Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa
File: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (raw, json)
Hash identifier: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=
Subject key identifier: 53:07:7D:63:73:67:08:C1:99:99:54:44:DF:83:FE:B5:5E:DC:E8:20
Certificate issuer: /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial: 019420D60A0D456825323C6680AEA346F095
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44951
IP address blocks: 195.230.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0a:0d:45:68:25:32:3c:66:80:ae:a3:46:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53077d63736708c199995444df83feb55edce820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:bf:69:c6:d6:c0:82:1e:5d:11:37:c9:6b:
41:88:8f:e3:ee:49:5d:17:b8:cd:fb:87:48:d6:54:
91:e6:d0:68:0b:1c:8d:bf:53:02:cc:a4:21:82:e0:
96:6f:4c:e0:8f:78:48:66:a8:cc:25:df:9e:b9:37:
0c:f5:f2:63:0c:35:36:a0:e1:ee:2c:cf:48:bc:b9:
51:e9:51:1e:11:7d:cd:3b:be:7b:ab:ff:d1:fd:62:
a5:1d:3d:ee:27:5b:b2:a5:c1:de:c0:57:e9:df:15:
86:20:5e:c1:da:3d:1f:26:46:a8:4c:ee:0c:13:73:
17:d8:40:80:70:e0:fd:1f:b9:02:f5:7e:99:bb:06:
a4:c8:32:1c:04:69:fc:f9:64:d3:16:27:66:7b:c9:
36:23:46:c4:b3:6f:fb:03:f4:45:fb:f3:b9:42:ec:
9c:13:a4:5c:f7:dc:c3:ba:5b:c2:92:7d:c6:1f:b7:
b5:d2:25:1a:ef:fc:49:9b:6c:76:2d:e9:0a:de:82:
72:ba:f9:b8:56:57:01:40:53:f5:8c:4b:2f:7e:5c:
95:73:cc:d3:05:17:6d:0d:3c:27:d0:9a:44:23:6c:
d3:11:53:6e:95:1a:06:7e:1b:fd:09:5f:b0:44:0d:
8e:83:6b:6d:39:d5:cc:6c:7c:3b:37:70:ae:e1:81:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:7D:63:73:67:08:C1:99:99:54:44:DF:83:FE:B5:5E:DC:E8:20
X509v3 Authority Key Identifier:
keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.114.0/24
Signature Algorithm: sha256WithRSAEncryption
03:93:51:d7:2c:02:61:1e:d8:b2:4a:47:68:d7:f0:52:cb:66:
67:c5:72:60:2a:6a:71:a5:b4:52:c6:9d:ae:5d:33:d4:09:62:
70:01:71:c6:02:02:79:92:9e:9e:eb:83:e1:4e:a6:c7:8f:28:
00:ef:04:18:9c:52:eb:76:17:50:c5:6b:29:cd:68:61:7b:08:
2d:06:c0:fd:0d:5c:85:74:3b:f5:ac:0c:1f:5e:b6:59:ab:ba:
38:33:06:22:8e:d2:87:7d:60:dd:9b:f2:c5:4d:7e:b7:ee:98:
2f:bb:99:d2:4a:7b:13:c5:79:e5:e6:6e:ea:6f:32:66:d3:f5:
5c:b9:40:da:39:cf:93:42:73:c7:b2:1a:12:4d:93:ef:a6:18:
9c:8b:c8:a5:db:c5:f3:92:c1:82:df:24:30:ee:dd:4a:fc:ec:
03:57:fc:88:d1:94:54:ca:91:b0:95:fa:4f:62:dc:04:f4:34:
ef:d6:e2:59:5e:39:88:75:3d:aa:e5:4a:49:05:f1:d8:f5:e8:
12:f8:d1:ec:49:7a:4b:d7:22:e7:ac:93:13:c3:03:ff:8e:92:
f8:d5:95:a0:4e:23:eb:50:96:ac:8a:03:b6:7c:e0:de:83:5e:
4d:2f:b0:cc:c0:ef:41:05:bb:52:97:2a:0a:7e:4b:75:7f:a9:
26:ce:8d:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1goNRWglMjxmgK6jRvCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWFmYTk2YzlkNTYzZTY1MGJhNTkyZmZiMDZlMmNlZWI2
YTA4NTkwHhcNMjUwMTAxMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzA3N2Q2MzczNjcwOGMxOTk5OTU0NDRkZjgzZmViNTVlZGNlODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHa/acbWwIIeXRE3yWtBiI/j7kld
F7jN+4dI1lSR5tBoCxyNv1MCzKQhguCWb0zgj3hIZqjMJd+euTcM9fJjDDU2oOHu
LM9IvLlR6VEeEX3NO757q//R/WKlHT3uJ1uypcHewFfp3xWGIF7B2j0fJkaoTO4M
E3MX2ECAcOD9H7kC9X6ZuwakyDIcBGn8+WTTFidme8k2I0bEs2/7A/RF+/O5Quyc
E6Rc99zDulvCkn3GH7e10iUa7/xJm2x2LekK3oJyuvm4VlcBQFP1jEsvflyVc8zT
BRdtDTwn0JpEI2zTEVNulRoGfhv9CV+wRA2Og2ttOdXMbHw7N3Cu4YGazQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMHfWNzZwjBmZlURN+D/rVe3OggMB8GA1UdIwQY
MBaAFJrq+pbJ1WPmULpZL/sG4s7raghZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWIt
MWYwMDczN2NiMmEyLzEvVXdkOVkzTm5DTUdabVZSRTM0UC10VjdjNkNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWItMWYwMDczN2NiMmEy
LzEvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZyMA0G
CSqGSIb3DQEBCwUAA4IBAQADk1HXLAJhHtiySkdo1/BSy2ZnxXJgKmpxpbRSxp2u
XTPUCWJwAXHGAgJ5kp6e64PhTqbHjygA7wQYnFLrdhdQxWspzWhhewgtBsD9DVyF
dDv1rAwfXrZZq7o4MwYijtKHfWDdm/LFTX637pgvu5nSSnsTxXnl5m7qbzJm0/Vc
uUDaOc+TQnPHshoSTZPvphici8il28XzksGC3yQw7t1K/OwDV/yI0ZRUypGwlfpP
YtwE9DTv1uJZXjmIdT2q5UpJBfHY9egS+NHsSXpL1yLnrJMTwwP/jpL41ZWgTiPr
UJasigO2fODeg15NL7DMwO9BBbtSlyoKfkt1f6kmzo0y
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:42:18 2025 by rpki-client