Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/uVzJFhjfsBrB6ppKc8jZ-1avwNs.roa
File: uVzJFhjfsBrB6ppKc8jZ-1avwNs.roa (raw, json)
Hash identifier: tkV3iPfVj/XnazAftmG0B1EhzfvKJs10OjYqXp8WuSc=
Subject key identifier: B9:5C:C9:16:18:DF:B0:1A:C1:EA:9A:4A:73:C8:D9:FB:56:AF:C0:DB
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0185E84EC1ED1BF1890FB2C2FD6AB8A753F9
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/uVzJFhjfsBrB6ppKc8jZ-1avwNs.roa
Signing time: Wed 25 Jan 2023 09:42:33 +0000
ROA not before: Wed 25 Jan 2023 09:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56899
IP address blocks: 185.126.255.0/24 maxlen: 24
194.4.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:4e:c1:ed:1b:f1:89:0f:b2:c2:fd:6a:b8:a7:53:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 25 09:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b95cc91618dfb01ac1ea9a4a73c8d9fb56afc0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:5c:d2:7d:de:8c:8b:98:9b:2c:7c:07:ed:
4a:d0:90:a9:6c:f9:6f:a0:73:0b:43:9a:ff:94:ca:
06:6c:eb:f1:da:2b:2c:ff:a6:98:b6:50:d6:27:20:
13:4c:36:c5:e0:28:3b:b3:d1:ef:bd:d1:f3:4b:af:
48:80:4c:86:63:0e:fc:49:a8:64:7a:7f:1a:c6:76:
02:02:f1:95:9d:42:12:75:3b:30:ea:88:5a:58:e3:
75:32:31:5e:02:4d:3f:15:e9:62:3e:26:66:77:2f:
56:d6:0e:96:31:de:96:8d:ce:68:54:22:5d:7b:5d:
36:c7:20:62:81:f5:5b:9c:af:a5:ff:b2:47:b5:fd:
c6:e1:dc:a1:59:86:a5:55:13:1a:07:d8:38:60:a4:
cf:ef:63:4b:cc:9c:82:67:3b:05:17:b3:32:b4:ca:
b1:d8:48:e6:f0:9e:49:88:af:36:4f:29:db:cc:d7:
6e:e9:b9:d3:ca:27:c3:cf:3e:dd:06:bf:dd:ec:a5:
ae:f8:13:c6:5b:b5:13:25:d4:4a:68:e6:38:39:e5:
64:ca:ac:6c:7f:c5:24:11:e3:7b:36:12:5d:1a:62:
ff:6d:f3:4e:6d:41:b3:d8:22:2b:42:18:2b:b3:56:
e8:8d:02:8a:e2:fb:66:b6:e2:22:09:3e:65:17:10:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:C9:16:18:DF:B0:1A:C1:EA:9A:4A:73:C8:D9:FB:56:AF:C0:DB
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/uVzJFhjfsBrB6ppKc8jZ-1avwNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
194.4.70.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:d1:7f:4a:fe:b8:8b:6f:7f:76:6f:54:22:8e:1c:a7:d2:42:
7e:99:28:32:19:96:6f:0b:e3:e3:29:dc:8a:b4:e7:62:37:c8:
8b:71:fb:69:45:8e:03:c2:bd:dd:67:37:ce:b0:bb:fa:8e:76:
06:20:73:68:70:c0:dc:28:16:6c:e1:0f:ea:9a:e0:09:e7:14:
5e:7b:2d:da:4d:7d:74:a8:4f:44:be:ae:e2:2f:91:d8:eb:71:
48:27:f1:92:f8:1b:ac:44:1b:7e:a4:f8:10:02:ac:5e:f8:1b:
ae:5e:28:61:ab:51:53:69:13:bf:fd:e8:3f:84:21:90:7b:a4:
31:5f:27:22:5c:fe:2e:56:d5:bb:a9:7a:ca:13:9c:1e:ca:b0:
0f:bf:76:89:21:6b:19:d3:89:47:12:18:e0:bb:21:9c:dc:ad:
42:4e:a1:b0:9a:02:25:b7:a5:e1:8c:52:3e:f2:cc:76:eb:87:
e0:aa:10:ee:17:bc:82:78:bf:3b:9b:e6:6c:4b:1f:55:e9:1f:
5b:3f:e7:26:10:9a:07:33:57:2b:b4:b5:b8:d2:87:5e:75:80:
30:c7:e0:d7:48:c3:f7:bf:89:72:29:d5:08:ed:e5:8a:85:71:
11:cd:e8:f9:88:11:55:9d:52:54:6e:7b:e4:77:06:28:4b:2e:
7d:7f:06:8b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXoTsHtG/GJD7LC/Wq4p1P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjMwMTI1MDk0MjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTVjYzkxNjE4ZGZiMDFhYzFlYTlhNGE3M2M4ZDlmYjU2YWZjMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ1c0n3ejIuYmyx8B+1K0JCpbPlv
oHMLQ5r/lMoGbOvx2iss/6aYtlDWJyATTDbF4Cg7s9HvvdHzS69IgEyGYw78Sahk
en8axnYCAvGVnUISdTsw6ohaWON1MjFeAk0/FeliPiZmdy9W1g6WMd6Wjc5oVCJd
e102xyBigfVbnK+l/7JHtf3G4dyhWYalVRMaB9g4YKTP72NLzJyCZzsFF7MytMqx
2Ejm8J5JiK82TynbzNdu6bnTyifDzz7dBr/d7KWu+BPGW7UTJdRKaOY4OeVkyqxs
f8UkEeN7NhJdGmL/bfNObUGz2CIrQhgrs1bojQKK4vtmtuIiCT5lFxDx5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLlcyRYY37AaweqaSnPI2ftWr8DbMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvdVZ6SkZoamZzQnJCNnBwS2M4alotMWF2d05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuX7/AwQB
wgRGMA0GCSqGSIb3DQEBCwUAA4IBAQDF0X9K/riLb392b1Qijhyn0kJ+mSgyGZZv
C+PjKdyKtOdiN8iLcftpRY4Dwr3dZzfOsLv6jnYGIHNocMDcKBZs4Q/qmuAJ5xRe
ey3aTX10qE9Evq7iL5HY63FIJ/GS+BusRBt+pPgQAqxe+BuuXihhq1FTaRO//eg/
hCGQe6QxXyciXP4uVtW7qXrKE5weyrAPv3aJIWsZ04lHEhjguyGc3K1CTqGwmgIl
t6XhjFI+8sx264fgqhDuF7yCeL87m+ZsSx9V6R9bP+cmEJoHM1crtLW40odedYAw
x+DXSMP3v4lyKdUI7eWKhXERzej5iBFVnVJUbnvkdwYoSy59fwaL
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:42 2025 by rpki-client