Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bUFO_Y7pTQAWN_dJIh4wB3HEPqU.roa
File: bUFO_Y7pTQAWN_dJIh4wB3HEPqU.roa (raw, json)
Hash identifier: Vk8LJ/vsvQXElbiSMIdb+HtPTPBAS2fkaghvvd07T5I=
Subject key identifier: 6D:41:4E:FD:8E:E9:4D:00:16:37:F7:49:22:1E:30:07:71:C4:3E:A5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900F0ECA4A5CD7084C0524EB0D62F2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bUFO_Y7pTQAWN_dJIh4wB3HEPqU.roa
Signing time: Thu 02 Jan 2025 05:49:45 +0000
ROA not before: Thu 02 Jan 2025 05:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212913
IP address blocks: 31.148.99.0/24 maxlen: 24
93.170.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:0f:0e:ca:4a:5c:d7:08:4c:05:24:eb:0d:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d414efd8ee94d001637f749221e300771c43ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:a9:ff:4c:4c:e7:ee:4d:65:eb:24:46:0b:
56:f9:79:c4:43:9d:f4:bc:72:08:17:1e:20:1b:0a:
3e:96:38:db:3f:f7:1e:04:3b:35:9b:f8:9d:ab:1d:
de:14:c5:20:ca:04:b7:1d:25:e8:11:b1:98:86:40:
35:4e:ea:86:6b:c4:47:02:4c:da:5d:f8:c5:cb:eb:
77:06:a3:33:a1:d4:0e:50:85:c3:85:46:b1:8e:b2:
bb:41:4a:47:b7:c1:eb:0c:8f:86:e0:03:14:1b:d4:
79:01:1b:43:6c:bc:a4:95:6c:bf:00:b8:23:54:88:
ab:6e:16:bb:1a:67:a9:44:ed:2c:3c:e1:5e:48:25:
75:78:9f:6e:cf:e0:61:ed:53:4d:2b:e0:86:1c:ea:
fd:7c:3a:a3:9a:d5:f0:2b:02:39:a1:03:07:70:be:
be:97:32:82:2a:8d:47:88:e1:ef:bd:9f:24:1f:a2:
ad:16:75:2a:16:8c:d3:93:b9:50:76:41:5f:1d:12:
9e:aa:ff:b2:48:fc:1a:15:2f:df:98:61:1e:a8:07:
71:f6:29:9b:ff:94:e5:27:0e:b2:36:d4:4d:d2:70:
36:81:01:26:67:4b:62:40:e1:62:dd:32:f8:57:3f:
e0:04:7d:55:c8:5b:d1:9a:dd:c7:26:93:a0:72:eb:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:41:4E:FD:8E:E9:4D:00:16:37:F7:49:22:1E:30:07:71:C4:3E:A5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bUFO_Y7pTQAWN_dJIh4wB3HEPqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.99.0/24
93.170.123.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fa:4e:2e:90:3a:42:37:8e:39:f9:4f:ad:82:51:c9:6c:8e:
f2:03:8e:44:e5:00:a0:53:b4:b3:13:01:67:c5:ad:6c:5f:d5:
17:38:89:42:64:e4:e5:18:ff:67:45:b5:c5:0f:8e:ef:cc:8a:
72:33:22:1b:b3:4e:9b:93:93:8a:98:e3:71:70:16:59:60:df:
22:86:20:76:c0:79:f4:d4:ac:99:40:4a:fe:d8:18:c1:d2:ce:
d4:90:0e:fc:9f:30:57:82:8b:a4:b8:36:74:ec:01:53:34:c5:
56:8c:3e:d8:d0:c6:62:ad:18:42:45:75:66:9c:94:d0:75:07:
bf:76:c0:ed:14:19:35:2a:5a:a0:c5:1a:78:da:d3:10:dd:67:
11:b4:b5:5f:0f:48:a9:e3:e3:31:15:be:ec:d7:5c:49:65:fb:
c5:c0:b3:51:71:64:81:98:f1:0c:0f:a3:a5:4d:d0:ac:a4:aa:
a3:14:bb:3c:c0:11:89:eb:e7:ef:88:62:02:af:b9:9f:e8:55:
25:e4:ec:db:41:15:14:66:e3:10:0c:fc:9e:3f:d7:c0:18:09:
64:99:b9:47:d9:d6:a1:29:f9:59:7a:16:be:0e:0a:82:f8:1c:
cb:91:3b:bd:72:e4:84:66:15:69:41:fd:06:96:d4:4c:6d:6a:
f3:19:f4:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlkA8Oykpc1whMBSTrDWLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDQxNGVmZDhlZTk0ZDAwMTYzN2Y3NDkyMjFlMzAwNzcxYzQzZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov6p/0xM5+5NZeskRgtW+XnEQ530
vHIIFx4gGwo+ljjbP/ceBDs1m/idqx3eFMUgygS3HSXoEbGYhkA1TuqGa8RHAkza
XfjFy+t3BqMzodQOUIXDhUaxjrK7QUpHt8HrDI+G4AMUG9R5ARtDbLyklWy/ALgj
VIirbha7GmepRO0sPOFeSCV1eJ9uz+Bh7VNNK+CGHOr9fDqjmtXwKwI5oQMHcL6+
lzKCKo1HiOHvvZ8kH6KtFnUqFozTk7lQdkFfHRKeqv+ySPwaFS/fmGEeqAdx9imb
/5TlJw6yNtRN0nA2gQEmZ0tiQOFi3TL4Vz/gBH1VyFvRmt3HJpOgcuu66QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG1BTv2O6U0AFjf3SSIeMAdxxD6lMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYlVGT19ZN3BUUUFXTl9kSkloNHdCM0hFUHFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5RjAwQA
Xap7MA0GCSqGSIb3DQEBCwUAA4IBAQBy+k4ukDpCN445+U+tglHJbI7yA45E5QCg
U7SzEwFnxa1sX9UXOIlCZOTlGP9nRbXFD47vzIpyMyIbs06bk5OKmONxcBZZYN8i
hiB2wHn01KyZQEr+2BjB0s7UkA78nzBXgoukuDZ07AFTNMVWjD7Y0MZirRhCRXVm
nJTQdQe/dsDtFBk1KlqgxRp42tMQ3WcRtLVfD0ip4+MxFb7s11xJZfvFwLNRcWSB
mPEMD6OlTdCspKqjFLs8wBGJ6+fviGICr7mf6FUl5OzbQRUUZuMQDPyeP9fAGAlk
mblH2dahKflZeha+DgqC+BzLkTu9cuSEZhVpQf0GltRMbWrzGfSd
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:48 2025 by rpki-client