Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/uDx7Z1tuokndeydIySa8WuoqYoI.roa
File: uDx7Z1tuokndeydIySa8WuoqYoI.roa (raw, json)
Hash identifier: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=
Subject key identifier: B8:3C:7B:67:5B:6E:A2:49:DD:7B:27:48:C9:26:BC:5A:EA:2A:62:82
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 01941F8C0792B5A7955D8D6C4E4566ADDEA7
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/uDx7Z1tuokndeydIySa8WuoqYoI.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30931
IP address blocks: 91.223.203.0/24 maxlen: 24
91.223.218.0/24 maxlen: 24
193.30.41.0/24 maxlen: 24
194.107.118.0/24 maxlen: 24
195.234.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:07:92:b5:a7:95:5d:8d:6c:4e:45:66:ad:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b83c7b675b6ea249dd7b2748c926bc5aea2a6282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:8a:a0:8f:11:b3:ef:a5:ba:58:b5:f9:bb:
5b:af:65:5d:15:42:de:8a:32:45:56:b5:c7:89:cb:
4f:e1:4e:a1:5e:24:dc:03:4f:41:71:8f:8e:b6:85:
fe:9f:12:d4:51:f7:41:96:c0:e0:01:9a:b8:62:58:
e9:cf:c8:a3:97:fb:ab:c4:24:6d:0f:73:4d:89:f5:
4c:ab:b0:5b:f0:01:b5:24:20:a7:db:6e:08:e7:c9:
d6:1b:97:2f:f8:26:c0:1c:26:46:3d:41:07:c7:fd:
6f:12:03:ce:9d:ee:04:c5:fd:25:0e:c9:00:f6:1c:
34:fc:bc:d4:d8:7b:04:41:36:28:b1:25:ab:d6:fa:
7f:19:9c:46:5c:d1:8e:1b:a3:9e:1f:b8:21:a4:49:
d2:06:9a:7f:00:2c:a8:c9:ad:2e:c3:9f:e8:01:e4:
f6:0a:e4:46:ac:c2:b2:61:84:ea:46:06:e0:ea:e1:
d9:cc:d4:63:87:ab:06:88:82:ef:14:da:67:34:fe:
8e:71:ad:d0:73:e9:b3:73:aa:29:1c:27:69:46:d2:
f1:6a:bc:88:2d:1e:be:37:21:1b:3b:0f:4b:72:07:
03:d7:ac:c7:f8:9f:7d:5a:b0:f0:47:b7:dc:11:74:
85:0b:18:d2:aa:2e:0a:a5:af:a8:a5:e6:40:2b:c8:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:7B:67:5B:6E:A2:49:DD:7B:27:48:C9:26:BC:5A:EA:2A:62:82
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/uDx7Z1tuokndeydIySa8WuoqYoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.203.0/24
91.223.218.0/24
193.30.41.0/24
194.107.118.0/24
195.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:64:75:39:a1:31:88:dd:98:33:dc:43:1f:7a:50:2e:ef:80:
89:2b:fe:9c:c5:f1:14:f5:0e:c0:03:19:99:a1:50:a2:c4:72:
f7:dc:f9:a1:c3:8e:9a:b2:d6:42:d4:fb:70:f0:c4:cf:55:1e:
ea:cb:71:bb:90:c9:a0:1e:e5:d5:02:56:bc:53:45:ae:c0:52:
46:6a:88:8a:3f:c6:df:5c:44:9b:bc:b3:8f:36:90:ae:e1:9c:
9d:84:10:2c:c7:4a:ab:b8:1c:8e:8a:2f:c0:64:6a:17:32:3b:
57:78:cb:6b:ab:34:9e:e7:e3:c2:06:b8:73:70:48:41:88:01:
59:01:ce:34:7a:b1:9e:be:ff:d3:bc:a9:f0:2a:81:a6:83:b0:
7f:50:a0:ac:48:a3:84:cf:0d:ee:ce:01:c5:1d:b2:75:89:47:
01:66:27:77:8d:4f:ce:e5:0b:b4:dd:87:4d:a5:4a:e1:3a:d3:
8c:28:9f:a7:81:2a:2c:08:37:1e:3d:48:8c:8a:18:84:75:fb:
72:90:78:d7:42:9d:b4:3f:af:3f:be:e5:3a:78:13:14:23:7b:
f4:68:87:47:30:d1:4b:8f:dc:40:b9:6f:4e:7f:95:48:ac:92:
b0:f0:96:15:3e:e8:19:1b:c8:6c:09:8a:cc:f9:71:dc:31:c9:
6b:e0:28:de
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQfjAeStaeVXY1sTkVmrd6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYWIzYmJjYjNjZDUzMjZhOGIxMjRmYzk1ZGVkMTQ0NTM3
NTJmYTIwHhcNMjUwMTAxMDE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODNjN2I2NzViNmVhMjQ5ZGQ3YjI3NDhjOTI2YmM1YWVhMmE2MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTeKoI8Rs++luli1+btbr2VdFULe
ijJFVrXHictP4U6hXiTcA09BcY+OtoX+nxLUUfdBlsDgAZq4Yljpz8ijl/urxCRt
D3NNifVMq7Bb8AG1JCCn224I58nWG5cv+CbAHCZGPUEHx/1vEgPOne4Exf0lDskA
9hw0/LzU2HsEQTYosSWr1vp/GZxGXNGOG6OeH7ghpEnSBpp/ACyoya0uw5/oAeT2
CuRGrMKyYYTqRgbg6uHZzNRjh6sGiILvFNpnNP6Oca3Qc+mzc6opHCdpRtLxaryI
LR6+NyEbOw9LcgcD16zH+J99WrDwR7fcEXSFCxjSqi4Kpa+opeZAK8j46QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLg8e2dbbqJJ3XsnSMkmvFrqKmKCMB8GA1UdIwQY
MBaAFCKrO7yzzVMmqLEk/JXe0URTdS+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUt
ZmE4YTVlODZiMzQ4LzEvdUR4N1oxdHVva25kZXlkSXlTYThXdW9xWW9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOTI0ODktNzMzNy00YmQ3LTk1YWUtZmE4YTVlODZiMzQ4
LzEvSXFzN3ZMUE5VeWFvc1NUOGxkN1JSRk4xTDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW9/LAwQA
W9/aAwQAwR4pAwQAwmt2AwQAw+onMA0GCSqGSIb3DQEBCwUAA4IBAQCkZHU5oTGI
3Zgz3EMfelAu74CJK/6cxfEU9Q7AAxmZoVCixHL33Pmhw46astZC1Ptw8MTPVR7q
y3G7kMmgHuXVAla8U0WuwFJGaoiKP8bfXESbvLOPNpCu4ZydhBAsx0qruByOii/A
ZGoXMjtXeMtrqzSe5+PCBrhzcEhBiAFZAc40erGevv/TvKnwKoGmg7B/UKCsSKOE
zw3uzgHFHbJ1iUcBZid3jU/O5Qu03YdNpUrhOtOMKJ+ngSosCDcePUiMihiEdfty
kHjXQp20P68/vuU6eBMUI3v0aIdHMNFLj9xAuW9Of5VIrJKw8JYVPugZG8hsCYrM
+XHcMclr4Cje
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:44:07 2025 by rpki-client