Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/UazLTwh7OqaYghJkPx2d6aofdqc.roa
File: UazLTwh7OqaYghJkPx2d6aofdqc.roa (raw, json)
Hash identifier: +eN+tp3ykq/L2u3JBiLVZbqgdnbF/IjBWzpwj1QMfoA=
Subject key identifier: 51:AC:CB:4F:08:7B:3A:A6:98:82:12:64:3F:1D:9D:E9:AA:1F:76:A7
Certificate issuer: /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial: 018475C1C5EE27BCB49C5FCA0363A68F2287
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/UazLTwh7OqaYghJkPx2d6aofdqc.roa
Signing time: Mon 14 Nov 2022 10:49:04 +0000
ROA not before: Mon 14 Nov 2022 10:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 130.255.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:c1:c5:ee:27:bc:b4:9c:5f:ca:03:63:a6:8f:22:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Validity
Not Before: Nov 14 10:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51accb4f087b3aa6988212643f1d9de9aa1f76a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:7b:97:bd:84:46:3e:cb:95:ee:bf:2c:43:
de:94:12:23:aa:e5:bc:12:29:20:21:7e:c9:89:37:
dd:73:e9:e6:7e:c3:51:e0:51:8d:5c:15:49:68:31:
ef:bf:dc:5e:f9:4f:e6:f4:5b:c0:59:40:87:4f:41:
df:9c:f2:46:af:44:90:d7:39:60:51:fd:61:3f:fd:
8b:d6:c5:37:50:6c:62:3d:eb:c5:64:0a:4c:55:bc:
18:99:a2:5c:d8:00:bb:60:7b:27:b0:b3:82:a9:df:
92:08:61:0f:66:b4:12:b5:09:58:b4:a5:7f:a2:8e:
10:4e:6b:ec:00:b0:1a:98:2d:16:f2:ec:ca:ae:66:
90:79:b2:3b:5d:5b:92:57:43:a3:28:ad:87:d0:76:
c4:72:07:65:25:06:0d:ef:8c:d1:c6:22:47:38:09:
49:f7:2f:d2:10:8c:81:79:86:0b:ce:89:5c:3b:ea:
6b:0c:72:c1:98:09:9b:e4:8e:c0:d9:c0:f8:e0:d0:
6a:f0:f6:6f:6e:55:fd:5c:0e:fa:c2:8c:46:9c:20:
db:56:93:cb:22:93:b7:70:13:ca:c9:75:d5:32:9e:
ea:c3:d5:cd:72:b7:ad:5b:99:89:ff:a3:1b:23:97:
4c:61:2a:13:c1:48:f9:8c:33:6f:a1:bd:37:4c:a9:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:CB:4F:08:7B:3A:A6:98:82:12:64:3F:1D:9D:E9:AA:1F:76:A7
X509v3 Authority Key Identifier:
keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/UazLTwh7OqaYghJkPx2d6aofdqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.174.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ac:a3:7b:e1:5e:a5:92:0e:1e:35:5f:64:1b:25:00:e8:21:
40:12:d4:e3:e5:55:d3:9d:15:3f:c8:ae:42:20:26:51:22:c2:
7d:fa:0f:11:fa:8c:6e:02:28:fe:b9:26:aa:05:a1:7c:87:d6:
89:66:6b:b9:f8:5e:12:f0:c6:8d:dd:1b:83:8f:80:9c:49:72:
c8:4c:6d:fd:a7:1a:60:ca:f6:f3:76:c1:0b:1c:47:3c:33:cb:
b1:13:b5:16:da:33:29:9d:b1:a9:c3:99:0f:3a:d8:32:51:35:
36:e5:7d:26:77:12:45:c4:06:90:00:30:a8:2f:e2:3a:e3:9b:
96:cd:65:ab:4d:2c:93:9d:15:61:2a:93:f1:4b:05:c5:87:c0:
fd:e5:73:f4:97:65:6d:5c:97:83:84:f4:40:9c:3f:2a:d1:dc:
95:7e:e8:83:e5:97:65:b3:c2:2e:d6:f3:58:fb:ef:f7:6d:8d:
1a:52:b4:e9:a3:a9:3e:05:c7:10:49:7e:dc:0c:da:35:97:95:
76:42:20:7f:fc:78:fb:db:69:2e:ec:ff:12:19:6e:40:76:36:
eb:22:fa:69:a1:c0:b6:77:74:4e:c0:8f:84:1c:f7:79:bb:ba:
da:da:fe:d1:2a:9c:f3:cb:89:5b:d5:92:df:42:60:e8:d0:ed:
a7:f9:ab:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR1wcXuJ7y0nF/KA2OmjyKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZjEwNGZjNGIwYjVjMDgyNzJlM2FlNzgzYjhjZDc3N2Jh
MmFhOTAwHhcNMjIxMTE0MTA0OTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWFjY2I0ZjA4N2IzYWE2OTg4MjEyNjQzZjFkOWRlOWFhMWY3NmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowZ7l72ERj7Lle6/LEPelBIjquW8
EikgIX7JiTfdc+nmfsNR4FGNXBVJaDHvv9xe+U/m9FvAWUCHT0HfnPJGr0SQ1zlg
Uf1hP/2L1sU3UGxiPevFZApMVbwYmaJc2AC7YHsnsLOCqd+SCGEPZrQStQlYtKV/
oo4QTmvsALAamC0W8uzKrmaQebI7XVuSV0OjKK2H0HbEcgdlJQYN74zRxiJHOAlJ
9y/SEIyBeYYLzolcO+prDHLBmAmb5I7A2cD44NBq8PZvblX9XA76woxGnCDbVpPL
IpO3cBPKyXXVMp7qw9XNcretW5mJ/6MbI5dMYSoTwUj5jDNvob03TKmktQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGsy08IezqmmIISZD8dnemqH3anMB8GA1UdIwQY
MBaAFF7xBPxLC1wIJy4654O4zXd7oqqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZFRV9Fc0xYQWduTGpybmc3ak5kM3VpcXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zNTNiZmEtYWJkYi00NDRhLTgxNTQt
NGZjNTRiMGJhYTc4LzEvVWF6TFR3aDdPcWFZZ2hKa1B4MmQ2YW9mZHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zNTNiZmEtYWJkYi00NDRhLTgxNTQtNGZjNTRiMGJhYTc4
LzEvWHZFRV9Fc0xYQWduTGpybmc3ak5kM3VpcXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv+uMA0G
CSqGSIb3DQEBCwUAA4IBAQBirKN74V6lkg4eNV9kGyUA6CFAEtTj5VXTnRU/yK5C
ICZRIsJ9+g8R+oxuAij+uSaqBaF8h9aJZmu5+F4S8MaN3RuDj4CcSXLITG39pxpg
yvbzdsELHEc8M8uxE7UW2jMpnbGpw5kPOtgyUTU25X0mdxJFxAaQADCoL+I645uW
zWWrTSyTnRVhKpPxSwXFh8D95XP0l2VtXJeDhPRAnD8q0dyVfuiD5Zdls8Iu1vNY
++/3bY0aUrTpo6k+BccQSX7cDNo1l5V2QiB//Hj722ku7P8SGW5AdjbrIvppocC2
d3ROwI+EHPd5u7ra2v7RKpzzy4lb1ZLfQmDo0O2n+avj
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:13:24 2025 by rpki-client