Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/ul-F2bAqqL1iWnUv62V62OTC9kY.roa
File: ul-F2bAqqL1iWnUv62V62OTC9kY.roa (raw, json)
Hash identifier: GlEfF4RxbmG0ha/AlctQ+5NAAEQyvf8P3uE9QGtbZXs=
Subject key identifier: BA:5F:85:D9:B0:2A:A8:BD:62:5A:75:2F:EB:65:7A:D8:E4:C2:F6:46
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01941FFAB8829B94E0756999446492979878
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/ul-F2bAqqL1iWnUv62V62OTC9kY.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49801
IP address blocks: 78.111.5.0/24 maxlen: 24
78.111.6.0/24 maxlen: 24
87.247.168.0/21 maxlen: 21
87.247.172.0/23 maxlen: 23
87.247.173.0/24 maxlen: 24
2a10:a440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:82:9b:94:e0:75:69:99:44:64:92:97:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba5f85d9b02aa8bd625a752feb657ad8e4c2f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:6d:b3:f8:af:cf:02:0c:a5:a1:38:bf:77:
d8:46:3a:c9:88:c1:c1:ad:75:7c:e2:e4:21:1c:d1:
1b:94:87:b5:5c:70:bb:12:3a:61:6a:ba:72:e3:40:
7f:7c:58:a8:bb:fc:4d:6d:5f:f9:d5:41:ff:7a:d4:
ec:9c:44:bf:d8:69:91:40:44:1d:8e:a5:9b:af:2e:
59:3a:a0:88:96:09:22:30:50:5a:f4:d1:ff:1d:5a:
17:21:71:8e:91:85:d8:81:ef:43:a4:1f:a7:f8:af:
70:30:13:01:ab:65:1a:c4:29:a0:44:7e:7c:be:0e:
8a:7d:5d:2c:84:cc:97:7c:56:b8:4c:48:86:8c:9f:
1d:81:be:4a:73:75:25:1b:24:0b:8e:b7:23:47:33:
9b:a4:80:63:3e:81:a5:9c:31:bf:a2:20:98:c2:46:
e6:0c:b9:c5:85:9a:ee:0d:6f:df:5d:15:2f:64:7b:
ad:1e:97:12:b5:46:d0:81:05:fc:90:30:2e:5c:c2:
6e:72:e1:d6:06:d3:ff:2a:40:5b:33:33:90:99:27:
6c:84:2a:ee:e2:ee:bf:b0:aa:99:e4:05:cb:93:2b:
9d:49:37:95:8f:0b:60:4d:75:a2:52:4f:0c:54:de:
9c:f4:27:a7:01:44:b4:07:6d:d6:5e:85:e7:6f:63:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:85:D9:B0:2A:A8:BD:62:5A:75:2F:EB:65:7A:D8:E4:C2:F6:46
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/ul-F2bAqqL1iWnUv62V62OTC9kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.5.0-78.111.6.255
87.247.168.0/21
IPv6:
2a10:a440::/29
Signature Algorithm: sha256WithRSAEncryption
73:fe:ba:88:93:8e:bf:85:82:9a:f6:93:31:35:8b:9e:b4:84:
6e:57:6e:74:b5:42:73:5c:09:f6:53:ae:19:64:f0:4b:10:ba:
98:54:76:14:b6:ef:71:a8:94:c0:04:66:2a:45:f8:83:32:1b:
3a:6b:02:27:32:63:9e:a0:61:02:3d:b8:02:e1:7a:4d:fa:c7:
cd:80:1a:a1:fc:c3:d1:ee:6b:eb:ea:14:05:a6:67:bf:92:16:
d0:96:1b:e8:4f:d6:5b:b9:33:ef:25:7f:52:d7:e9:bc:34:4d:
a0:9f:b7:b7:51:65:94:ef:5b:61:ca:56:37:d3:2c:30:16:e2:
82:d9:14:3d:25:2f:6f:a1:5a:d4:15:91:c5:4b:73:f2:98:d5:
97:88:a4:bf:0f:59:46:70:14:84:7f:9b:fa:85:d8:72:39:61:
c8:ec:41:c8:d8:2d:7e:a0:9d:e2:25:d7:f4:2f:bb:12:c1:24:
9a:5a:61:95:fe:12:d3:ac:e9:bd:00:c5:71:9d:82:15:e1:60:
96:59:fc:20:10:4f:52:65:57:b2:5b:6a:20:84:73:23:b5:f1:
8a:cb:68:2a:fb:f7:24:57:cd:6f:e0:ee:12:f8:8d:56:cc:b5:
eb:fb:1e:f6:27:b9:40:f8:d2:7c:43:8d:f5:a8:81:e6:74:8c:
7d:07:e8:66
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQf+riCm5TgdWmZRGSSl5h4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4
ZmFiM2UwHhcNMjUwMTAxMDM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTVmODVkOWIwMmFhOGJkNjI1YTc1MmZlYjY1N2FkOGU0YzJmNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Epts/ivzwIMpaE4v3fYRjrJiMHB
rXV84uQhHNEblIe1XHC7Ejpharpy40B/fFiou/xNbV/51UH/etTsnES/2GmRQEQd
jqWbry5ZOqCIlgkiMFBa9NH/HVoXIXGOkYXYge9DpB+n+K9wMBMBq2UaxCmgRH58
vg6KfV0shMyXfFa4TEiGjJ8dgb5Kc3UlGyQLjrcjRzObpIBjPoGlnDG/oiCYwkbm
DLnFhZruDW/fXRUvZHutHpcStUbQgQX8kDAuXMJucuHWBtP/KkBbMzOQmSdshCru
4u6/sKqZ5AXLkyudSTeVjwtgTXWiUk8MVN6c9CenAUS0B23WXoXnb2MjmwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFLpfhdmwKqi9Ylp1L+tletjkwvZGMB8GA1UdIwQY
MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt
MDQxMzEyMjQyZmYzLzEvdWwtRjJiQXFxTDFpV25VdjYyVjYyT1RDOWtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz
LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBABObwUD
BABObwYDBANX96gwDQQCAAIwBwMFAyoQpEAwDQYJKoZIhvcNAQELBQADggEBAHP+
uoiTjr+Fgpr2kzE1i560hG5XbnS1QnNcCfZTrhlk8EsQuphUdhS273GolMAEZipF
+IMyGzprAicyY56gYQI9uALhek36x82AGqH8w9Hua+vqFAWmZ7+SFtCWG+hP1lu5
M+8lf1LX6bw0TaCft7dRZZTvW2HKVjfTLDAW4oLZFD0lL2+hWtQVkcVLc/KY1ZeI
pL8PWUZwFIR/m/qF2HI5YcjsQcjYLX6gneIl1/QvuxLBJJpaYZX+EtOs6b0AxXGd
ghXhYJZZ/CAQT1JlV7JbaiCEcyO18YrLaCr79yRXzW/g7hL4jVbMtev7HvYnuUD4
0nxDjfWogeZ0jH0H6GY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:03:07 2025 by rpki-client