Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/U50M3xIUSlKjP9H42DDevL7rW_c.roa
File: U50M3xIUSlKjP9H42DDevL7rW_c.roa (raw, json)
Hash identifier: +D2w3jEd5LzJ024OAoU9O419fzRVlBf2FWVtI0ZxyOA=
Subject key identifier: 53:9D:0C:DF:12:14:4A:52:A3:3F:D1:F8:D8:30:DE:BC:BE:EB:5B:F7
Certificate issuer: /CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Certificate serial: 018CC56E0F78F39A13C9221FA0FAD64FC41E
Authority key identifier: 5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/U50M3xIUSlKjP9H42DDevL7rW_c.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212144
IP address blocks: 2a12:cac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0f:78:f3:9a:13:c9:22:1f:a0:fa:d6:4f:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5cc07cfa4f0d65e68a95019c256fd7edb66f44
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=539d0cdf12144a52a33fd1f8d830debcbeeb5bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:82:aa:ce:48:f1:79:40:61:a3:10:94:ba:
09:20:a8:a3:31:f5:f5:51:a8:6c:9f:5e:bf:08:3b:
18:1d:97:50:00:3e:f6:e2:9e:37:b3:e0:e9:fc:ec:
8f:0d:30:5c:b0:9f:90:19:62:ca:5e:e0:f8:94:dd:
84:66:29:1a:e8:cf:36:87:3f:6e:21:c5:04:72:15:
d9:03:c4:23:2a:93:a7:b8:24:66:68:64:c6:9f:9e:
70:f1:b2:25:6e:2a:2c:e0:07:63:37:0e:d0:be:c6:
97:84:32:1c:6f:2a:13:0f:1f:32:f1:62:56:68:87:
7b:7c:54:47:34:27:89:d0:f6:b4:a8:e2:a4:80:99:
bc:3d:42:f4:51:a9:20:fe:5d:bd:5c:08:a4:6b:3e:
e1:f2:be:26:b0:54:24:0f:4d:64:ca:90:cc:a4:a4:
a6:34:b2:83:4b:82:e6:1c:16:ad:cd:86:46:8c:58:
89:30:ce:9f:76:3d:89:55:aa:e1:ca:de:7c:34:45:
55:6e:5a:bc:c1:71:66:13:c2:fe:fa:70:43:56:7c:
35:b8:a7:65:4b:7c:9d:dd:8f:6e:cc:58:ac:c3:7c:
97:fe:6d:91:52:7a:ee:7e:c4:50:b5:84:14:bc:83:
7a:3f:53:88:e2:a6:c1:48:41:1b:cc:ec:37:ab:96:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:0C:DF:12:14:4A:52:A3:3F:D1:F8:D8:30:DE:BC:BE:EB:5B:F7
X509v3 Authority Key Identifier:
keyid:5C:5C:C0:7C:FA:4F:0D:65:E6:8A:95:01:9C:25:6F:D7:ED:B6:6F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFzAfPpPDWXmipUBnCVv1-22b0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/U50M3xIUSlKjP9H42DDevL7rW_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f95a4-9785-456a-999b-0b22c780cb8d/1/XFzAfPpPDWXmipUBnCVv1-22b0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
20:36:bd:07:b1:b6:9d:79:b1:44:0f:43:c6:55:c7:f6:05:1f:
6b:fa:a6:b1:73:aa:b4:1e:54:19:6f:e8:3a:c7:66:ca:38:6c:
