Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/umr-ahYXVBg4ktvR_pqvghynF5k.roa
File: umr-ahYXVBg4ktvR_pqvghynF5k.roa (raw, json)
Hash identifier: /6FBBaWaMmewHn5n1ViS117yVeq5itaScWnYchFjp2Q=
Subject key identifier: BA:6A:FE:6A:16:17:54:18:38:92:DB:D1:FE:9A:AF:82:1C:A7:17:99
Certificate issuer: /CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Certificate serial: 0182B4F206122C59F578EC9E872B4405CD59
Authority key identifier: 69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/umr-ahYXVBg4ktvR_pqvghynF5k.roa
Signing time: Fri 19 Aug 2022 07:12:16 +0000
ROA not before: Fri 19 Aug 2022 07:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 212.18.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:f2:06:12:2c:59:f5:78:ec:9e:87:2b:44:05:cd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Validity
Not Before: Aug 19 07:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba6afe6a161754183892dbd1fe9aaf821ca71799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:af:4f:52:62:21:5e:40:d0:6d:e0:37:c3:f8:
39:4b:c6:7e:b2:52:19:08:6a:eb:e9:77:a5:88:3f:
8c:86:4e:50:3b:92:83:03:16:71:87:d5:2b:e8:3c:
51:f4:3f:6a:48:5e:8c:24:2a:22:49:81:b1:40:c2:
f7:26:05:0f:ae:ee:f0:1b:9d:ea:03:61:b2:91:b2:
b6:61:40:5d:e5:39:ec:93:35:a3:e8:75:fa:2f:93:
5f:60:c7:4e:87:25:cf:01:16:d4:d1:78:d3:b5:a4:
c7:07:9e:01:3c:4c:a0:59:49:77:9a:3c:4b:68:f5:
32:9f:ef:cc:0d:c5:8c:35:d3:a8:46:1c:f1:79:1b:
db:40:93:f4:f5:d0:27:69:7d:c9:07:5e:28:b1:63:
42:03:d7:19:da:8a:1b:b4:e1:7e:77:c0:65:13:f9:
b2:32:d7:21:31:4a:62:ef:a1:d0:82:b7:d1:2c:fb:
37:cf:64:a8:41:00:4b:46:bc:1b:8f:3f:40:41:60:
79:44:6d:eb:af:34:e7:10:33:f4:40:f3:c9:65:70:
6b:c6:7e:28:84:66:19:3e:65:14:d5:da:dc:e0:85:
da:5c:b3:ba:86:7a:29:ed:0a:04:01:b7:1a:ea:b5:
2e:64:95:a9:fa:51:9b:14:b1:c1:6c:4c:aa:22:3a:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:FE:6A:16:17:54:18:38:92:DB:D1:FE:9A:AF:82:1C:A7:17:99
X509v3 Authority Key Identifier:
keyid:69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/umr-ahYXVBg4ktvR_pqvghynF5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.113.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:41:f1:94:c5:3e:ef:46:22:40:10:24:b0:3e:ea:5c:63:20:
3b:24:3f:a6:85:ff:46:9f:fe:8b:60:45:f7:14:5f:57:1f:82:
3a:5b:47:3f:78:38:28:57:eb:b1:f5:1a:08:71:2e:54:ea:3c:
ae:0c:c1:d8:7f:9c:6e:e8:7f:05:f7:46:43:c6:1f:ef:46:14:
81:34:b7:e9:1f:b9:4a:a4:76:18:ed:73:ec:79:d5:3f:82:42:
7e:11:27:89:81:c5:22:d5:fb:63:5b:5b:98:bd:79:70:0b:75:
fb:83:b3:61:49:8e:94:f0:73:f0:28:f7:19:28:a5:68:0f:b4:
3f:91:6f:46:92:e9:ad:cb:17:74:82:de:fb:2d:45:dc:aa:5d:
e3:7d:6f:62:9c:34:d5:3a:09:59:99:20:a9:36:64:22:e2:96:
c4:28:b7:36:0d:b2:ac:75:3f:85:c6:ea:61:62:ed:a0:59:1d:
c7:e0:0d:c1:1b:3a:91:5c:bb:b1:f6:a5:61:69:28:5e:5b:f1:
ba:ba:db:ab:88:9a:3f:6e:b9:58:09:52:d3:4e:ec:51:56:ab:
59:02:c4:43:92:c2:7a:87:95:e2:72:77:61:49:4b:13:8c:35:
2c:1b:c7:d8:a1:34:d8:60:50:6d:5d:2c:80:fe:04:17:ed:2d:
2c:67:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:13 2025 by rpki-client