Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/uynqcwyfYwe2OY7iIflpR2qLfGY.roa
File: uynqcwyfYwe2OY7iIflpR2qLfGY.roa (raw, json)
Hash identifier: zYdTJmI61D7UdMPDh6bpxykf+/3IdN/X2Q580OPMo+o=
Subject key identifier: BB:29:EA:73:0C:9F:63:07:B6:39:8E:E2:21:F9:69:47:6A:8B:7C:66
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 018CC4924310E33D54DE8E7358A5CAB005BB
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/uynqcwyfYwe2OY7iIflpR2qLfGY.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210531
IP address blocks: 45.139.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:43:10:e3:3d:54:de:8e:73:58:a5:ca:b0:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb29ea730c9f6307b6398ee221f969476a8b7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:e2:88:5c:b7:1a:9e:a3:f7:d7:8f:eb:6d:
9e:72:67:fa:d7:ce:05:6c:12:cb:03:4c:5f:00:2c:
ec:16:e4:62:35:57:d8:d5:ed:4d:53:96:7a:1c:d6:
2f:3a:9b:50:f6:f4:f2:a9:fb:ce:dc:ab:47:07:1a:
d4:d4:8e:36:49:26:1d:6e:6d:80:af:8d:9c:f3:04:
bd:6c:9e:63:40:a1:58:dc:9b:71:b0:21:e9:33:66:
6b:73:e3:c4:d9:5a:93:66:c1:f9:a2:5b:30:79:f3:
e1:de:da:27:ee:98:7d:f8:f5:11:1a:8f:02:ab:1b:
a8:a1:50:e5:b1:af:a0:e3:9d:3e:39:c8:75:d4:40:
a4:32:aa:6a:a1:eb:85:5b:d1:02:3d:f1:20:4f:13:
f2:f9:12:5c:c6:3d:8d:09:89:35:1e:2b:9e:d9:d2:
05:3e:61:5a:37:9c:e7:f2:49:69:33:ae:db:a0:f7:
15:28:f1:dc:e4:e7:52:50:cf:8e:80:5f:38:86:b2:
9f:d4:85:6f:4e:cf:85:81:cc:62:43:6f:12:bb:f2:
54:c8:61:4e:37:74:d2:db:7e:6f:7c:b6:09:08:48:
26:15:84:62:4f:f9:95:00:72:a8:a9:34:d3:d6:1d:
d4:13:c4:78:66:81:57:0b:3e:65:70:5d:ba:52:0f:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:EA:73:0C:9F:63:07:B6:39:8E:E2:21:F9:69:47:6A:8B:7C:66
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/uynqcwyfYwe2OY7iIflpR2qLfGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:29:ba:ba:fa:73:bd:f4:26:cd:49:e7:4b:97:ef:75:01:4e:
9b:55:ec:25:f7:37:48:b2:b1:95:85:bf:49:62:5b:75:0c:90:
4b:24:1b:d2:1f:86:56:e3:2f:b1:38:ba:fe:b5:ca:01:64:e8:
7d:91:b2:bf:34:f4:d1:a2:36:98:ae:56:34:7c:9b:c4:c6:a0:
63:55:12:d7:bc:c3:64:44:59:7c:88:2a:48:81:86:b0:72:33:
97:43:ab:f3:9d:08:4e:ff:3d:58:b4:1f:9b:4c:28:bf:e4:fa:
94:00:e9:b4:d3:c0:97:5e:56:82:2e:25:63:a6:ed:53:57:84:
66:01:51:bf:03:b0:46:a7:70:8c:36:2a:dc:35:f6:fb:56:91:
1c:7c:a4:d0:91:87:53:c2:03:45:c3:86:08:9c:81:ec:a8:fd:
eb:e2:01:3e:45:0c:87:cd:3a:63:92:82:a3:29:d1:18:4f:2f:
f2:9c:47:56:af:63:a2:83:65:c4:e2:45:d6:fa:b3:fe:ea:7c:
65:c0:cc:4d:84:3f:a0:57:f1:98:fb:f6:37:e3:0d:50:30:a4:
56:83:63:39:cd:3c:be:1f:d7:de:5e:0e:a3:fd:0a:24:14:a9:
fd:30:9b:cc:d3:60:f7:26:ed:58:ef:18:70:51:2f:ce:16:4d:
9b:54:26:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkkMQ4z1U3o5zWKXKsAW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk
Mzk4YTMwHhcNMjQwMTAxMTAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjI5ZWE3MzBjOWY2MzA3YjYzOThlZTIyMWY5Njk0NzZhOGI3YzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWniiFy3Gp6j99eP622ecmf6184F
bBLLA0xfACzsFuRiNVfY1e1NU5Z6HNYvOptQ9vTyqfvO3KtHBxrU1I42SSYdbm2A
r42c8wS9bJ5jQKFY3JtxsCHpM2Zrc+PE2VqTZsH5olswefPh3ton7ph9+PURGo8C
qxuooVDlsa+g450+Och11ECkMqpqoeuFW9ECPfEgTxPy+RJcxj2NCYk1Hiue2dIF
PmFaN5zn8klpM67boPcVKPHc5OdSUM+OgF84hrKf1IVvTs+FgcxiQ28Su/JUyGFO
N3TS235vfLYJCEgmFYRiT/mVAHKoqTTT1h3UE8R4ZoFXCz5lcF26Ug9btwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsp6nMMn2MHtjmO4iH5aUdqi3xmMB8GA1UdIwQY
MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt
YzhmOWJlN2QxOWRmLzEvdXlucWN3eWZZd2UyT1k3aUlmbHBSMnFMZkdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm
LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYvTMA0G
CSqGSIb3DQEBCwUAA4IBAQBrKbq6+nO99CbNSedLl+91AU6bVewl9zdIsrGVhb9J
Ylt1DJBLJBvSH4ZW4y+xOLr+tcoBZOh9kbK/NPTRojaYrlY0fJvExqBjVRLXvMNk
RFl8iCpIgYawcjOXQ6vznQhO/z1YtB+bTCi/5PqUAOm008CXXlaCLiVjpu1TV4Rm
AVG/A7BGp3CMNircNfb7VpEcfKTQkYdTwgNFw4YInIHsqP3r4gE+RQyHzTpjkoKj
KdEYTy/ynEdWr2Oig2XE4kXW+rP+6nxlwMxNhD+gV/GY+/Y34w1QMKRWg2M5zTy+
H9feXg6j/QokFKn9MJvM02D3Ju1Y7xhwUS/OFk2bVCbk
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:02 2025 by rpki-client