Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/UXNVLBT3IBBXzOrWFMP9VMwllaE.roa
File: UXNVLBT3IBBXzOrWFMP9VMwllaE.roa (raw, json)
Hash identifier: GA2FZzJZegA/bvzwAUTE7HtSxGzTmLYPoQhmd/XSkNc=
Subject key identifier: 51:73:55:2C:14:F7:20:10:57:CC:EA:D6:14:C3:FD:54:CC:25:95:A1
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019461837058E0E0168B0F05AFFE77AC7F3E
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/UXNVLBT3IBBXzOrWFMP9VMwllaE.roa
Signing time: Mon 13 Jan 2025 21:13:11 +0000
ROA not before: Mon 13 Jan 2025 21:13:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216167
IP address blocks: 203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:83:70:58:e0:e0:16:8b:0f:05:af:fe:77:ac:7f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jan 13 21:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5173552c14f7201057ccead614c3fd54cc2595a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:7f:af:c3:dd:b4:dd:71:68:0a:19:a6:73:
93:9a:04:f6:ce:00:a7:59:84:ff:f3:c4:a6:71:fd:
af:da:3e:90:60:2c:cf:6b:95:35:24:55:3c:b5:3a:
17:4a:47:91:9f:4b:58:13:e7:9a:1c:aa:db:47:f9:
ee:8d:54:53:b6:65:46:41:27:4a:70:77:c9:6d:b9:
77:f8:a4:a1:b8:cc:05:03:91:73:e0:0f:b9:75:74:
c6:f6:5f:96:d1:64:0b:f3:3d:e5:f5:41:3e:62:81:
ff:b6:a4:7b:d8:a4:04:32:65:fc:2e:35:48:5b:5b:
f1:78:5c:06:1a:b0:07:49:b1:95:51:3a:f1:dd:d5:
d8:f6:a4:e2:04:ab:47:f3:9b:ed:20:e8:ff:55:2b:
84:c9:7b:a2:c5:0d:77:b7:d5:12:14:66:d0:77:53:
a1:cb:40:3a:39:76:b1:50:d1:e0:23:69:32:48:30:
c8:ec:cf:7c:6d:cf:40:08:1d:c6:5a:e3:81:20:30:
ce:8e:f3:56:26:e9:13:e8:17:37:43:ff:7b:55:78:
ff:91:55:bc:01:d8:cf:35:66:8f:df:21:66:5a:bb:
55:fc:41:6f:c6:8b:bd:99:05:88:f9:3b:d5:ee:81:
7a:4e:86:2f:7d:e7:2c:5f:4b:3d:a5:85:a4:70:a2:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:55:2C:14:F7:20:10:57:CC:EA:D6:14:C3:FD:54:CC:25:95:A1
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/UXNVLBT3IBBXzOrWFMP9VMwllaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
a7:fc:c5:72:b4:70:9b:de:65:12:33:04:97:23:0f:48:6a:a2:
b4:9d:e1:ea:ba:3e:81:7b:61:54:d6:f5:4b:be:e8:b6:0a:9f:
7d:2d:aa:2c:59:fe:cd:59:5e:e8:3a:3a:7b:5e:89:80:fa:ff:
2f:44:3c:c8:45:47:8d:37:ac:44:95:6e:25:8c:38:39:d5:82:
af:be:d6:c0:05:95:fe:17:ee:22:db:0b:e2:65:b5:a9:f7:c9:
aa:ca:7a:e9:77:a8:4b:85:33:37:61:7f:a5:fd:39:c9:ec:bd:
3e:c8:c5:2e:a7:55:46:68:e3:16:d3:68:75:e3:25:f4:b8:3f:
6a:6e:8c:97:89:74:7e:01:06:25:bb:4e:82:aa:e6:fa:76:83:
66:cb:28:ad:96:ac:7e:4b:35:af:80:c2:63:b5:ee:75:47:29:
d3:a7:50:92:db:24:67:6f:01:e1:2c:cb:5a:04:04:d9:58:33:
35:0a:3e:f6:3d:eb:14:b1:e9:1d:ce:a3:de:20:bd:6a:f3:4a:
e3:a7:ce:0b:6d:22:9b:7d:98:6f:22:1c:81:01:a8:98:02:0a:
8c:5a:e2:d7:1e:45:71:f7:e6:3f:f5:ba:dc:fa:da:39:10:13:
f6:f8:26:5e:f9:15:71:c3:b4:ef:9f:f7:86:44:a4:ad:5b:cb:
f1:cf:3f:d1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZRhg3BY4OAWiw8Fr/53rH8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjUwMTEzMjExMzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTczNTUyYzE0ZjcyMDEwNTdjY2VhZDYxNGMzZmQ1NGNjMjU5NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWJ/r8PdtN1xaAoZpnOTmgT2zgCn
WYT/88Smcf2v2j6QYCzPa5U1JFU8tToXSkeRn0tYE+eaHKrbR/nujVRTtmVGQSdK
cHfJbbl3+KShuMwFA5Fz4A+5dXTG9l+W0WQL8z3l9UE+YoH/tqR72KQEMmX8LjVI
W1vxeFwGGrAHSbGVUTrx3dXY9qTiBKtH85vtIOj/VSuEyXuixQ13t9USFGbQd1Oh
y0A6OXaxUNHgI2kySDDI7M98bc9ACB3GWuOBIDDOjvNWJukT6Bc3Q/97VXj/kVW8
AdjPNWaP3yFmWrtV/EFvxou9mQWI+TvV7oF6ToYvfecsX0s9pYWkcKLhnQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFFzVSwU9yAQV8zq1hTD/VTMJZWhMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvVVhOVkxCVDNJQkJYek9yV0ZNUDlWTXdsbGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAyzdRMA0E
AgACMAcDBQAqE8fAMA0GCSqGSIb3DQEBCwUAA4IBAQCn/MVytHCb3mUSMwSXIw9I
aqK0neHquj6Be2FU1vVLvui2Cp99LaosWf7NWV7oOjp7XomA+v8vRDzIRUeNN6xE
lW4ljDg51YKvvtbABZX+F+4i2wviZbWp98mqynrpd6hLhTM3YX+l/TnJ7L0+yMUu
p1VGaOMW02h14yX0uD9qboyXiXR+AQYlu06Cqub6doNmyyitlqx+SzWvgMJjte51
RynTp1CS2yRnbwHhLMtaBATZWDM1Cj72PesUsekdzqPeIL1q80rjp84LbSKbfZhv
IhyBAaiYAgqMWuLXHkVx9+Y/9brc+to5EBP2+CZe+RVxw7Tvn/eGRKStW8vxzz/R
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:07 2025 by rpki-client