Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/uMSALwCFCjHgfXY8GtxojOClYFk.roa
File: uMSALwCFCjHgfXY8GtxojOClYFk.roa (raw, json)
Hash identifier: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=
Subject key identifier: B8:C4:80:2F:00:85:0A:31:E0:7D:76:3C:1A:DC:68:8C:E0:A5:60:59
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D4631DFEC12958D1F4690A5C8AD37
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/uMSALwCFCjHgfXY8GtxojOClYFk.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50801
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
194.120.126.0/24 maxlen: 24
2a07:6f40::/29 maxlen: 48
2a0d:2140::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:46:31:df:ec:12:95:8d:1f:46:90:a5:c8:ad:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8c4802f00850a31e07d763c1adc688ce0a56059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:37:59:21:ea:77:f1:a6:56:a9:12:bc:ea:
13:e2:16:39:62:8a:ad:f8:31:4f:20:37:59:cf:ee:
98:63:bc:a8:d9:8c:15:f7:96:e3:85:fe:b8:3b:e8:
ba:6b:aa:e5:86:f1:b6:02:6b:dd:90:bd:25:56:41:
ae:b8:12:52:b0:ef:41:ed:2b:eb:2b:f5:0b:42:03:
5c:7f:49:8e:34:3d:c6:8e:78:cf:5c:90:89:e1:ae:
fe:33:40:3b:a2:6f:95:39:b3:21:bd:00:c6:c9:78:
3b:36:2a:45:68:85:ee:dc:01:0a:bd:72:e9:06:87:
25:a5:ea:3d:9a:54:90:f3:30:1f:1a:c3:80:6d:1c:
24:cf:79:99:b8:20:d6:7a:46:4b:17:26:c5:b3:d7:
e6:0b:2c:7a:fe:50:c0:bd:cd:87:85:d1:fa:10:84:
ac:16:b0:7e:a9:79:05:10:3a:c0:76:e1:d3:52:d7:
b1:d8:7e:a2:7c:3f:f8:f9:2e:ec:d9:7a:0c:67:e6:
32:c7:ac:36:e7:11:7c:4f:ef:5d:88:92:92:97:a5:
53:b4:b8:5a:7c:10:9d:8e:22:2c:5a:f2:2b:08:2b:
64:b3:d4:d1:d3:54:bb:ec:ab:65:34:48:16:5c:3d:
c0:f7:d4:03:6f:de:79:92:f9:f4:f9:7c:9b:77:f4:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:80:2F:00:85:0A:31:E0:7D:76:3C:1A:DC:68:8C:E0:A5:60:59
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/uMSALwCFCjHgfXY8GtxojOClYFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
194.120.126.0/24
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
6d:48:88:d5:7d:2f:5d:a1:72:7e:a4:24:a7:e0:0f:4b:5f:cd:
41:82:61:4d:3c:9d:73:5b:47:b9:a5:e3:8a:4f:87:55:5f:4e:
f9:a0:8b:0c:80:5e:e3:72:a3:38:09:c9:ea:ed:d3:a4:fe:bb:
15:fa:0a:cf:c0:cc:99:7d:e8:d8:f7:bb:c2:14:de:d7:a5:6a:
53:17:a3:1d:5a:2d:4b:28:39:22:de:64:8f:f3:09:9b:c6:79:
b1:b7:28:8e:74:aa:38:51:b4:cd:cc:d0:44:d9:f7:9f:c8:e2:
19:ca:c0:84:f6:75:55:7d:e1:00:22:c7:03:45:f2:91:f1:5f:
75:a7:24:ef:8c:53:ed:a4:91:35:7f:62:a8:75:8f:ad:44:a0:
5d:c4:e1:0d:38:6e:32:56:44:f0:4f:d4:7e:94:45:fd:86:52:
f6:51:64:86:1b:da:92:95:0f:11:b2:53:b2:84:2b:d4:8a:1e:
ee:92:3d:86:af:65:47:c1:78:6f:08:a4:ae:31:b2:e6:ba:b1:
36:3b:c6:06:91:74:2d:eb:02:07:36:f0:bd:38:61:50:31:17:
d8:73:d9:34:4b:65:f2:07:49:12:10:7b:a2:57:c3:a9:1e:93:
7f:47:65:38:37:71:1d:77:a6:b4:c7:f8:d6:be:e5:32:77:c2:
c0:1d:93:a2
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQijUYx3+wSlY0fRpClyK03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjUwMTAxMTU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGM0ODAyZjAwODUwYTMxZTA3ZDc2M2MxYWRjNjg4Y2UwYTU2MDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVw3WSHqd/GmVqkSvOoT4hY5Yoqt
+DFPIDdZz+6YY7yo2YwV95bjhf64O+i6a6rlhvG2AmvdkL0lVkGuuBJSsO9B7Svr
K/ULQgNcf0mOND3GjnjPXJCJ4a7+M0A7om+VObMhvQDGyXg7NipFaIXu3AEKvXLp
Boclpeo9mlSQ8zAfGsOAbRwkz3mZuCDWekZLFybFs9fmCyx6/lDAvc2HhdH6EISs
FrB+qXkFEDrAduHTUtex2H6ifD/4+S7s2XoMZ+Yyx6w25xF8T+9diJKSl6VTtLha
fBCdjiIsWvIrCCtks9TR01S77KtlNEgWXD3A99QDb955kvn0+Xybd/TR0wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFLjEgC8AhQox4H12PBrcaIzgpWBZMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvdU1TQUx3Q0ZDakhnZlhZOEd0eG9qT0NsWUZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCBfzoAwQC
UE6EAwQAwnh+MBQEAgACMA4DBQMqB29AAwUDKg0hQDANBgkqhkiG9w0BAQsFAAOC
AQEAbUiI1X0vXaFyfqQkp+APS1/NQYJhTTydc1tHuaXjik+HVV9O+aCLDIBe43Kj
OAnJ6u3TpP67FfoKz8DMmX3o2Pe7whTe16VqUxejHVotSyg5It5kj/MJm8Z5sbco
jnSqOFG0zczQRNn3n8jiGcrAhPZ1VX3hACLHA0XykfFfdack74xT7aSRNX9iqHWP
rUSgXcThDThuMlZE8E/UfpRF/YZS9lFkhhvakpUPEbJTsoQr1Ioe7pI9hq9lR8F4
bwikrjGy5rqxNjvGBpF0LesCBzbwvThhUDEX2HPZNEtl8gdJEhB7olfDqR6Tf0dl
ODdxHXemtMf41r7lMnfCwB2Tog==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:44 2025 by rpki-client