Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/uBSOOeaOOAPA_AKPY15x-quda9A.roa
File: uBSOOeaOOAPA_AKPY15x-quda9A.roa (raw, json)
Hash identifier: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=
Subject key identifier: B8:14:8E:39:E6:8E:38:03:C0:FC:02:8F:63:5E:71:FA:AB:9D:6B:D0
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 01942143C3D4EC86F23E31413DD32B714693
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/uBSOOeaOOAPA_AKPY15x-quda9A.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63399
IP address blocks: 185.91.8.0/24 maxlen: 24
185.91.9.0/24 maxlen: 24
2a05:e580::/29 maxlen: 29
2a05:e580:100::/40 maxlen: 40
2a05:e580:200::/40 maxlen: 40
2a05:e580:300::/40 maxlen: 40
2a05:e580:400::/40 maxlen: 40
2a05:e580:500::/40 maxlen: 40
2a05:e580:600::/40 maxlen: 40
2a05:e580:700::/40 maxlen: 40
2a05:e580:800::/40 maxlen: 40
2a05:e580:900::/40 maxlen: 40
2a05:e580:a00::/40 maxlen: 40
2a05:e580:b00::/40 maxlen: 40
2a05:e580:c00::/40 maxlen: 40
2a05:e580:d00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c3:d4:ec:86:f2:3e:31:41:3d:d3:2b:71:46:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8148e39e68e3803c0fc028f635e71faab9d6bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:f2:ca:d1:ec:d4:22:19:49:08:29:03:1a:
95:3f:d9:01:77:fe:d3:59:64:8c:e6:8a:2a:68:fe:
e0:9a:9d:7d:92:39:8d:7a:9c:a7:a0:3c:96:b7:73:
92:35:eb:fd:a8:08:00:1d:fd:08:1e:1e:58:a0:18:
cf:b8:be:2f:16:8a:e8:b0:2d:90:f6:3d:a4:95:8a:
78:15:ff:fd:2e:3e:b0:ab:cd:67:fd:72:2b:f6:43:
c3:37:a6:3f:57:b8:ac:6c:ff:97:b1:97:64:14:db:
d8:d4:60:10:b8:70:ce:7f:33:b2:07:b1:0d:8d:17:
e0:b3:62:87:71:53:a0:cf:ed:40:71:a1:17:21:49:
3d:75:39:4d:d0:ff:4c:ff:b2:a5:a1:59:35:c5:dd:
1b:d8:24:33:1b:4b:2d:e2:35:e1:ce:42:0b:ab:8e:
40:d4:77:f5:48:bb:45:0e:01:a0:e3:fa:d0:dc:d2:
93:d8:4e:74:7f:e8:d3:01:fe:bd:5a:84:92:ff:04:
79:a5:63:60:d8:36:45:83:14:97:81:8b:a3:95:9d:
83:1f:60:c1:08:c7:7a:68:36:aa:dd:4f:d6:7d:b5:
ed:f9:66:e1:be:c1:43:5a:4b:4a:43:f5:c4:b6:6b:
e4:4c:1e:6e:48:6e:24:9d:0d:28:3b:46:ea:af:65:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:8E:39:E6:8E:38:03:C0:FC:02:8F:63:5E:71:FA:AB:9D:6B:D0
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/uBSOOeaOOAPA_AKPY15x-quda9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.8.0/23
IPv6:
2a05:e580::/29
Signature Algorithm: sha256WithRSAEncryption
76:1d:49:e3:f2:18:01:59:a3:1f:bc:a2:25:6f:3f:ec:71:73:
