Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/UBam_LF0XAef-2xohQdZlRl7HBg.roa
File: UBam_LF0XAef-2xohQdZlRl7HBg.roa (raw, json)
Hash identifier: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=
Subject key identifier: 50:16:A6:FC:B1:74:5C:07:9F:FB:6C:68:85:07:59:95:19:7B:1C:18
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019426D9D8D038A894AF50FA92398CFF0C30
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/UBam_LF0XAef-2xohQdZlRl7HBg.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50880
IP address blocks: 212.6.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d8:d0:38:a8:94:af:50:fa:92:39:8c:ff:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5016a6fcb1745c079ffb6c6885075995197b1c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:e8:fd:2a:86:30:09:12:2e:9e:99:50:d2:
98:75:e0:af:dc:4c:20:24:db:30:e7:d3:83:67:95:
2e:5f:9b:cf:f4:0d:50:57:dc:eb:38:bd:0f:68:a8:
d8:44:2c:2b:52:c7:80:33:58:5b:9e:a9:ae:23:9d:
f9:49:89:5b:ab:b0:2f:7b:52:8b:b7:c5:bc:bf:7c:
2e:4d:21:b6:c3:75:70:9d:c2:d6:70:27:a3:41:6d:
5d:15:40:86:c8:a8:34:6a:e1:c3:f9:a3:1f:4e:bd:
6d:6f:8d:69:41:00:17:42:81:2d:8e:5b:2a:6b:1d:
c2:c7:4d:c6:61:be:9c:ac:8b:97:dd:56:fc:1f:fc:
1a:78:88:93:70:d4:06:ca:46:b2:ea:bf:4f:9a:b8:
93:1f:4e:9a:83:c4:c5:a0:4e:de:88:7b:a5:9b:1b:
b5:0a:0e:54:55:11:cc:fa:97:1a:1d:1e:25:7d:a9:
fa:14:60:67:77:8d:2b:c9:fa:10:6f:0d:22:3b:06:
84:87:b0:28:ef:58:20:ec:ca:f4:62:8f:d3:7b:a5:
29:aa:81:ea:d4:f6:6d:6c:8d:1c:8c:e9:fa:20:e6:
f0:df:e3:d2:5e:a7:16:45:1b:77:55:8c:95:b2:98:
a8:52:03:4f:fa:50:ea:60:51:27:58:6d:f4:57:66:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:16:A6:FC:B1:74:5C:07:9F:FB:6C:68:85:07:59:95:19:7B:1C:18
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/UBam_LF0XAef-2xohQdZlRl7HBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:7a:f0:41:1d:fb:ba:85:94:1f:97:cf:94:1f:86:f6:21:38:
48:14:59:37:35:30:d1:4a:bc:47:89:fa:ea:29:7f:ea:6e:d4:
bf:d2:e8:67:1f:82:11:34:19:bf:ee:23:57:26:47:33:99:ae:
a9:20:29:a3:f2:62:82:f9:89:38:06:86:be:17:08:62:01:1e:
3d:43:d8:4c:48:0e:2e:a3:d5:ef:9f:ea:58:0d:4f:5f:7c:f8:
94:48:81:60:78:7a:da:61:fa:e6:c9:16:9c:2a:09:e3:57:3c:
96:cb:cd:d1:f9:f8:fa:4c:33:22:cc:18:f4:5b:90:f0:e8:ca:
28:df:41:57:ea:00:2f:9e:c0:de:fe:df:0a:64:27:9e:3a:ac:
14:89:64:e1:c1:38:74:95:91:25:76:6b:3c:99:47:51:ba:2c:
f0:97:64:9b:d2:a4:61:54:a9:41:af:5b:97:3d:23:f4:7a:60:
0d:3b:4f:d5:7d:f9:49:89:77:65:ce:1d:42:d4:08:13:24:d2:
30:9a:d1:51:2b:79:e2:1b:a3:02:5d:b4:b8:43:de:f7:df:98:
af:15:9a:69:63:c0:b1:a9:5c:6c:f9:f1:70:e2:a6:3b:34:e2:
a1:5e:15:5c:97:d8:5e:9b:cd:9d:8c:fc:fb:f4:d8:19:b9:07:
bd:e1:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:39:13 2025 by rpki-client