Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/UwhWhUq_PNykkAMCYu_0NSoEqJM.roa
File: UwhWhUq_PNykkAMCYu_0NSoEqJM.roa (raw, json)
Hash identifier: 2/iZqg+Dgj86hbg8Wk7DLt2egQ4e/faCRTl9OVCkBoA=
Subject key identifier: 53:08:56:85:4A:BF:3C:DC:A4:90:03:02:62:EF:F4:35:2A:04:A8:93
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 0185724C6A9D7ACE39FADE50B628B440EDC5
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/UwhWhUq_PNykkAMCYu_0NSoEqJM.roa
Signing time: Mon 02 Jan 2023 11:44:48 +0000
ROA not before: Mon 02 Jan 2023 11:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48737
IP address blocks: 5.181.17.0/24 maxlen: 24
5.181.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:6a:9d:7a:ce:39:fa:de:50:b6:28:b4:40:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: Jan 2 11:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=530856854abf3cdca490030262eff4352a04a893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:60:db:b7:9a:66:5d:00:98:14:e7:1a:af:
17:a3:4e:72:9d:0e:c0:5a:21:3d:1c:2c:a3:ad:0b:
cb:30:ae:81:6f:b9:b2:01:cc:c7:1b:e5:fa:e7:2b:
56:54:cf:5a:d8:92:47:58:80:64:a6:3a:68:5b:79:
53:5a:99:7b:d7:51:7d:e9:2d:dd:4c:2b:db:13:30:
73:f2:31:06:9d:84:0e:3b:92:27:f2:43:ef:37:ff:
e5:6e:3a:9b:5d:68:00:3d:2a:b0:06:a3:8f:19:5a:
35:d1:60:91:f1:8a:96:39:c2:4e:7a:11:1e:a9:26:
bc:f9:10:03:a8:13:ac:67:f3:02:dd:da:23:44:62:
7d:95:c7:f5:2f:a7:27:54:9b:5a:ba:f3:bb:1d:30:
82:b8:4d:ae:94:3f:f3:2c:3d:11:f2:4c:f9:bd:9c:
32:eb:d5:ca:95:0b:08:4f:03:ab:16:07:74:b3:83:
57:b5:17:a2:40:d2:59:28:6f:17:5a:c2:21:21:b2:
60:63:68:7e:48:24:c7:42:4f:0e:4f:46:ec:6d:1f:
df:95:21:b8:34:f3:76:31:00:48:8d:03:bc:38:2e:
83:d1:02:18:2a:0e:a2:18:37:de:b0:a9:b0:0e:8e:
d3:c3:20:a7:57:76:20:7d:5b:4d:f2:72:01:59:09:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:56:85:4A:BF:3C:DC:A4:90:03:02:62:EF:F4:35:2A:04:A8:93
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/UwhWhUq_PNykkAMCYu_0NSoEqJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.17.0-5.181.18.255
Signature Algorithm: sha256WithRSAEncryption
3d:e4:8b:b3:dd:45:fa:91:85:9d:27:75:d2:27:11:f7:24:8d:
13:4c:ea:d2:45:fb:48:2f:b2:bc:2e:1d:d7:85:32:26:7f:77:
5c:06:29:fc:15:ac:20:3f:74:cf:b1:26:8b:a0:ac:58:c1:0f:
02:94:81:00:df:30:b2:e7:08:ef:cd:07:2c:8e:f5:12:b7:5b:
fb:9d:a6:c4:f8:5b:e6:4a:fa:2a:5f:8b:22:ae:8e:99:b9:91:
5a:ed:c6:d5:d7:31:f7:09:ed:1e:76:cf:5f:82:2d:6c:ab:5e:
a7:80:f4:b6:76:ba:51:55:26:04:4e:0c:b7:dd:c0:19:de:37:
03:90:cb:3b:5d:52:2b:ec:51:15:fa:25:fd:34:9d:11:87:ec:
dd:e5:95:e0:7f:1e:65:ed:ba:30:96:11:11:cf:14:80:f5:f2:
29:95:b5:3d:55:89:71:b5:ed:44:14:a2:61:f9:d6:4f:7a:d0:
cc:8c:4c:32:d1:e8:59:72:d5:5e:42:a3:9b:e3:6b:4a:f9:35:
72:b8:34:8a:b3:24:c1:72:29:6e:86:d1:4d:01:b3:56:68:c2:
1d:c7:c6:f2:14:6a:d3:11:eb:1a:91:71:7b:33:6c:35:d0:ef:
a4:d3:e2:43:07:f8:5c:a7:54:48:6c:10:2b:b8:02:a1:6f:05:
e5:5e:95:ee
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVyTGqdes45+t5Qtii0QO3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWYxN2MwMDc1N2I5ODYwZmY2YTU2ZmZlMmY0N2U2OTA5
NGUyZjYwHhcNMjMwMTAyMTE0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzA4NTY4NTRhYmYzY2RjYTQ5MDAzMDI2MmVmZjQzNTJhMDRhODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP1g27eaZl0AmBTnGq8Xo05ynQ7A
WiE9HCyjrQvLMK6Bb7myAczHG+X65ytWVM9a2JJHWIBkpjpoW3lTWpl711F96S3d
TCvbEzBz8jEGnYQOO5In8kPvN//lbjqbXWgAPSqwBqOPGVo10WCR8YqWOcJOehEe
qSa8+RADqBOsZ/MC3dojRGJ9lcf1L6cnVJtauvO7HTCCuE2ulD/zLD0R8kz5vZwy
69XKlQsITwOrFgd0s4NXtReiQNJZKG8XWsIhIbJgY2h+SCTHQk8OT0bsbR/flSG4
NPN2MQBIjQO8OC6D0QIYKg6iGDfesKmwDo7TwyCnV3YgfVtN8nIBWQlbOQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFMIVoVKvzzcpJADAmLv9DUqBKiTMB8GA1UdIwQY
MBaAFCivF8AHV7mGD/alb/4vR+aQlOL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0s4WHdBZFh1WVlQOXFWdl9pOUg1cENVNHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kZWE0NmEtYjU4YS00NjA5LTlkZjgt
MGUwMzdmM2Q1ODA1LzEvVXdoV2hVcV9QTnlra0FNQ1l1XzBOU29FcUpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kZWE0NmEtYjU4YS00NjA5LTlkZjgtMGUwMzdmM2Q1ODA1
LzEvS0s4WHdBZFh1WVlQOXFWdl9pOUg1cENVNHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAFtRED
BAAFtRIwDQYJKoZIhvcNAQELBQADggEBAD3ki7PdRfqRhZ0nddInEfckjRNM6tJF
+0gvsrwuHdeFMiZ/d1wGKfwVrCA/dM+xJougrFjBDwKUgQDfMLLnCO/NByyO9RK3
W/udpsT4W+ZK+ipfiyKujpm5kVrtxtXXMfcJ7R52z1+CLWyrXqeA9LZ2ulFVJgRO
DLfdwBneNwOQyztdUivsURX6Jf00nRGH7N3lleB/HmXtujCWERHPFID18imVtT1V
iXG17UQUomH51k960MyMTDLR6Fly1V5Co5vja0r5NXK4NIqzJMFyKW6G0U0Bs1Zo
wh3HxvIUatMR6xqRcXszbDXQ76TT4kMH+FynVEhsECu4AqFvBeVele4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:47 2025 by rpki-client