46:c9:64:2f:cc:27:ea:a8:f6:27:1a:d0:67:93:af:db:b9:54:
b8:82:cb:02:3a:9b:86:cd:92:61:58:37:86:de:85:1c:1d:e4:
27:47:5f:ce:9b:2f:00:f1:16:89:df:42:1c:1f:68:a1:70:72:
4b:43:71:15:6d:96:b5:58:35:83:85:da:24:43:0c:c1:68:87:
62:98:22:af:27:1b:5f:3b:41:c0:75:b8:64:1c:48:86:ce:f1:
da:81:cb:af:b3:46:b5:7a:64:f1:d4:43:18:92:93:2f:19:30:
64:28:b5:07:b8:19:bf:d7:cb:56:34:86:8c:55:ee:e4:b7:71:
2d:47:fb:55:0c:7a:a1:41:e5:cf:83:fb:c9:ed:7f:21:3d:45:
8b:a4:ce:f1:c9:62:dd:d0:b6:34:aa:5b:f2:d4:dd:aa:11:77:
0c:7f:1b:29:88:ee:6c:f3:8e:b8:83:b7:ed:d4:d9:5a:7d:76:
e7:31:ea:2e:12:08:49:57:4d:f9:33:26:bb:85:ae:53:51:2a:
60:70:9f:98:37:f0:dd:32:1c:6d:bd:e3:11:ca:d8:36:65:0b:
5b:a5:8d:e9:95:88:e8:99:0b:60:7a:c7:15:b6:3f:3a:b9:64:
9e:32:58:e6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhQ8PU7IbyPjFBPdMrcUaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZmE4YzBmZTYyZWM1NGFjY2JkZTM1YzYwYmQ4YWQ0Yjkw
MTRmZjcwHhcNMjUwMTAxMDk0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODE0OGUzOWU2OGUzODAzYzBmYzAyOGY2MzVlNzFmYWFiOWQ2YmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkbyytHs1CIZSQgpAxqVP9kBd/7T
WWSM5ooqaP7gmp19kjmNepynoDyWt3OSNev9qAgAHf0IHh5YoBjPuL4vForosC2Q
9j2klYp4Ff/9Lj6wq81n/XIr9kPDN6Y/V7isbP+XsZdkFNvY1GAQuHDOfzOyB7EN
jRfgs2KHcVOgz+1AcaEXIUk9dTlN0P9M/7KloVk1xd0b2CQzG0st4jXhzkILq45A
1Hf1SLtFDgGg4/rQ3NKT2E50f+jTAf69WoSS/wR5pWNg2DZFgxSXgYujlZ2DH2DB
CMd6aDaq3U/WfbXt+WbhvsFDWktKQ/XEtmvkTB5uSG4knQ0oO0bqr2UZZQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLgUjjnmjjgDwPwCj2NecfqrnWvQMB8GA1UdIwQY
MBaAFG76jA/mLsVKzL3jXGC9itS5AU/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUt
YTk5MTdjYzE1ZTBhLzEvdUJTT09lYU9PQVBBX0FLUFkxNXgtcXVkYTlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YzdiMjItYjY1Zi00ZjM3LWE0MGUtYTk5MTdjYzE1ZTBh
LzEvYnZxTUQtWXV4VXJNdmVOY1lMMksxTGtCVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuVsIMA0E
AgACMAcDBQMqBeWAMA0GCSqGSIb3DQEBCwUAA4IBAQB2HUnj8hgBWaMfvKIlbz/s
cXNGyWQvzCfqqPYnGtBnk6/buVS4gssCOpuGzZJhWDeG3oUcHeQnR1/Omy8A8RaJ
30IcH2ihcHJLQ3EVbZa1WDWDhdokQwzBaIdimCKvJxtfO0HAdbhkHEiGzvHagcuv
s0a1emTx1EMYkpMvGTBkKLUHuBm/18tWNIaMVe7kt3EtR/tVDHqhQeXPg/vJ7X8h
PUWLpM7xyWLd0LY0qlvy1N2qEXcMfxspiO5s8464g7ft1NlafXbnMeouEghJV035
Mya7ha5TUSpgcJ+YN/DdMhxtveMRytg2ZQtbpY3plYjomQtgescVtj86uWSeMljm
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:19 2025 by rpki-client