Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/UnHIPbSwts9qEvxHlnpBjUh1Lxg.roa
File: UnHIPbSwts9qEvxHlnpBjUh1Lxg.roa (raw, json)
Hash identifier: GBbEAzbUwsBKBLGuxesrm6YwjLcXN7IJwBQPsNxvsYk=
Subject key identifier: 52:71:C8:3D:B4:B0:B6:CF:6A:12:FC:47:96:7A:41:8D:48:75:2F:18
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0189D31CABB5DFB6B4F11A9D800C70D8C170
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/UnHIPbSwts9qEvxHlnpBjUh1Lxg.roa
Signing time: Tue 08 Aug 2023 03:06:58 +0000
ROA not before: Tue 08 Aug 2023 03:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 192.64.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:1c:ab:b5:df:b6:b4:f1:1a:9d:80:0c:70:d8:c1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 8 03:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5271c83db4b0b6cf6a12fc47967a418d48752f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:f8:ab:64:fa:7a:50:2e:95:6b:28:a5:39:
89:26:b8:e4:97:79:91:30:6c:93:9a:d2:3c:c8:aa:
ab:3f:27:52:25:62:7b:d0:8f:11:2e:62:12:d8:dc:
96:d2:e3:ef:d5:81:2a:ba:9a:de:98:1f:b9:57:36:
e9:b3:66:01:24:59:29:d4:cc:d8:93:78:b4:9d:72:
cf:6f:c9:6b:34:76:fd:42:5c:61:88:32:e8:71:4c:
7f:c6:a5:85:66:c9:a8:0b:1f:40:c5:da:bc:ef:a5:
7e:97:6b:5e:00:82:5e:cf:5c:e7:9a:8c:f4:aa:bb:
bd:14:e2:2b:2d:cb:e5:45:bc:8b:0f:34:ac:49:40:
4f:c4:d2:ab:a6:82:0f:33:5a:18:c6:dc:83:37:82:
a9:60:92:ae:4c:3c:36:f6:76:6c:b4:1e:14:85:e8:
80:dd:35:04:b2:03:97:aa:8a:e9:93:e4:76:bc:dd:
cb:dc:42:d1:97:98:ff:dc:7f:e3:a5:a7:c8:1e:cf:
d6:63:a4:ae:77:41:db:73:fe:e8:1a:0b:46:a5:8a:
95:5a:8e:d1:ed:13:80:53:98:c5:4b:50:1e:20:63:
42:f7:75:df:98:8d:bf:b8:1e:86:0e:1b:08:a6:2c:
15:cd:e7:27:bd:9d:03:34:70:6b:0c:88:f2:85:c7:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:C8:3D:B4:B0:B6:CF:6A:12:FC:47:96:7A:41:8D:48:75:2F:18
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/UnHIPbSwts9qEvxHlnpBjUh1Lxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.64.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:aa:66:cf:a3:b3:89:e3:d7:80:ec:6d:8d:03:36:7e:62:e6:
a1:f8:a7:f0:ee:63:c5:fe:0b:d9:31:c9:0e:f4:b2:36:84:b6:
1e:a0:ae:63:50:76:f6:a0:12:72:bb:a6:26:12:e0:d0:f3:21:
20:e4:f3:f8:cb:d1:87:80:68:f8:7c:7a:7f:46:09:34:21:c7:
b4:69:4e:33:22:17:f0:6e:e2:18:f2:bc:bd:a4:84:73:72:1b:
7b:66:bb:07:c0:ee:a5:c4:4f:14:16:26:4b:c0:7b:82:e6:97:
32:d5:d6:49:30:52:3f:d7:3a:61:64:8b:53:33:db:e8:9b:6a:
f9:cf:ab:38:a2:38:60:98:00:4f:e7:e0:da:d7:65:92:9e:87:
9a:45:6a:96:e2:33:4b:3c:0d:d4:1c:14:f0:eb:33:ab:9b:9a:
86:9b:3e:a9:b5:4f:9e:ad:7b:a5:2e:93:64:27:36:10:cc:1b:
49:f7:a8:0c:2e:ee:a1:dc:9c:9c:3f:89:ca:87:fb:fd:42:0f:
5e:ea:f4:01:92:f5:85:3c:d8:31:62:18:8b:85:80:e0:d3:78:
78:01:6f:c6:f4:58:cb:59:38:37:00:4e:32:cd:f5:6b:39:b7:
ea:8b:80:f7:e0:85:a3:8c:6b:86:e1:47:2a:40:d7:82:c7:78:
0b:83:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:59:26 2025 by rpki-client