Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/v-UIauQZjW8hDMdx3w3tSE6IDRc.roa
File: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (raw, json)
Hash identifier: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=
Subject key identifier: BF:E5:08:6A:E4:19:8D:6F:21:0C:C7:71:DF:0D:ED:48:4E:88:0D:17
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019423D6CFBB64772D7804A50C5C58D92CDB
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/v-UIauQZjW8hDMdx3w3tSE6IDRc.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210887
IP address blocks: 2001:67c:864::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cf:bb:64:77:2d:78:04:a5:0c:5c:58:d9:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfe5086ae4198d6f210cc771df0ded484e880d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:e4:87:e2:9e:1c:5c:6c:12:48:98:a2:c7:
44:8b:3a:ce:ee:84:b9:21:d6:c7:ba:a0:2b:d4:c2:
9f:df:8d:1f:50:59:ff:3d:1b:88:49:d8:66:84:ab:
c2:89:69:c9:4e:fd:be:aa:05:5c:a1:1c:51:14:f1:
82:14:85:e0:a5:a7:d2:ba:33:df:99:cb:84:9b:3f:
09:71:83:2a:61:b2:20:3d:d4:bc:4f:2b:f4:44:b4:
59:78:11:b8:fe:df:83:2c:7a:6c:c8:e2:45:2f:52:
ff:0f:b2:ce:7f:68:d1:95:52:c6:ca:2b:dc:59:c5:
51:bd:81:58:4e:21:41:3a:f9:75:5b:36:3f:2a:40:
93:a7:f3:96:50:06:7a:78:6b:ea:07:6f:e3:f7:84:
f0:3c:0b:49:02:34:16:9c:1d:70:2f:d1:12:09:32:
2b:5b:af:e3:a5:fa:91:84:16:7a:e6:e3:bf:eb:30:
c4:84:0b:35:f6:a9:90:37:0a:62:77:35:8b:a2:a0:
bc:b0:cd:71:ed:2e:b6:89:0f:4f:38:0d:78:6d:c5:
ac:a2:0c:09:ad:ea:fc:33:35:d6:33:37:5b:33:fa:
df:6c:28:ad:c5:02:e2:ff:13:55:21:8e:fe:56:c8:
b3:29:6a:e8:cc:db:2a:08:2f:b3:20:bf:f2:6e:bb:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:08:6A:E4:19:8D:6F:21:0C:C7:71:DF:0D:ED:48:4E:88:0D:17
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/v-UIauQZjW8hDMdx3w3tSE6IDRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:864::/48
Signature Algorithm: sha256WithRSAEncryption
43:40:fd:e3:05:22:04:19:76:00:13:f8:d2:11:27:3a:32:f3:
74:cf:42:e1:28:54:f8:f8:ba:c4:62:71:99:98:c5:21:b9:1f:
b8:37:27:09:85:c5:21:4b:45:f5:5c:2e:9f:7c:c0:20:d0:eb:
d4:46:bf:31:f1:4e:f8:2d:f8:d1:15:32:6b:8b:de:6b:78:8f:
4f:65:fb:29:96:75:a5:89:64:ba:f8:21:4a:eb:a8:cc:53:68:
14:52:2b:9e:12:79:77:b5:aa:cb:6d:3a:1e:bc:94:99:49:65:
ee:c6:0a:51:9c:20:c0:ee:60:a1:82:7c:f9:90:cf:79:c2:09:
f0:ed:b4:ec:4f:07:c8:89:17:88:c9:ec:f3:ae:a3:d3:29:6f:
ef:aa:8e:3f:6f:2f:f8:6c:32:3b:c0:76:c4:b3:d5:e5:ee:d1:
1a:0a:28:e6:ef:70:08:c0:00:1b:26:7b:7d:5a:c6:68:78:ac:
d9:17:8a:d9:85:7e:db:22:56:1e:5e:72:fe:74:1e:e8:cd:94:
80:11:60:17:19:32:06:60:50:c8:3e:55:d7:81:6c:ba:18:84:
7d:39:c8:ca:b6:02:6d:f7:ea:9e:4c:b8:91:11:0e:4f:08:e1:
b5:14:31:f8:2b:48:92:05:56:33:94:33:eb:7d:a1:67:51:27:
a3:42:28:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj1s+7ZHcteASlDFxY2SzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1
YjcxNzIwHhcNMjUwMTAxMjE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmU1MDg2YWU0MTk4ZDZmMjEwY2M3NzFkZjBkZWQ0ODRlODgwZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivvkh+KeHFxsEkiYosdEizrO7oS5
IdbHuqAr1MKf340fUFn/PRuISdhmhKvCiWnJTv2+qgVcoRxRFPGCFIXgpafSujPf
mcuEmz8JcYMqYbIgPdS8Tyv0RLRZeBG4/t+DLHpsyOJFL1L/D7LOf2jRlVLGyivc
WcVRvYFYTiFBOvl1WzY/KkCTp/OWUAZ6eGvqB2/j94TwPAtJAjQWnB1wL9ESCTIr
W6/jpfqRhBZ65uO/6zDEhAs19qmQNwpidzWLoqC8sM1x7S62iQ9POA14bcWsogwJ
rer8MzXWMzdbM/rfbCitxQLi/xNVIY7+VsizKWrozNsqCC+zIL/ybru9uQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL/lCGrkGY1vIQzHcd8N7UhOiA0XMB8GA1UdIwQY
MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt
NGU1ODYxMTg3YzRmLzEvdi1VSWF1UVpqVzhoRE1keDN3M3RTRTZJRFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm
LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAhk
MA0GCSqGSIb3DQEBCwUAA4IBAQBDQP3jBSIEGXYAE/jSESc6MvN0z0LhKFT4+LrE
YnGZmMUhuR+4NycJhcUhS0X1XC6ffMAg0OvURr8x8U74LfjRFTJri95reI9PZfsp
lnWliWS6+CFK66jMU2gUUiueEnl3tarLbToevJSZSWXuxgpRnCDA7mChgnz5kM95
wgnw7bTsTwfIiReIyezzrqPTKW/vqo4/by/4bDI7wHbEs9Xl7tEaCijm73AIwAAb
Jnt9WsZoeKzZF4rZhX7bIlYeXnL+dB7ozZSAEWAXGTIGYFDIPlXXgWy6GIR9OcjK
tgJt9+qeTLiREQ5PCOG1FDH4K0iSBVYzlDPrfaFnUSejQigf
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:12 2025 by rpki-client