Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa
File: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (raw, json)
Hash identifier: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=
Subject key identifier: BA:5E:44:3C:2F:49:83:EC:61:CC:37:B7:F8:49:E9:4F:18:21:EC:3C
Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Certificate serial: 01941FFA9990116714B661407FC28D47D401
Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204712
IP address blocks: 185.83.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:90:11:67:14:b6:61:40:7f:c2:8d:47:d4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba5e443c2f4983ec61cc37b7f849e94f1821ec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c9:0e:61:a6:64:87:e4:c9:ec:61:d4:5f:c7:
35:86:44:a0:d8:5b:3a:cc:b8:a7:3d:bb:79:67:03:
35:12:98:87:12:db:a2:67:c1:8e:19:57:7b:b9:94:
61:15:5e:ed:76:87:e1:0e:e8:78:85:aa:df:cd:ee:
55:5c:63:d4:fb:83:19:ee:54:24:7e:31:d4:98:59:
af:37:c7:e4:c1:42:3a:f8:0f:9f:c7:9e:61:95:34:
8e:a0:a8:65:10:78:94:b1:6b:26:cf:e9:f6:57:83:
4d:9f:06:c9:a0:65:f3:41:76:c0:77:4a:79:c8:0c:
16:82:ea:59:97:3c:b7:ef:a9:bf:5d:3b:af:88:38:
a2:73:64:59:0d:1f:6d:43:d8:2c:19:64:2f:30:46:
a2:8f:1c:99:97:d1:34:33:e0:95:67:60:b7:9e:fd:
06:c3:1b:88:5a:de:7e:85:29:fd:3f:3c:77:7f:29:
6e:d7:84:df:96:a2:66:68:50:81:a7:94:98:83:39:
32:91:34:ba:06:a5:98:0d:a2:29:56:b5:05:c0:59:
c9:9d:57:a2:43:5f:88:34:fa:25:55:d5:f4:57:8f:
40:9f:ae:53:63:eb:3a:1f:19:3e:58:32:ca:f6:ce:
d9:23:21:9a:bb:52:dc:0c:3a:a8:8f:85:8e:3f:77:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:44:3C:2F:49:83:EC:61:CC:37:B7:F8:49:E9:4F:18:21:EC:3C
X509v3 Authority Key Identifier:
keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:f2:02:16:e1:47:dd:ca:3a:20:43:7f:ab:e6:87:7a:dd:0e:
31:f9:78:aa:66:23:e4:76:f6:aa:8b:c5:9e:d2:9e:24:f1:9e:
9d:02:d9:08:59:bc:ea:7e:40:53:a9:fe:f6:d2:95:eb:27:e7:
c0:37:9d:74:b7:de:89:9e:d5:37:7d:eb:1f:68:f0:58:e6:b1:
eb:2d:e7:0c:75:f8:27:72:b4:9e:bd:64:1c:c4:4d:c8:57:d7:
58:a2:01:43:ac:a0:fd:55:2d:76:0c:73:ce:0c:0a:47:af:f9:
dd:b1:49:21:ea:0d:f6:16:fa:0d:9c:39:17:58:ac:53:8d:7e:
c1:65:9c:fe:fd:94:49:51:0d:fb:c2:2b:1d:70:09:aa:1f:c2:
ea:16:6c:23:1a:8a:02:3e:14:3e:c5:5a:4a:f7:54:8f:b3:1a:
8d:b9:61:15:42:58:31:ec:29:bf:d3:96:71:6a:a3:77:96:ae:
e0:58:b5:78:9d:9d:fc:a4:af:37:b8:f0:d6:ec:35:a0:e0:04:
2a:ae:36:40:0b:02:67:ca:af:d4:59:42:17:6f:c3:8f:a7:8c:
f1:e0:e3:15:17:82:05:5f:84:c9:d7:c9:53:4f:65:f9:0e:4a:
a6:10:fb:84:03:e0:c4:68:42:24:5a:ce:b9:56:6f:ab:7f:bd:
a1:2d:cc:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pmQEWcUtmFAf8KNR9QBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODYzMTRmODc2MzVlNzkzYmMyZTNkYmJlZDY2NDA1Yjhh
YzY3NzEwHhcNMjUwMTAxMDM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTVlNDQzYzJmNDk4M2VjNjFjYzM3YjdmODQ5ZTk0ZjE4MjFlYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ckOYaZkh+TJ7GHUX8c1hkSg2Fs6
zLinPbt5ZwM1EpiHEtuiZ8GOGVd7uZRhFV7tdofhDuh4harfze5VXGPU+4MZ7lQk
fjHUmFmvN8fkwUI6+A+fx55hlTSOoKhlEHiUsWsmz+n2V4NNnwbJoGXzQXbAd0p5
yAwWgupZlzy376m/XTuviDiic2RZDR9tQ9gsGWQvMEaijxyZl9E0M+CVZ2C3nv0G
wxuIWt5+hSn9Pzx3fylu14TflqJmaFCBp5SYgzkykTS6BqWYDaIpVrUFwFnJnVei
Q1+INPolVdX0V49An65TY+s6Hxk+WDLK9s7ZIyGau1LcDDqoj4WOP3ezfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLpeRDwvSYPsYcw3t/hJ6U8YIew8MB8GA1UdIwQY
MBaAFGCGMU+HY155O8Lj277WZAW4rGdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEt
MDI4MDU5OGYxOWUzLzEvdWw1RVBDOUpnLXhoekRlMy1FbnBUeGdoN0R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEtMDI4MDU5OGYxOWUz
LzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVPAMA0G
CSqGSIb3DQEBCwUAA4IBAQDO8gIW4UfdyjogQ3+r5od63Q4x+XiqZiPkdvaqi8We
0p4k8Z6dAtkIWbzqfkBTqf720pXrJ+fAN510t96JntU3fesfaPBY5rHrLecMdfgn
crSevWQcxE3IV9dYogFDrKD9VS12DHPODApHr/ndsUkh6g32FvoNnDkXWKxTjX7B
ZZz+/ZRJUQ37wisdcAmqH8LqFmwjGooCPhQ+xVpK91SPsxqNuWEVQlgx7Cm/05Zx
aqN3lq7gWLV4nZ38pK83uPDW7DWg4AQqrjZACwJnyq/UWUIXb8OPp4zx4OMVF4IF
X4TJ18lTT2X5DkqmEPuEA+DEaEIkWs65Vm+rf72hLczJ
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:33 2025 by rpki-client