Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/uG0bbd5tt3NgwikuFSWmmBSnkPk.roa
File: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (raw, json)
Hash identifier: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=
Subject key identifier: B8:6D:1B:6D:DE:6D:B7:73:60:C2:29:2E:15:25:A6:98:14:A7:90:F9
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 01942143A77C00737DBE16B5A9867734D4E6
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/uG0bbd5tt3NgwikuFSWmmBSnkPk.roa
Signing time: Wed 01 Jan 2025 09:47:49 +0000
ROA not before: Wed 01 Jan 2025 09:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199302
IP address blocks: 2001:67c:150c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a7:7c:00:73:7d:be:16:b5:a9:86:77:34:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b86d1b6dde6db77360c2292e1525a69814a790f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:e5:90:dd:ee:5e:22:5b:40:37:7c:c8:59:
c4:14:01:f3:23:87:e3:f6:44:71:04:3c:d6:51:84:
a5:42:45:3f:57:50:98:a9:50:f2:6d:d9:68:3b:5b:
ec:44:80:cd:a2:ef:aa:14:13:2a:d2:b2:96:3c:69:
f5:d7:0b:7a:d3:2f:e2:1d:06:7e:e6:61:17:e9:17:
ae:38:d3:5b:86:ef:8b:c3:20:98:d3:d1:f9:1d:b0:
16:61:bd:3d:53:02:c5:2d:5a:c0:1d:ae:08:3c:d7:
49:b8:f8:5e:96:98:a5:86:3f:97:f1:9a:e0:67:4b:
b8:8e:77:f3:9a:17:dd:b7:13:25:fd:ac:01:69:11:
b2:82:b2:e6:72:1a:7d:65:c3:78:28:ca:be:cf:16:
d1:f8:85:cb:33:39:fd:ce:48:81:b2:4d:c5:76:e0:
ea:6e:36:2f:b5:97:b2:78:37:f3:97:62:78:2c:6a:
f2:d7:83:f6:ee:95:91:41:96:6d:ea:02:fd:27:b5:
40:d5:6e:fd:2f:4d:1d:90:3d:27:b8:c5:d8:d7:62:
2a:42:bf:83:2e:da:83:10:b2:93:30:5a:f7:9b:7f:
3e:24:18:67:21:cb:05:5c:ca:f9:2d:7c:fa:2a:7a:
7d:5f:1c:28:1b:46:4e:9f:62:06:a4:7e:1c:3e:27:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:1B:6D:DE:6D:B7:73:60:C2:29:2E:15:25:A6:98:14:A7:90:F9
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/uG0bbd5tt3NgwikuFSWmmBSnkPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:150c::/48
Signature Algorithm: sha256WithRSAEncryption
42:e1:ef:00:06:75:6f:33:ee:e7:3b:d4:60:02:07:3d:fd:59:
1f:22:ec:7d:cd:ea:6f:a8:5c:91:ee:28:ac:90:01:18:c7:ec:
62:5c:b5:01:9a:8e:14:e0:81:56:15:cc:69:69:5b:bf:60:5d:
ad:91:3f:4c:2b:f5:e4:1d:80:ce:84:2d:4f:90:ec:b6:d2:12:
77:78:a9:82:86:53:8c:99:ce:2b:cd:5d:09:4f:f6:8e:cd:35:
b9:bb:79:07:6b:8b:3c:8d:df:45:df:4c:46:3d:35:d4:13:cf:
0d:2b:e3:78:b6:7a:64:72:a4:94:27:09:77:ce:84:c9:d0:2a:
24:70:3a:1c:63:96:79:5e:d8:3b:7f:4e:f0:24:f4:85:30:6d:
0c:cf:21:2e:3c:da:36:a0:f4:9a:f4:78:3e:df:39:88:3a:73:
01:85:2d:f1:0f:f4:3b:ad:42:96:16:8b:14:a7:9e:c3:41:5a:
f1:07:aa:43:02:f3:38:4a:46:b5:51:94:3e:2f:fb:5e:66:e2:
cb:32:58:0e:e6:6b:e6:cb:8a:44:8e:4b:b4:d1:cb:7c:c8:31:
85:d0:23:e3:90:36:82:66:f3:05:76:85:4e:a3:cc:86:48:95:
9c:4c:34:91:cf:1a:24:bd:3b:14:9d:44:94:d4:79:7b:cf:76:
36:aa:2a:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhQ6d8AHN9vha1qYZ3NNTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YzNjOTJhNGUxZDRmZTg4NTcyYmZhNjhjOTg1YzMxZTMz
NjhjODIwHhcNMjUwMTAxMDk0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODZkMWI2ZGRlNmRiNzczNjBjMjI5MmUxNTI1YTY5ODE0YTc5MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQrlkN3uXiJbQDd8yFnEFAHzI4fj
9kRxBDzWUYSlQkU/V1CYqVDybdloO1vsRIDNou+qFBMq0rKWPGn11wt60y/iHQZ+
5mEX6ReuONNbhu+LwyCY09H5HbAWYb09UwLFLVrAHa4IPNdJuPhelpilhj+X8Zrg
Z0u4jnfzmhfdtxMl/awBaRGygrLmchp9ZcN4KMq+zxbR+IXLMzn9zkiBsk3FduDq
bjYvtZeyeDfzl2J4LGry14P27pWRQZZt6gL9J7VA1W79L00dkD0nuMXY12IqQr+D
LtqDELKTMFr3m38+JBhnIcsFXMr5LXz6Knp9XxwoG0ZOn2IGpH4cPieaswIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLhtG23ebbdzYMIpLhUlppgUp5D5MB8GA1UdIwQY
MBaAFInDySpOHU/ohXK/poyYXDHjNoyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYt
ZTkxZmY1ZmU2YzI2LzEvdUcwYmJkNXR0M05nd2lrdUZTV21tQlNua1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYtZTkxZmY1ZmU2YzI2
LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBUM
MA0GCSqGSIb3DQEBCwUAA4IBAQBC4e8ABnVvM+7nO9RgAgc9/VkfIux9zepvqFyR
7iiskAEYx+xiXLUBmo4U4IFWFcxpaVu/YF2tkT9MK/XkHYDOhC1PkOy20hJ3eKmC
hlOMmc4rzV0JT/aOzTW5u3kHa4s8jd9F30xGPTXUE88NK+N4tnpkcqSUJwl3zoTJ
0CokcDocY5Z5Xtg7f07wJPSFMG0MzyEuPNo2oPSa9Hg+3zmIOnMBhS3xD/Q7rUKW
FosUp57DQVrxB6pDAvM4Ska1UZQ+L/teZuLLMlgO5mvmy4pEjku00ct8yDGF0CPj
kDaCZvMFdoVOo8yGSJWcTDSRzxokvTsUnUSU1Hl7z3Y2qiqx
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:47 2025 by rpki-client