03:48:4e:21:83:b6:3f:2d:9e:e8:04:0c:b1:cc:70:e5:3c:96:
ed:70:7a:fa:5e:7a:ca:04:e1:31:f0:e6:9e:c8:87:f1:43:46:
17:81:89:8c:88:cb:70:f2:9b:7f:22:60:3a:85:95:21:6f:97:
ab:18:cd:6e:f9:05:ab:91:30:34:4a:7e:a1:81:66:09:3b:69:
cc:dd:e7:51:02:5f:a1:35:36:43:3b:56:15:1e:dc:a2:c7:4e:
14:2b:cf:a4:e4:f7:4b:b3:9a:58:e6:32:26:cd:c3:a1:b8:22:
b9:36:f4:69:15:0a:60:27:7e:b0:8d:f9:15:f7:5e:39:15:ed:
85:62:e8:a0:0b:96:21:db:bc:81:c2:b2:6b:39:e6:ee:9e:5e:
ce:a3:a4:b5:70:25:64:b4:d4:7d:84:cf:fe:48:b9:06:ea:d0:
ce:a3:ae:dc:61:f6:4a:73:41:8c:1a:ee:e7:e0:ae:dd:54:e2:
c3:16:84:48:9c:93:be:3e:1e:a2:9e:89:33:0e:99:f4:0c:5a:
72:2f:f8:46:38:d5:2c:81:fa:f3:5d:3d:29:20:c8:4a:08:7c:
6e:2d:23:35
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzFbg9485oTySIfoPrWT8QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNWNjMDdjZmE0ZjBkNjVlNjhhOTUwMTljMjU2ZmQ3ZWRi
NjZmNDQwHhcNMjQwMTAxMTQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzlkMGNkZjEyMTQ0YTUyYTMzZmQxZjhkODMwZGViY2JlZWI1YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0GCqs5I8XlAYaMQlLoJIKijMfX1
Uahsn16/CDsYHZdQAD724p43s+Dp/OyPDTBcsJ+QGWLKXuD4lN2EZika6M82hz9u
IcUEchXZA8QjKpOnuCRmaGTGn55w8bIlbios4AdjNw7QvsaXhDIcbyoTDx8y8WJW
aId7fFRHNCeJ0Pa0qOKkgJm8PUL0Uakg/l29XAikaz7h8r4msFQkD01kypDMpKSm
NLKDS4LmHBatzYZGjFiJMM6fdj2JVarhyt58NEVVblq8wXFmE8L++nBDVnw1uKdl
S3yd3Y9uzFisw3yX/m2RUnrufsRQtYQUvIN6P1OI4qbBSEEbzOw3q5bisQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFOdDN8SFEpSoz/R+Ngw3ry+61v3MB8GA1UdIwQY
MBaAFFxcwHz6Tw1l5oqVAZwlb9fttm9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZ6QWZQcFBEV1htaXBVQm5DVnYxLTIyYjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZjk1YTQtOTc4NS00NTZhLTk5OWIt
MGIyMmM3ODBjYjhkLzEvVTUwTTN4SVVTbEtqUDlINDJERGV2TDdyV19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wZjk1YTQtOTc4NS00NTZhLTk5OWItMGIyMmM3ODBjYjhk
LzEvWEZ6QWZQcFBEV1htaXBVQm5DVnYxLTIyYjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLKwDAN
BgkqhkiG9w0BAQsFAAOCAQEAIDa9B7G2nXmxRA9DxlXH9gUfa/qmsXOqtB5UGW/o
OsdmyjhsA0hOIYO2Py2e6AQMscxw5TyW7XB6+l56ygThMfDmnsiH8UNGF4GJjIjL
cPKbfyJgOoWVIW+XqxjNbvkFq5EwNEp+oYFmCTtpzN3nUQJfoTU2QztWFR7cosdO
FCvPpOT3S7OaWOYyJs3DobgiuTb0aRUKYCd+sI35FfdeORXthWLooAuWIdu8gcKy
aznm7p5ezqOktXAlZLTUfYTP/ki5BurQzqOu3GH2SnNBjBru5+Cu3VTiwxaESJyT
vj4eop6JMw6Z9Axaci/4RjjVLIH68109KSDISgh8bi0jNQ==
-----END CERTIFICATE-----
Generated at Tue May 6 00:02:53 2025 by rpki-client