Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/UEBZpY--6ufoQHe5tTA04YJt7RI.roa
File: UEBZpY--6ufoQHe5tTA04YJt7RI.roa (raw, json)
Hash identifier: YgjSAw6sqKRMIsLv4RhjULy0AAoSJM67p5wi1+8CNjI=
Subject key identifier: 50:40:59:A5:8F:BE:EA:E7:E8:40:77:B9:B5:30:34:E1:82:6D:ED:12
Certificate issuer: /CN=3d9f9be20560347813141749a1795333999652eb
Certificate serial: 080F6B89
Authority key identifier: 3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/UEBZpY--6ufoQHe5tTA04YJt7RI.roa
Signing time: Sat 01 Jan 2022 02:59:10 +0000
ROA not before: Sat 01 Jan 2022 02:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25424
IP address blocks: 2a0a:3340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135228297 (0x80f6b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9f9be20560347813141749a1795333999652eb
Validity
Not Before: Jan 1 02:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=504059a58fbeeae7e84077b9b53034e1826ded12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:d4:f3:eb:eb:72:ee:95:2f:b6:f0:a5:3b:
4d:29:f0:fc:8e:e8:c7:9d:0e:47:71:eb:24:13:d9:
6f:40:d7:d9:59:fc:4e:44:0b:7a:38:0b:38:c8:f7:
89:dd:ce:b7:4d:00:ae:d0:b4:e6:29:c8:ac:9d:38:
22:37:f8:af:b2:9d:e7:ec:5f:51:ca:a2:ab:30:60:
e5:88:4d:a9:f2:83:38:ea:5b:70:f6:a8:06:0d:d6:
67:14:38:b8:dd:7a:d1:62:9c:f0:9e:da:b5:28:ce:
65:30:7e:41:04:d3:ad:4e:f2:99:6e:2e:d2:ef:b0:
f2:00:20:a4:8c:ab:d7:a3:ce:92:ed:e3:a7:8f:19:
1f:ca:85:0d:1e:13:81:15:d9:1d:d6:76:3b:91:6b:
f1:20:8a:a6:d3:af:b9:f7:f6:77:f8:5a:1d:9c:3b:
17:40:d9:7d:07:58:f2:81:15:de:a9:74:b2:94:a6:
1a:3d:51:9e:8a:b1:13:83:76:62:fb:5c:4a:c5:85:
74:1b:1c:d3:b5:c9:ca:53:f3:ea:af:c1:92:63:9c:
31:28:d1:a8:5c:18:b0:54:87:d1:56:1b:14:d6:9c:
75:02:9e:be:92:4f:dc:01:db:2c:75:65:eb:e6:90:
f7:84:75:67:52:6d:d9:2e:d6:0c:52:d3:3b:7e:8e:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:59:A5:8F:BE:EA:E7:E8:40:77:B9:B5:30:34:E1:82:6D:ED:12
X509v3 Authority Key Identifier:
keyid:3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/UEBZpY--6ufoQHe5tTA04YJt7RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3340::/29
Signature Algorithm: sha256WithRSAEncryption
c2:e3:ee:82:fa:d6:72:3d:43:c4:cb:52:ce:f5:ae:0b:b2:45:
5f:46:4c:6e:06:22:54:cb:3c:a6:fd:9d:5b:09:04:c3:7b:0c:
af:31:43:4c:e3:fd:a0:b8:51:e1:27:a8:3b:18:5e:d9:0c:72:
25:87:be:64:ee:62:02:14:11:ae:17:ec:5e:f5:e1:ad:46:2c:
28:aa:1c:c6:14:9f:e2:ed:41:fd:43:86:03:43:81:dd:77:43:
d6:62:2c:7d:0a:94:b2:71:32:bc:75:e1:8d:8c:d7:79:22:ce:
1c:e9:be:95:aa:4a:a8:fc:20:57:b0:94:1c:3d:6e:c9:cd:0c:
9b:37:4b:cf:f9:48:99:5d:10:01:7c:be:97:a1:b4:da:14:92:
67:30:07:b2:46:ab:80:c2:bb:23:b7:af:71:b2:41:91:ac:c4:
b6:36:29:f5:fb:a8:3c:e5:bd:79:ca:c9:a6:19:fa:d3:11:55:
27:c3:52:25:e7:ef:f6:b1:d2:13:44:29:2d:12:6f:36:5c:72:
ec:53:bd:b9:0b:23:3d:50:c6:bf:32:01:9d:53:40:91:86:08:
7f:d6:b5:cb:13:49:4c:e1:05:bf:33:ee:ec:d5:db:0e:a7:6d:
85:25:f0:47:63:7b:1e:a2:43:ea:1a:8b:bc:3e:6f:f3:c0:2a:
b3:6a:4f:10
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECA9riTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZDlmOWJlMjA1NjAzNDc4MTMxNDE3NDlhMTc5NTMzMzk5OTY1MmViMB4XDTIyMDEw
MTAyNTkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTA0MDU5YTU4ZmJl
ZWFlN2U4NDA3N2I5YjUzMDM0ZTE4MjZkZWQxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMmC1PPr63LulS+28KU7TSnw/I7ox50OR3HrJBPZb0DX2Vn8
TkQLejgLOMj3id3Ot00ArtC05inIrJ04Ijf4r7Kd5+xfUcqiqzBg5YhNqfKDOOpb
cPaoBg3WZxQ4uN160WKc8J7atSjOZTB+QQTTrU7ymW4u0u+w8gAgpIyr16POku3j
p48ZH8qFDR4TgRXZHdZ2O5Fr8SCKptOvuff2d/haHZw7F0DZfQdY8oEV3ql0spSm
Gj1RnoqxE4N2YvtcSsWFdBsc07XJylPz6q/BkmOcMSjRqFwYsFSH0VYbFNacdQKe
vpJP3AHbLHVl6+aQ94R1Z1Jt2S7WDFLTO36Ow8cCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBRQQFmlj77q5+hAd7m1MDThgm3tEjAfBgNVHSMEGDAWgBQ9n5viBWA0eBMU
F0mheVMzmZZS6zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BaLWI0Z1ZnTkhnVEZCZEpvWGxUTTVtV1V1cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvMDk4MDU5LTQ2OTItNGU1OC1iZGVhLWE3MzFjYjEzZjAxZS8x
L1VFQlpwWS0tNnVmb1FIZTV0VEEwNFlKdDdSSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
MDk4MDU5LTQ2OTItNGU1OC1iZGVhLWE3MzFjYjEzZjAxZS8xL1BaLWI0Z1ZnTkhn
VEZCZEpvWGxUTTVtV1V1cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoKM0AwDQYJKoZIhvcNAQELBQAD
ggEBAMLj7oL61nI9Q8TLUs71rguyRV9GTG4GIlTLPKb9nVsJBMN7DK8xQ0zj/aC4
UeEnqDsYXtkMciWHvmTuYgIUEa4X7F714a1GLCiqHMYUn+LtQf1DhgNDgd13Q9Zi
LH0KlLJxMrx14Y2M13kizhzpvpWqSqj8IFewlBw9bsnNDJs3S8/5SJldEAF8vpeh
tNoUkmcwB7JGq4DCuyO3r3GyQZGsxLY2KfX7qDzlvXnKyaYZ+tMRVSfDUiXn7/ax
0hNEKS0SbzZccuxTvbkLIz1Qxr8yAZ1TQJGGCH/WtcsTSUzhBb8z7uzV2w6nbYUl
8Edjex6iQ+oai7w+b/PAKrNqTxA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:08 2025 by rpki-client