Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ubC4v8kX0TI33Qc5ghT7CW_vY1A.roa
File: ubC4v8kX0TI33Qc5ghT7CW_vY1A.roa (raw, json)
Hash identifier: 00LyXhbDMbX79fQXR60fuo6wHBH9Szrf6nmwAQEJsSY=
Subject key identifier: B9:B0:B8:BF:C9:17:D1:32:37:DD:07:39:82:14:FB:09:6F:EF:63:50
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746F40B6B6A753ECE4D96F9BB9BA283
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ubC4v8kX0TI33Qc5ghT7CW_vY1A.roa
Signing time: Thu 02 Jan 2025 13:49:08 +0000
ROA not before: Thu 02 Jan 2025 13:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136796
IP address blocks: 195.180.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:f4:0b:6b:6a:75:3e:ce:4d:96:f9:bb:9b:a2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b0b8bfc917d13237dd07398214fb096fef6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:03:e9:9d:82:d8:5d:6e:c8:6b:e2:ee:fe:
9e:19:91:bb:8e:56:71:6b:24:a9:ee:e2:d0:2d:11:
fc:3d:6b:3b:69:6d:4e:63:2c:88:6e:64:17:63:95:
b6:93:2e:71:a1:50:01:bd:f0:a3:1e:90:8e:b6:eb:
7b:68:8e:af:35:5d:00:e7:83:0d:45:45:ed:77:ec:
73:c3:74:5f:ef:1d:52:2c:05:88:67:7e:8b:df:9b:
fb:ae:5f:c8:71:2b:4f:bb:df:b1:36:ae:7f:d9:c0:
6a:db:6c:64:48:30:95:36:47:b7:4a:01:05:2f:66:
85:f3:f6:d2:10:b1:c4:f0:c8:14:90:5a:fa:b3:f9:
45:c7:de:45:4e:5e:01:44:69:c5:9f:93:29:b4:fe:
5e:8d:19:3e:d4:48:28:68:73:d8:ee:69:f3:52:73:
a0:bc:ed:61:0f:0d:b6:82:d3:e3:5e:ef:c5:80:9a:
92:6b:94:50:8d:d1:fb:f0:7f:d6:19:3b:be:6e:13:
2a:a6:35:b6:44:5f:3f:90:d4:cf:ea:c0:0a:6a:1c:
d7:c2:31:1f:61:90:56:cd:5f:6d:05:e7:38:d5:40:
a6:a0:14:a5:b4:4a:05:af:b3:5f:bc:28:fc:23:40:
d7:45:59:bc:43:e3:cf:70:04:39:0a:a0:39:ef:f5:
99:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:B8:BF:C9:17:D1:32:37:DD:07:39:82:14:FB:09:6F:EF:63:50
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ubC4v8kX0TI33Qc5ghT7CW_vY1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
88:1e:9e:b7:72:7c:61:4a:61:89:be:7c:87:75:5f:61:cd:8a:
0b:05:40:05:67:86:d8:38:10:74:45:62:50:5c:da:99:e6:05:
94:81:31:ab:f9:43:e2:e2:60:27:f3:0c:af:c0:44:3b:cb:4e:
0d:11:01:90:f1:6e:ab:20:62:ec:4c:50:3b:0a:35:3e:b0:59:
18:16:91:d9:71:a4:ff:7b:53:8b:cf:1f:4a:0c:3d:f3:64:c9:
8e:77:d8:8d:a0:07:a3:f4:eb:b1:c4:8a:79:0a:e0:88:70:e1:
d3:09:ee:bd:45:8b:99:79:31:27:75:72:b9:2f:34:04:8a:4d:
57:32:86:ed:0a:a1:fa:21:fb:8e:66:0d:1f:d7:16:cb:05:fe:
59:34:df:65:7e:b2:6a:c9:87:2a:6f:2d:8d:02:53:0a:d8:6b:
b7:23:20:f0:a1:24:ef:88:5b:d4:ec:54:ff:0e:51:93:fd:ff:
34:ec:57:e3:95:42:b1:fe:c0:53:61:09:be:ca:b6:24:74:8c:
82:ad:4d:93:93:a1:8c:ab:2e:24:e7:18:c2:4b:94:03:26:f0:
32:3f:e9:61:43:65:46:62:46:ed:74:24:18:32:20:a8:6b:1b:
29:ee:a9:4a:1f:eb:ac:92:bf:4d:45:4d:0d:08:c1:cd:e4:69:
9f:86:40:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRvQLa2p1Ps5Nlvm7m6KDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjUwMTAyMTM0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWIwYjhiZmM5MTdkMTMyMzdkZDA3Mzk4MjE0ZmIwOTZmZWY2MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwUD6Z2C2F1uyGvi7v6eGZG7jlZx
aySp7uLQLRH8PWs7aW1OYyyIbmQXY5W2ky5xoVABvfCjHpCOtut7aI6vNV0A54MN
RUXtd+xzw3Rf7x1SLAWIZ36L35v7rl/IcStPu9+xNq5/2cBq22xkSDCVNke3SgEF
L2aF8/bSELHE8MgUkFr6s/lFx95FTl4BRGnFn5MptP5ejRk+1EgoaHPY7mnzUnOg
vO1hDw22gtPjXu/FgJqSa5RQjdH78H/WGTu+bhMqpjW2RF8/kNTP6sAKahzXwjEf
YZBWzV9tBec41UCmoBSltEoFr7NfvCj8I0DXRVm8Q+PPcAQ5CqA57/WZ9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmwuL/JF9EyN90HOYIU+wlv72NQMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvdWJDNHY4a1gwVEkzM1FjNWdoVDdDV192WTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7SWMA0G
CSqGSIb3DQEBCwUAA4IBAQCIHp63cnxhSmGJvnyHdV9hzYoLBUAFZ4bYOBB0RWJQ
XNqZ5gWUgTGr+UPi4mAn8wyvwEQ7y04NEQGQ8W6rIGLsTFA7CjU+sFkYFpHZcaT/
e1OLzx9KDD3zZMmOd9iNoAej9OuxxIp5CuCIcOHTCe69RYuZeTEndXK5LzQEik1X
MobtCqH6IfuOZg0f1xbLBf5ZNN9lfrJqyYcqby2NAlMK2Gu3IyDwoSTviFvU7FT/
DlGT/f807FfjlUKx/sBTYQm+yrYkdIyCrU2Tk6GMqy4k5xjCS5QDJvAyP+lhQ2VG
YkbtdCQYMiCoaxsp7qlKH+uskr9NRU0NCMHN5GmfhkDc
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:09 2025 by rpki-client