Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uOQZ5Q4z-Zd7oCtZyOGMUo3ODLk.roa
File: uOQZ5Q4z-Zd7oCtZyOGMUo3ODLk.roa (raw, json)
Hash identifier: vwxLxartNRZSfEoU821IGzLnYuaoXwh2pKJfCDlo8R4=
Subject key identifier: B8:E4:19:E5:0E:33:F9:97:7B:A0:2B:59:C8:E1:8C:52:8D:CE:0C:B9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483DD486ECFE5AEBD0337A7DD6C670
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uOQZ5Q4z-Zd7oCtZyOGMUo3ODLk.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52356
IP address blocks: 181.41.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3d:d4:86:ec:fe:5a:eb:d0:33:7a:7d:d6:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e419e50e33f9977ba02b59c8e18c528dce0cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:e5:af:d5:a4:c3:56:8b:8e:4a:80:5e:30:
16:1c:b7:f2:88:dc:51:df:20:b4:93:67:f0:44:5d:
76:a5:c9:8d:08:b7:2c:85:8e:36:e1:05:ae:5c:2d:
d4:65:20:82:78:56:c6:f3:b6:9f:32:0f:e6:ae:35:
38:8d:17:10:d6:79:c5:34:6d:81:4b:c6:b6:28:b3:
7d:4c:d4:19:40:90:b9:d8:54:3c:72:f4:40:df:b2:
5b:f3:0c:3c:76:87:d7:91:d4:0c:bb:f4:14:d6:54:
18:5d:1d:2e:61:ab:f0:19:cb:c0:3f:b7:45:4c:97:
f1:a4:e4:50:d3:29:2c:aa:ab:0e:60:0f:0c:84:b6:
a7:f8:4f:29:21:e8:3e:b2:3c:6d:90:fc:9b:41:eb:
f1:e2:1b:ed:67:dd:9a:7c:25:71:e1:90:bf:3c:99:
72:71:a9:ba:3e:7e:ab:a6:e5:23:be:a9:f7:d7:1e:
18:59:d4:af:29:92:6b:eb:5f:3c:2c:63:05:bd:21:
23:db:f2:bf:04:34:4b:e7:8e:b2:42:ea:03:8f:c1:
df:c6:40:ae:62:63:e9:6e:15:5b:ba:26:9d:2c:9e:
89:e1:94:8e:27:22:94:9a:c2:be:de:57:6c:ac:b2:
7c:43:9e:f6:86:f5:81:89:30:ea:1d:4e:42:a5:8e:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:19:E5:0E:33:F9:97:7B:A0:2B:59:C8:E1:8C:52:8D:CE:0C:B9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/uOQZ5Q4z-Zd7oCtZyOGMUo3ODLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.154.0/24
Signature Algorithm: sha256WithRSAEncryption
72:23:e9:46:c5:89:c1:48:f5:50:99:53:e1:bd:c5:8f:81:60:
75:58:d9:20:10:85:47:6e:86:6f:a4:df:98:cb:47:6e:1a:35:
b5:36:83:b7:04:6d:f3:d4:0e:f0:39:14:21:6b:b2:85:55:9a:
06:11:4a:25:90:64:fd:57:84:46:23:42:38:9b:e6:a8:ed:77:
58:f2:40:91:df:b6:fb:9f:e8:f0:58:b0:72:f4:ea:e2:64:c3:
79:f7:ce:f9:4a:72:8f:28:69:57:cf:92:0f:91:bc:d2:7a:bb:
03:67:c1:5b:79:6b:d1:ce:f8:8b:5e:a8:2b:a5:40:c2:68:5d:
b9:bc:29:bd:c6:9c:90:56:af:62:fe:60:1a:8c:a2:bf:e6:b5:
d7:cd:17:7c:30:14:ac:da:ce:de:af:91:9b:a5:49:bd:0b:59:
84:76:c7:4a:c9:a9:89:72:76:e0:51:1d:25:69:e2:73:46:1c:
d8:25:32:fe:cd:a6:17:f7:e0:7f:c2:3e:dd:81:c4:8b:d4:ac:
a4:15:1d:34:84:75:02:f2:c7:75:d3:10:6f:89:df:ff:56:2f:
5f:c9:e0:f4:f0:af:f1:5a:60:be:cf:19:e7:c1:25:dc:8b:42:
f2:22:0e:b2:11:cb:eb:f0:c5:fb:28:07:84:75:c1:50:48:be:
d5:b8:f4:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSD3Uhuz+WuvQM3p91sZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMTAyMTM1MDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGU0MTllNTBlMzNmOTk3N2JhMDJiNTljOGUxOGM1MjhkY2UwY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/lr9Wkw1aLjkqAXjAWHLfyiNxR
3yC0k2fwRF12pcmNCLcshY424QWuXC3UZSCCeFbG87afMg/mrjU4jRcQ1nnFNG2B
S8a2KLN9TNQZQJC52FQ8cvRA37Jb8ww8dofXkdQMu/QU1lQYXR0uYavwGcvAP7dF
TJfxpORQ0yksqqsOYA8MhLan+E8pIeg+sjxtkPybQevx4hvtZ92afCVx4ZC/PJly
cam6Pn6rpuUjvqn31x4YWdSvKZJr6188LGMFvSEj2/K/BDRL546yQuoDj8HfxkCu
YmPpbhVbuiadLJ6J4ZSOJyKUmsK+3ldsrLJ8Q572hvWBiTDqHU5CpY5PlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjkGeUOM/mXe6ArWcjhjFKNzgy5MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvdU9RWjVRNHotWmQ3b0N0WnlPR01VbzNPRExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtSmaMA0G
CSqGSIb3DQEBCwUAA4IBAQByI+lGxYnBSPVQmVPhvcWPgWB1WNkgEIVHboZvpN+Y
y0duGjW1NoO3BG3z1A7wORQha7KFVZoGEUolkGT9V4RGI0I4m+ao7XdY8kCR37b7
n+jwWLBy9OriZMN59875SnKPKGlXz5IPkbzSersDZ8FbeWvRzviLXqgrpUDCaF25
vCm9xpyQVq9i/mAajKK/5rXXzRd8MBSs2s7er5GbpUm9C1mEdsdKyamJcnbgUR0l
aeJzRhzYJTL+zaYX9+B/wj7dgcSL1KykFR00hHUC8sd10xBvid//Vi9fyeD08K/x
WmC+zxnnwSXci0LyIg6yEcvr8MX7KAeEdcFQSL7VuPSa
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:51 2025 by rpki-client