Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/UYlvRlwTKxXw0fMKn59lGxZSpt8.roa
File: UYlvRlwTKxXw0fMKn59lGxZSpt8.roa (raw, json)
Hash identifier: mPWgIhOe995VdQZeTY64oqNLPoaxhjYMnAug9ywxUZ8=
Subject key identifier: 51:89:6F:46:5C:13:2B:15:F0:D1:F3:0A:9F:9F:65:1B:16:52:A6:DF
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 21211E57
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/UYlvRlwTKxXw0fMKn59lGxZSpt8.roa
Signing time: Sat 01 Jan 2022 13:00:31 +0000
ROA not before: Sat 01 Jan 2022 13:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1136
IP address blocks: 2a07:3500:1bc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555818583 (0x21211e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 13:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51896f465c132b15f0d1f30a9f9f651b1652a6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:53:0f:8e:4c:5b:f7:8a:ab:56:7d:fe:a0:
7b:93:23:c3:c3:3f:0a:e0:9f:48:1e:0a:4f:2d:9e:
ea:94:fb:9c:12:43:14:92:9b:a2:a5:de:9a:8e:7d:
7d:20:c4:cd:e4:81:9b:a9:26:b6:ff:63:0b:1a:b2:
85:4a:53:48:a7:ee:21:72:2d:74:2f:90:b9:ef:1e:
00:15:e9:94:17:9c:c2:62:89:0f:5f:3e:59:41:24:
98:3a:ce:4b:83:f5:c8:a8:8e:f3:c3:d3:b2:e5:b8:
44:30:b9:b7:eb:f3:f8:bd:19:f0:cd:c9:bb:1f:91:
ca:ce:93:eb:47:c8:a2:27:f2:24:4e:c3:fb:3e:26:
69:7a:08:ea:3e:86:9c:4d:ff:ca:a6:3a:77:3b:9c:
80:84:5b:73:39:df:83:e2:35:ba:4c:60:da:85:64:
e2:08:d2:14:3c:c5:55:0e:8e:40:4f:2b:f7:8b:cd:
d6:a8:d0:fe:e6:74:31:b5:33:d3:8a:05:d7:4d:74:
cf:b5:4e:84:1f:c9:4e:6c:83:2a:78:e1:16:0c:87:
96:e5:04:87:12:90:05:24:a0:f0:0f:37:4d:98:85:
17:c7:b9:1d:4a:f1:9e:de:00:1a:1e:51:21:6b:9d:
29:f6:7d:af:56:95:9c:e6:d9:bc:06:2e:02:62:1d:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:6F:46:5C:13:2B:15:F0:D1:F3:0A:9F:9F:65:1B:16:52:A6:DF
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/UYlvRlwTKxXw0fMKn59lGxZSpt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1bc0::/48
Signature Algorithm: sha256WithRSAEncryption
37:28:a0:06:74:9c:e8:76:99:ca:75:ac:9d:3d:40:52:b5:08:
6a:c5:e8:ca:06:b4:8f:3c:62:3f:b0:48:19:95:4f:82:41:c6:
13:23:29:88:cf:8c:11:ad:6c:95:55:57:e7:69:45:83:bf:8b:
00:9d:75:1a:ef:81:3f:aa:c1:2a:d5:07:dc:09:19:c5:78:87:
9b:16:9f:79:86:44:de:4c:8a:7c:79:6f:c7:d9:d7:fd:64:2c:
e6:05:9c:2a:04:5c:15:4a:07:51:86:0d:2c:4c:8f:8a:18:60:
4a:28:44:69:8e:b0:e9:5e:05:de:f7:f9:e7:7f:d9:f8:1d:d3:
73:f7:ba:cf:22:76:91:8f:cf:a7:a2:a1:f3:f9:31:d3:f9:ba:
e1:2d:2c:12:ed:d4:4f:36:22:ee:4c:3a:1d:8a:89:d9:6d:c3:
c3:f3:12:4d:5e:54:a1:f0:64:3d:df:25:8a:e8:53:b8:4b:13:
d1:1e:6f:3d:c0:3a:1e:45:52:bf:99:07:7a:08:ce:53:56:89:
bf:a5:fe:27:01:db:34:f4:01:6c:91:c7:43:1f:8d:04:22:f9:
fc:26:4d:1b:6a:c1:2c:e8:07:08:f8:09:b1:03:42:28:e9:85:
66:fe:96:0b:5a:20:b3:6c:b7:3b:f4:b6:03:30:23:2f:d5:be:
fa:4d:76:f5
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEISEeVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MDVkMjhkMTY2MjZiYzVkY2FiZjJlOTE1NDM1NzgyYjk2ZTE0MDcxMB4XDTIyMDEw
MTEzMDAzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTE4OTZmNDY1YzEz
MmIxNWYwZDFmMzBhOWY5ZjY1MWIxNjUyYTZkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALeKUw+OTFv3iqtWff6ge5Mjw8M/CuCfSB4KTy2e6pT7nBJD
FJKboqXemo59fSDEzeSBm6kmtv9jCxqyhUpTSKfuIXItdC+Que8eABXplBecwmKJ
D18+WUEkmDrOS4P1yKiO88PTsuW4RDC5t+vz+L0Z8M3Jux+Rys6T60fIoifyJE7D
+z4maXoI6j6GnE3/yqY6dzucgIRbcznfg+I1ukxg2oVk4gjSFDzFVQ6OQE8r94vN
1qjQ/uZ0MbUz04oF1010z7VOhB/JTmyDKnjhFgyHluUEhxKQBSSg8A83TZiFF8e5
HUrxnt4AGh5RIWudKfZ9r1aVnObZvAYuAmIdS5cCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRRiW9GXBMrFfDR8wqfn2UbFlKm3zAfBgNVHSMEGDAWgBSwXSjRZia8Xcq/
LpFUNXgrluFAcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NGMG8wV1ltdkYzS3Z5NlJWRFY0SzViaFFIRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvYmJhOTczLTdjOWYtNGIxMS1iNjExLWFkNTc1NTIyYjM2NS8x
L1VZbHZSbHdUS3hYdzBmTUtuNTlsR3haU3B0OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
YmJhOTczLTdjOWYtNGIxMS1iNjExLWFkNTc1NTIyYjM2NS8xL3NGMG8wV1ltdkYz
S3Z5NlJWRFY0SzViaFFIRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHNQAbwDANBgkqhkiG9w0BAQsF
AAOCAQEANyigBnSc6HaZynWsnT1AUrUIasXoyga0jzxiP7BIGZVPgkHGEyMpiM+M
Ea1slVVX52lFg7+LAJ11Gu+BP6rBKtUH3AkZxXiHmxafeYZE3kyKfHlvx9nX/WQs
5gWcKgRcFUoHUYYNLEyPihhgSihEaY6w6V4F3vf553/Z+B3Tc/e6zyJ2kY/Pp6Kh
8/kx0/m64S0sEu3UTzYi7kw6HYqJ2W3Dw/MSTV5UofBkPd8liuhTuEsT0R5vPcA6
HkVSv5kHegjOU1aJv6X+JwHbNPQBbJHHQx+NBCL5/CZNG2rBLOgHCPgJsQNCKOmF
Zv6WC1ogs2y3O/S2AzAjL9W++k129Q==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:40 2025 by rpki-client