Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uCyH2-fPRpFibOOxTNl7u6CXQas.roa
File: uCyH2-fPRpFibOOxTNl7u6CXQas.roa (raw, json)
Hash identifier: tlDsieQUw597/PTZ8W1911q4kuRCKAdlDdwHG1Otktc=
Subject key identifier: B8:2C:87:DB:E7:CF:46:91:62:6C:E3:B1:4C:D9:7B:BB:A0:97:41:AB
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F8CAF23619D4A2A1A27BAD586D252
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uCyH2-fPRpFibOOxTNl7u6CXQas.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42708
IP address blocks: 31.135.2.0/24 maxlen: 24
64.43.64.0/24 maxlen: 24
193.36.200.0/24 maxlen: 24
193.36.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:af:23:61:9d:4a:2a:1a:27:ba:d5:86:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82c87dbe7cf4691626ce3b14cd97bbba09741ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:77:6d:f4:f1:99:a1:a2:79:91:cd:f0:89:
b6:fe:42:7e:e0:c0:0d:5b:32:94:6d:2d:9c:d4:fc:
f0:9f:df:b7:5d:2c:3d:54:a0:a5:58:90:82:e0:f4:
42:42:5c:3d:c5:c3:c5:93:f6:83:57:df:5f:57:11:
05:4a:58:5e:98:e5:fe:91:61:1a:c4:10:70:b2:d4:
b9:60:b7:0e:c3:b1:ee:37:17:75:6a:bd:8e:6c:45:
98:20:86:43:ea:ab:64:f1:13:e9:1f:44:d1:82:c5:
00:dc:44:52:3f:6e:f0:4e:7e:52:73:e0:e3:46:c0:
f3:7f:05:c9:82:1c:58:25:89:93:72:56:f6:94:30:
66:60:d4:2b:8a:94:24:6d:64:d9:0c:92:17:fd:92:
aa:da:39:75:a6:31:1b:91:6d:c2:21:bf:a3:ff:68:
12:de:5e:86:f1:c8:ad:87:b0:98:8d:03:9b:3e:00:
7a:3c:de:24:78:5f:6e:bc:98:4e:35:b7:47:19:b2:
a6:4e:ed:b6:2d:b4:85:93:89:6e:4d:1a:ec:3a:93:
1a:2f:72:2e:f8:c8:59:b2:ff:0a:f6:75:d4:f6:18:
c1:f8:6f:93:4a:7b:3c:67:39:8f:fc:30:54:04:96:
b6:a3:0e:0f:1b:a7:eb:cd:1a:fe:f1:88:fd:37:2a:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2C:87:DB:E7:CF:46:91:62:6C:E3:B1:4C:D9:7B:BB:A0:97:41:AB
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uCyH2-fPRpFibOOxTNl7u6CXQas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.2.0/24
64.43.64.0/24
193.36.200.0/23
Signature Algorithm: sha256WithRSAEncryption
33:06:a2:32:e8:6a:81:9c:d0:21:b7:4a:4a:22:d0:ff:65:04:
79:48:70:98:d5:0d:25:b1:71:0e:ce:f9:6c:c2:3e:2d:5c:fa:
fe:39:7a:63:ae:f6:d1:c3:86:b8:66:4d:a2:ed:d1:9b:b6:b0:
4b:1e:31:ef:b3:2f:9b:02:a7:f4:32:26:3f:39:7f:9d:2e:0c:
81:d4:54:30:82:a6:a0:76:d4:05:51:e5:82:9f:4a:d9:d4:53:
77:13:3a:38:22:5b:69:8b:4d:81:69:30:e0:f8:0f:92:d5:77:
0f:f5:33:15:fc:b8:af:9a:86:ce:7a:46:b6:e9:d5:df:94:0f:
92:da:71:97:40:21:b5:0c:cd:a7:99:8c:75:fc:77:70:34:5c:
ca:92:ec:6c:f3:41:b4:bc:0c:84:52:50:08:9a:3a:52:4c:64:
c6:21:4e:4f:7b:be:05:ab:85:87:9f:19:50:68:79:40:58:a0:
c3:fe:4c:7e:e2:3f:d1:54:c7:5f:72:fe:e8:31:97:d4:18:ff:
e3:01:38:39:fb:11:7c:f3:25:65:7c:ad:be:47:64:ef:ab:d5:
58:e8:44:f3:2e:26:95:9e:88:fc:d9:bd:cc:41:d9:08:74:08:
6f:16:e4:22:e9:96:a1:21:14:3d:3f:69:ea:ba:73:a6:42:b4:
7a:7c:c2:08
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlj4yvI2GdSioaJ7rVhtJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODJjODdkYmU3Y2Y0NjkxNjI2Y2UzYjE0Y2Q5N2JiYmEwOTc0MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm893bfTxmaGieZHN8Im2/kJ+4MAN
WzKUbS2c1Pzwn9+3XSw9VKClWJCC4PRCQlw9xcPFk/aDV99fVxEFSlhemOX+kWEa
xBBwstS5YLcOw7HuNxd1ar2ObEWYIIZD6qtk8RPpH0TRgsUA3ERSP27wTn5Sc+Dj
RsDzfwXJghxYJYmTclb2lDBmYNQripQkbWTZDJIX/ZKq2jl1pjEbkW3CIb+j/2gS
3l6G8cith7CYjQObPgB6PN4keF9uvJhONbdHGbKmTu22LbSFk4luTRrsOpMaL3Iu
+MhZsv8K9nXU9hjB+G+TSns8ZzmP/DBUBJa2ow4PG6frzRr+8Yj9NyrcoQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLgsh9vnz0aRYmzjsUzZe7ugl0GrMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvdUN5SDItZlBScEZpYk9PeFRObDd1NkNYUWFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH4cCAwQA
QCtAAwQBwSTIMA0GCSqGSIb3DQEBCwUAA4IBAQAzBqIy6GqBnNAht0pKItD/ZQR5
SHCY1Q0lsXEOzvlswj4tXPr+OXpjrvbRw4a4Zk2i7dGbtrBLHjHvsy+bAqf0MiY/
OX+dLgyB1FQwgqagdtQFUeWCn0rZ1FN3Ezo4Iltpi02BaTDg+A+S1XcP9TMV/Liv
mobOeka26dXflA+S2nGXQCG1DM2nmYx1/HdwNFzKkuxs80G0vAyEUlAImjpSTGTG
IU5Pe74Fq4WHnxlQaHlAWKDD/kx+4j/RVMdfcv7oMZfUGP/jATg5+xF88yVlfK2+
R2Tvq9VY6ETzLiaVnoj82b3MQdkIdAhvFuQi6ZahIRQ9P2nqunOmQrR6fMII
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:35 2025 by rpki-client