Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ucoK4xN7rMOERSxFdk3TwiIisEs.roa
File: ucoK4xN7rMOERSxFdk3TwiIisEs.roa (raw, json)
Hash identifier: CfaJX9RK6qo1VTDB1wWrxdPl4NHPqhr+GtO1+ZZQ+gQ=
Subject key identifier: B9:CA:0A:E3:13:7B:AC:C3:84:45:2C:45:76:4D:D3:C2:22:22:B0:4B
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59BDFF98BF25F2B81114713086669
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ucoK4xN7rMOERSxFdk3TwiIisEs.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2286
IP address blocks: 193.251.192.0/22 maxlen: 24
193.251.196.0/23 maxlen: 24
193.251.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9b:df:f9:8b:f2:5f:2b:81:11:47:13:08:66:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9ca0ae3137bacc384452c45764dd3c22222b04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:dc:b4:7b:0e:c4:02:3e:6b:3f:64:5a:c4:
15:2b:98:19:94:4c:7c:07:11:fc:d3:74:ee:f9:c9:
fc:12:4e:1e:90:09:0d:a8:1f:10:e7:9e:af:24:51:
8e:63:a1:44:1e:a1:1e:06:a8:20:2c:54:78:46:f2:
a2:c4:ff:0e:8a:66:9b:d7:3d:9e:a7:71:2b:36:a2:
dc:23:0b:78:a7:5f:d6:a4:81:a3:52:d1:25:cc:51:
58:7c:73:55:38:ac:63:3d:e9:4f:54:91:d8:df:5a:
5c:40:95:4a:b0:4d:08:66:47:e2:24:56:51:28:a4:
c5:1e:29:2b:d6:78:fc:a5:57:0e:55:f9:4d:43:80:
e1:45:ca:0f:29:ba:c2:c3:a1:51:f8:44:f6:bd:61:
57:d8:0d:3a:2c:c2:59:a7:21:3f:37:35:d0:bc:ad:
0c:eb:70:3d:a1:09:e2:99:7b:a6:08:dc:08:0a:2e:
04:79:84:8e:64:1e:8c:83:63:ca:41:6c:a3:2c:0a:
4b:8a:6c:f0:d9:21:30:01:a8:ec:4d:a9:0e:de:0c:
cc:38:5b:c1:4a:91:63:6a:54:28:fc:33:90:f4:cf:
65:76:71:a3:44:e2:42:f9:3a:00:30:b0:0d:a1:d7:
03:b3:2c:1e:77:13:a7:2a:b7:88:ad:48:11:91:ff:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:0A:E3:13:7B:AC:C3:84:45:2C:45:76:4D:D3:C2:22:22:B0:4B
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ucoK4xN7rMOERSxFdk3TwiIisEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.192.0-193.251.197.255
193.251.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:34:8f:a9:8a:36:bc:79:f2:bd:17:b6:30:bf:a4:4c:f6:ef:
d7:39:8f:db:aa:85:81:5d:da:c9:fa:e5:83:4e:22:d7:ad:a0:
c4:3c:19:fc:1d:db:d5:5f:14:69:ca:30:40:0f:a8:75:ec:03:
60:71:56:97:07:04:f3:d5:d6:d8:34:5f:5b:b9:5d:85:f5:c8:
e1:4a:77:63:bd:eb:e8:1d:36:8b:e6:94:bd:82:f4:82:23:a8:
a4:50:73:06:90:1c:27:4a:bb:5e:19:cf:14:ba:aa:ea:3c:ca:
3c:81:4b:2a:92:b7:ab:1c:50:12:d8:18:9b:a9:05:79:7f:57:
7d:20:e9:51:2a:0d:0a:64:4b:a1:fd:d5:d3:af:2b:d5:42:cf:
93:19:31:83:5f:b6:93:86:90:ca:f5:06:7a:8c:5e:36:22:54:
4a:eb:6b:bc:91:51:ac:46:36:d7:ac:d4:7b:c9:e1:93:d1:70:
ba:74:08:ed:b1:a7:9e:ac:52:d0:e0:91:13:b9:61:34:9a:aa:
c9:31:4e:e1:a5:46:41:46:fe:20:de:d4:07:b9:07:35:80:29:
78:36:c7:b7:e7:d0:c5:da:30:08:4c:a1:70:af:ea:eb:e1:b5:
f1:97:1b:a2:ff:2e:bf:8f:bd:7f:64:06:f8:54:cc:87:d5:3d:
2d:43:02:f2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQg1Zvf+YvyXyuBEUcTCGZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWNhMGFlMzEzN2JhY2MzODQ0NTJjNDU3NjRkZDNjMjIyMjJiMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QrctHsOxAI+az9kWsQVK5gZlEx8
BxH803Tu+cn8Ek4ekAkNqB8Q556vJFGOY6FEHqEeBqggLFR4RvKixP8Oimab1z2e
p3ErNqLcIwt4p1/WpIGjUtElzFFYfHNVOKxjPelPVJHY31pcQJVKsE0IZkfiJFZR
KKTFHikr1nj8pVcOVflNQ4DhRcoPKbrCw6FR+ET2vWFX2A06LMJZpyE/NzXQvK0M
63A9oQnimXumCNwICi4EeYSOZB6Mg2PKQWyjLApLimzw2SEwAajsTakO3gzMOFvB
SpFjalQo/DOQ9M9ldnGjROJC+ToAMLANodcDsywedxOnKreIrUgRkf9yiQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLnKCuMTe6zDhEUsRXZN08IiIrBLMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvdWNvSzR4TjdyTU9FUlN4RmRrM1R3aUlpc0VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAbB+8AD
BAHB+8QDBALB++AwDQYJKoZIhvcNAQELBQADggEBAJs0j6mKNrx58r0XtjC/pEz2
79c5j9uqhYFd2sn65YNOItetoMQ8Gfwd29VfFGnKMEAPqHXsA2BxVpcHBPPV1tg0
X1u5XYX1yOFKd2O96+gdNovmlL2C9IIjqKRQcwaQHCdKu14ZzxS6quo8yjyBSyqS
t6scUBLYGJupBXl/V30g6VEqDQpkS6H91dOvK9VCz5MZMYNftpOGkMr1BnqMXjYi
VErra7yRUaxGNtes1HvJ4ZPRcLp0CO2xp56sUtDgkRO5YTSaqskxTuGlRkFG/iDe
1Ae5BzWAKXg2x7fn0MXaMAhMoXCv6uvhtfGXG6L/Lr+PvX9kBvhUzIfVPS1DAvI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:41:59 2025 by rpki-client