Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UKfLUmWCo5_SZCJ82z_iApfHc54.roa
File: UKfLUmWCo5_SZCJ82z_iApfHc54.roa (raw, json)
Hash identifier: jPNoS7yinvXaw5cwstKWrBPEWZ87d1gmSzzpI2f4eXY=
Subject key identifier: 50:A7:CB:52:65:82:A3:9F:D2:64:22:7C:DB:3F:E2:02:97:C7:73:9E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440BA37BF3897EE57CC2F9674BA7CF
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UKfLUmWCo5_SZCJ82z_iApfHc54.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60840
IP address blocks: 185.201.31.0/24 maxlen: 24
193.228.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0b:a3:7b:f3:89:7e:e5:7c:c2:f9:67:4b:a7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50a7cb526582a39fd264227cdb3fe20297c7739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:e1:00:7b:96:22:9c:d7:5c:7d:2b:d5:17:
9b:ef:c1:17:db:bf:0f:0a:13:bc:2e:13:80:da:19:
17:b6:ed:f2:49:45:6c:52:09:8d:74:d3:b3:89:80:
c8:9f:e9:e7:43:36:6f:d6:26:57:4b:99:86:f9:da:
9d:ce:1c:66:d0:ba:d9:4e:8e:9c:88:14:2b:82:18:
88:bf:e4:f9:6c:33:5e:10:12:90:cc:d3:21:8f:c1:
33:70:02:07:81:6c:36:ed:37:28:69:73:fd:b0:4f:
46:99:9a:43:44:1e:e0:3f:7e:37:60:96:d1:ab:ea:
b8:de:4d:7d:cd:c3:a0:29:fb:57:0b:ec:28:7c:39:
d1:62:8a:38:d8:28:98:e2:8a:d3:f2:c0:39:9b:87:
33:3c:f0:cf:08:21:63:36:64:10:d8:4a:64:9b:0a:
ed:e3:b6:2b:03:c4:7e:a3:16:3e:f7:c4:5b:0f:0f:
9b:41:9d:46:dc:d4:a8:97:63:7b:bb:b4:b4:37:55:
0e:1f:d2:b8:e7:1b:42:c7:9a:94:6f:28:c8:27:12:
06:fe:fa:a7:1a:63:ce:07:30:5c:83:18:d1:d5:ae:
17:7f:d2:28:99:c3:61:66:57:3a:65:67:c4:66:6a:
87:c7:e1:29:ec:df:f1:f1:ad:05:1b:03:5e:3c:7a:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A7:CB:52:65:82:A3:9F:D2:64:22:7C:DB:3F:E2:02:97:C7:73:9E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UKfLUmWCo5_SZCJ82z_iApfHc54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.31.0/24
193.228.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:aa:f1:03:34:62:e5:95:9f:a0:eb:d8:4b:70:5a:be:7a:e8:
05:c7:75:7c:1b:f9:57:5d:69:83:be:fa:52:5b:78:4b:a4:ff:
49:08:f4:6b:ba:a7:df:a4:7c:62:37:4d:35:2f:a4:f4:a1:42:
cb:7b:ad:80:7e:00:14:a7:45:19:64:9a:e7:d7:56:1b:a7:0b:
2c:20:73:93:3a:ff:b1:b7:2f:c5:95:ac:86:94:20:e5:80:d1:
97:e5:f3:28:83:08:ef:1c:10:74:1d:5c:76:e5:8d:44:7f:28:
a7:95:5f:34:52:6f:fd:33:c9:a6:87:d8:36:12:57:b0:3d:bd:
58:9a:fe:87:62:72:60:04:5f:7d:0a:46:df:ca:a8:34:b2:30:
99:f2:97:a7:5e:75:f0:5c:a7:91:a6:73:d2:e6:c5:c8:09:30:
fb:ad:a2:7b:0f:23:6e:1f:9c:37:81:f5:f1:24:a2:58:1c:ba:
cf:8d:5c:e9:bf:37:f1:bf:b4:c7:10:97:66:65:37:c2:cd:60:
1a:43:42:27:d4:a6:0a:93:83:1e:b1:47:23:37:05:ba:9f:7f:
11:25:ce:48:71:a8:4b:ba:fd:b9:2b:40:71:d3:1f:92:9a:12:
fe:00:b9:50:c9:c7:41:bb:1e:d5:d5:85:96:90:a0:f4:05:b2:
45:0e:2a:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRAuje/OJfuV8wvlnS6fPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwMTAxMDk0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGE3Y2I1MjY1ODJhMzlmZDI2NDIyN2NkYjNmZTIwMjk3Yzc3MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BfhAHuWIpzXXH0r1Reb78EX278P
ChO8LhOA2hkXtu3ySUVsUgmNdNOziYDIn+nnQzZv1iZXS5mG+dqdzhxm0LrZTo6c
iBQrghiIv+T5bDNeEBKQzNMhj8EzcAIHgWw27TcoaXP9sE9GmZpDRB7gP343YJbR
q+q43k19zcOgKftXC+wofDnRYoo42CiY4orT8sA5m4czPPDPCCFjNmQQ2Epkmwrt
47YrA8R+oxY+98RbDw+bQZ1G3NSol2N7u7S0N1UOH9K45xtCx5qUbyjIJxIG/vqn
GmPOBzBcgxjR1a4Xf9IomcNhZlc6ZWfEZmqHx+Ep7N/x8a0FGwNePHrIVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFCny1JlgqOf0mQifNs/4gKXx3OeMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvVUtmTFVtV0NvNV9TWkNKODJ6X2lBcGZIYzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuckfAwQA
weSCMA0GCSqGSIb3DQEBCwUAA4IBAQAvqvEDNGLllZ+g69hLcFq+eugFx3V8G/lX
XWmDvvpSW3hLpP9JCPRruqffpHxiN001L6T0oULLe62AfgAUp0UZZJrn11Ybpwss
IHOTOv+xty/FlayGlCDlgNGX5fMogwjvHBB0HVx25Y1EfyinlV80Um/9M8mmh9g2
ElewPb1Ymv6HYnJgBF99Ckbfyqg0sjCZ8penXnXwXKeRpnPS5sXICTD7raJ7DyNu
H5w3gfXxJKJYHLrPjVzpvzfxv7THEJdmZTfCzWAaQ0In1KYKk4MesUcjNwW6n38R
Jc5IcahLuv25K0Bx0x+SmhL+ALlQycdBux7V1YWWkKD0BbJFDiol
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:53 2025 by rpki-client