Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/Uup0ofKdVpVRfqBaa-nCG2TTQJw.roa
File: Uup0ofKdVpVRfqBaa-nCG2TTQJw.roa (raw, json)
Hash identifier: MFXXFtfiKOb5GPWtanZi0nd7Gbn24oobmSun1YDtYiI=
Subject key identifier: 52:EA:74:A1:F2:9D:56:95:51:7E:A0:5A:6B:E9:C2:1B:64:D3:40:9C
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA6B70E0D23868C53B52A2B237D5A
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/Uup0ofKdVpVRfqBaa-nCG2TTQJw.roa
Signing time: Sun 01 Jan 2023 06:54:55 +0000
ROA not before: Sun 01 Jan 2023 06:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201815
IP address blocks: 2a12:3fc2:ab30::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a6:b7:0e:0d:23:86:8c:53:b5:2a:2b:23:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ea74a1f29d5695517ea05a6be9c21b64d3409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:43:b8:20:cb:2c:b0:4a:f6:ec:69:3b:36:
a1:94:61:24:02:96:99:e7:1e:37:48:fa:88:d7:96:
af:e0:b6:64:a3:f2:07:86:3b:5e:fc:17:da:56:b7:
47:3a:ed:3f:7b:a7:a7:9c:7b:9b:b0:dc:57:25:07:
e6:98:77:68:59:07:ce:37:c3:dc:c5:3c:d0:f9:ef:
78:f6:09:77:39:c3:68:c0:78:32:4d:2b:87:25:76:
b2:80:64:fc:ec:2f:82:4b:e9:68:59:19:3c:f2:eb:
52:f8:ca:fe:4b:a0:10:c1:43:bb:bd:24:af:1f:e4:
31:d0:ea:bf:3c:2f:f3:75:fc:ec:2e:1d:4e:78:8a:
ec:ca:8f:00:e9:b9:7a:77:fc:52:42:a1:1c:bb:15:
c5:58:94:06:c6:27:e6:e1:e1:68:15:4f:97:c4:01:
c5:d5:25:4c:8d:29:ef:e5:79:1c:e0:fd:d7:28:4e:
83:3c:e0:8d:0c:f7:3e:d3:e4:b7:c2:39:35:ec:7a:
16:fb:7e:12:5b:48:f1:9b:cb:25:07:ee:71:2e:c6:
68:a9:85:48:0a:3e:36:d5:30:76:26:b4:8a:e7:8b:
b1:ed:c1:57:92:25:7e:cf:d5:0c:ad:03:9c:06:07:
a2:02:2f:f8:d5:b3:42:09:69:51:a3:76:ad:46:35:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:74:A1:F2:9D:56:95:51:7E:A0:5A:6B:E9:C2:1B:64:D3:40:9C
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/Uup0ofKdVpVRfqBaa-nCG2TTQJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab30::/44
Signature Algorithm: sha256WithRSAEncryption
b7:19:fb:c1:48:ec:b6:c4:50:ca:15:cd:62:fe:dd:46:9f:5f:
54:5e:8d:c9:8e:6e:99:6e:73:f9:4d:ad:6b:f8:76:08:74:dd:
06:1d:d4:6a:c8:3f:b8:ce:dc:bc:e5:a2:0a:ca:ab:3f:7b:d1:
8f:e7:e1:56:5f:7a:47:68:a4:bc:1c:f7:1b:67:e9:f3:0c:90:
07:31:a2:9e:da:17:e8:c8:6a:dd:16:40:d9:96:83:83:67:11:
c8:d4:d3:b6:8e:77:6b:16:7f:19:85:96:1f:45:68:50:a5:dc:
53:6c:33:d2:c9:94:ce:f5:6c:67:50:5a:c7:92:38:90:95:9b:
43:c3:3f:35:78:be:c2:ac:0a:2a:51:40:56:79:ac:7a:b7:7d:
85:9b:bf:e5:9a:e3:00:df:76:a0:da:8f:1a:00:36:64:a3:9e:
95:47:6b:93:bf:9c:f3:4a:83:56:c7:3c:bc:2f:8e:03:50:fb:
c4:58:e9:05:17:1d:96:fb:4a:45:85:fa:6c:60:2a:ae:d7:31:
50:9c:ff:6c:cb:2d:40:17:2b:ad:e8:2e:38:87:c3:ee:4d:73:
83:c3:70:a7:27:16:d0:79:ee:52:39:9e:85:bf:6e:f6:0f:85:
6b:aa:39:96:bb:af:74:9f:d9:ac:68:99:d8:9f:5a:d2:3b:dd:
3b:90:c7:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVsHKa3Dg0jhoxTtSorI31aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwMTAxMDY1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmVhNzRhMWYyOWQ1Njk1NTE3ZWEwNWE2YmU5YzIxYjY0ZDM0MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc9DuCDLLLBK9uxpOzahlGEkApaZ
5x43SPqI15av4LZko/IHhjte/BfaVrdHOu0/e6ennHubsNxXJQfmmHdoWQfON8Pc
xTzQ+e949gl3OcNowHgyTSuHJXaygGT87C+CS+loWRk88utS+Mr+S6AQwUO7vSSv
H+Qx0Oq/PC/zdfzsLh1OeIrsyo8A6bl6d/xSQqEcuxXFWJQGxifm4eFoFU+XxAHF
1SVMjSnv5Xkc4P3XKE6DPOCNDPc+0+S3wjk17HoW+34SW0jxm8slB+5xLsZoqYVI
Cj421TB2JrSK54ux7cFXkiV+z9UMrQOcBgeiAi/41bNCCWlRo3atRjVYpQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFLqdKHynVaVUX6gWmvpwhtk00CcMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvVXVwMG9mS2RWcFZSZnFCYWEtbkNHMlRUUUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhI/wqsw
MA0GCSqGSIb3DQEBCwUAA4IBAQC3GfvBSOy2xFDKFc1i/t1Gn19UXo3Jjm6ZbnP5
Ta1r+HYIdN0GHdRqyD+4zty85aIKyqs/e9GP5+FWX3pHaKS8HPcbZ+nzDJAHMaKe
2hfoyGrdFkDZloODZxHI1NO2jndrFn8ZhZYfRWhQpdxTbDPSyZTO9WxnUFrHkjiQ
lZtDwz81eL7CrAoqUUBWeax6t32Fm7/lmuMA33ag2o8aADZko56VR2uTv5zzSoNW
xzy8L44DUPvEWOkFFx2W+0pFhfpsYCqu1zFQnP9syy1AFyut6C44h8PuTXODw3Cn
JxbQee5SOZ6Fv272D4VrqjmWu690n9msaJnYn1rSO907kMeR
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:16 2025 by rpki-client