Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UjTP-LxMq70UedvbdaLv3qjE_5g.roa
File: UjTP-LxMq70UedvbdaLv3qjE_5g.roa (raw, json)
Hash identifier: 9o9QfX6HVAdHqStkN6pgC+v7Ib+Iwar8HeoubTw+FQE=
Subject key identifier: 52:34:CF:F8:BC:4C:AB:BD:14:79:DB:DB:75:A2:EF:DE:A8:C4:FF:98
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 0183D641BF57F3BD2E449B4AFAB945FFAF16
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UjTP-LxMq70UedvbdaLv3qjE_5g.roa
Signing time: Fri 14 Oct 2022 11:29:36 +0000
ROA not before: Fri 14 Oct 2022 11:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207579
IP address blocks: 62.122.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:41:bf:57:f3:bd:2e:44:9b:4a:fa:b9:45:ff:af:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Oct 14 11:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5234cff8bc4cabbd1479dbdb75a2efdea8c4ff98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:1f:bf:32:ae:af:c8:b0:5e:ff:86:67:3f:
73:ad:b2:83:c6:85:cc:7c:b3:8f:82:5c:b8:69:76:
1e:18:5f:22:12:1d:e1:a0:ba:49:ba:60:9c:10:a5:
be:43:59:6e:53:e0:15:1a:44:db:eb:48:9f:34:53:
3e:a4:7a:01:54:44:5e:da:1d:9f:84:53:b0:0e:e3:
fb:46:24:5b:fb:0b:15:ad:31:16:4d:d7:a3:5a:f8:
5f:44:f4:39:21:f9:dc:3b:8b:6c:f4:d9:7f:54:9e:
8f:d1:4b:b5:d9:c2:b9:90:39:2b:a5:98:a5:f4:53:
32:0e:e5:7f:2b:8e:12:49:e4:62:69:b4:b9:4e:ae:
3d:5c:5b:20:5a:d4:c4:85:34:92:1a:82:2b:d4:f9:
8c:f3:b7:fa:1f:fa:50:e9:6a:bb:f6:28:a9:72:2d:
6b:29:7c:ab:c9:90:42:00:4c:b0:57:f2:3a:d4:19:
65:d9:d9:0c:5b:04:17:5d:b9:00:51:8c:05:fe:ab:
9c:e7:28:82:ee:1e:f1:af:74:fc:ae:14:09:15:15:
6f:1c:6a:77:e5:4e:0c:1b:94:c6:8d:18:d9:0a:2d:
a4:ea:a9:c5:0e:30:88:03:10:90:aa:d6:93:92:65:
d0:75:c0:b3:55:ad:64:dd:20:cb:69:6c:5e:17:cd:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:CF:F8:BC:4C:AB:BD:14:79:DB:DB:75:A2:EF:DE:A8:C4:FF:98
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UjTP-LxMq70UedvbdaLv3qjE_5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.229.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0d:2c:f8:89:11:ae:fb:a8:96:a8:70:88:a9:1f:3e:d7:0a:
b0:ff:23:4f:5f:c6:24:6d:b0:6f:ae:15:5f:58:05:90:55:e8:
a2:e4:f4:91:ca:f1:7c:97:13:b4:46:0e:79:60:49:7f:9b:57:
06:42:40:e3:88:9c:8a:39:92:3c:46:9b:ec:fb:8a:0a:1c:2c:
69:e5:5d:f1:04:b7:59:67:b5:b5:c9:c6:b8:52:f5:0f:38:2b:
03:0e:87:e7:0c:6e:f8:e9:c1:17:e3:d0:49:72:6f:59:80:1e:
9a:58:4a:2b:48:2d:8b:76:2c:e7:2f:87:16:5d:b1:8b:09:6c:
b1:ab:96:2e:e3:cf:65:0f:fe:50:da:3b:8f:12:f1:67:c8:ab:
49:94:30:35:fb:da:08:f2:2d:18:e9:8a:4c:42:f9:6e:72:a4:
7d:ce:ca:dc:1d:ef:e6:c4:1c:82:e7:9c:21:e1:41:d8:9d:b0:
69:7d:de:5b:99:2f:dd:46:c5:ba:2e:e6:1a:46:e3:c4:d1:86:
d3:a7:33:d2:8d:af:2d:4c:0f:cd:7e:31:5f:fb:41:42:ee:3d:
0f:1c:19:16:f9:11:8b:90:fe:4c:f2:e4:1d:31:17:aa:c3:00:
37:5d:41:50:4c:65:66:29:55:7a:db:1e:ab:42:d9:2a:55:3f:
54:20:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:19 2025 by rpki-client