: lGrjt8KXGN7JXYMeHg41M1CHuotPPVdqKSHT+kZshIE=
Subject key identifier: BA:96:89:0D:F5:E5:99:D4:99:E8:D5:B9:BC:46:E1:9C:8D:26:14:5E
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018649558BE3C0A6C487916638688A1B2E11
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/upaJDfXlmdSZ6NW5vEbhnI0mFF4.roa
Signing time: Mon 13 Feb 2023 05:53:08 +0000
ROA not before: Mon 13 Feb 2023 05:53:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202122
IP address blocks: 92.61.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:55:8b:e3:c0:a6:c4:87:91:66:38:68:8a:1b:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 13 05:53:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba96890df5e599d499e8d5b9bc46e19c8d26145e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:e4:04:7a:04:e2:5b:64:b1:ad:82:51:b7:
2b:8f:5e:da:f7:c0:81:81:83:8e:12:57:b6:af:fd:
ac:45:40:67:f0:96:63:41:90:66:22:c4:9c:0f:7a:
9e:60:d6:76:99:1e:2d:07:7a:f5:e5:22:19:c2:ef:
af:c6:5d:e5:78:12:42:f0:24:fc:f9:b6:a8:67:a2:
fe:01:44:ea:ab:82:79:d7:23:73:d4:a0:e5:64:6e:
17:4b:84:3f:56:52:9a:74:20:a7:b3:2b:d3:44:58:
51:29:9a:26:f0:30:84:75:99:f8:7a:67:52:8d:7c:
a7:87:1a:44:92:7e:12:f6:3b:61:cf:fe:56:9e:ee:
3b:35:d3:5f:28:f6:aa:40:c7:37:8f:4e:19:8d:dc:
1a:8d:a9:51:08:cb:dc:d7:00:4e:78:2a:8f:bf:bf:
7a:c8:13:d0:bf:5d:4a:a7:93:08:03:16:b6:9f:d1:
18:ae:e7:4b:41:ad:c0:4a:80:3a:81:87:d6:ef:23:
e3:5e:0d:8a:6e:b5:33:d9:62:98:c6:9c:a1:da:18:
32:2b:5f:10:29:41:c3:bc:2b:6d:a5:76:a1:3f:25:
80:9b:82:0c:e1:b8:bc:52:d5:81:89:37:70:1d:a1:
7f:6d:88:67:5e:cc:0d:5a:1f:f7:d8:62:aa:a0:ef:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:89:0D:F5:E5:99:D4:99:E8:D5:B9:BC:46:E1:9C:8D:26:14:5E
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/upaJDfXlmdSZ6NW5vEbhnI0mFF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.224.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:1e:50:86:21:c1:90:c3:c9:a5:ad:21:ba:69:63:da:81:35:
09:cd:ec:7f:2a:b6:90:b3:99:1f:b6:2e:0e:86:f9:e4:68:cd:
dc:90:e1:91:1f:d9:e4:02:d3:ef:10:5b:29:db:07:f8:b7:26:
43:6a:f4:e5:39:58:89:e4:37:67:1b:3d:25:90:d7:b7:d2:ee:
1b:0d:02:b3:13:01:78:9e:de:b2:4e:23:4b:eb:ee:e5:12:54:
9d:3d:8e:35:07:a1:b1:e4:ef:28:0f:54:ac:cd:d6:eb:bd:51:
df:c3:4b:02:38:bf:db:cb:bd:fb:32:8a:01:9d:47:df:69:92:
85:a5:31:5e:12:af:cf:14:a8:80:2b:81:ec:cc:63:1f:0d:7c:
fc:c7:15:35:2a:f9:f2:01:61:bd:59:a8:80:54:f8:af:44:d9:
0a:52:55:4a:e8:86:66:ed:3d:88:a1:09:d0:53:05:97:ce:3a:
ce:70:ac:bc:fa:f5:12:eb:c5:d5:b4:ad:12:30:dc:a4:00:19:
96:e2:76:d2:b3:f5:3b:86:d5:cf:90:44:e1:4e:d5:cd:4c:67:
5c:1e:f9:07:da:81:fd:74:46:a0:ee:f6:71:d8:1e:26:52:e8:
e5:9f:bb:cc:53:e6:bb:2d:7f:13:26:4e:be:e5:7e:d5:76:63:
b5:b6:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:14 2025 by rpki-client