Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UfuWu8BIsS3Dk9jVu6yptXvDfWU.roa
File: UfuWu8BIsS3Dk9jVu6yptXvDfWU.roa (raw, json)
Hash identifier: Cc/N6o5hspmrJFrzzEiw9J/C3xiDn6wAcoe57jwY/+8=
Subject key identifier: 51:FB:96:BB:C0:48:B1:2D:C3:93:D8:D5:BB:AC:A9:B5:7B:C3:7D:65
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A64A5AFDD6A03A956574AF2A1FD7B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UfuWu8BIsS3Dk9jVu6yptXvDfWU.roa
Signing time: Wed 01 Jan 2025 19:49:22 +0000
ROA not before: Wed 01 Jan 2025 19:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202189
IP address blocks: 145.15.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:64:a5:af:dd:6a:03:a9:56:57:4a:f2:a1:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51fb96bbc048b12dc393d8d5bbaca9b57bc37d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:80:1b:d9:3e:60:4f:d1:d0:78:49:7b:f0:
4d:24:f3:55:17:a2:da:b7:cf:78:95:2b:12:90:17:
98:52:93:bc:1e:0a:4f:fd:52:0d:fc:df:f4:be:9f:
e1:1b:c8:ee:f9:d3:8b:8e:39:06:f8:b6:76:0d:5e:
ca:2d:ef:43:89:d6:22:6d:a6:a3:09:0c:93:97:54:
f5:ce:4b:ea:a7:7f:64:f8:9b:d4:e2:4c:61:9d:72:
b7:0c:b4:fd:8e:40:a6:10:64:66:eb:8a:8c:e7:59:
6c:af:b5:80:7e:d4:98:bd:69:31:27:9d:7a:90:b1:
2f:bd:a7:fd:d2:d8:22:6c:da:51:c7:60:5f:26:48:
42:b7:19:f4:36:aa:55:e6:46:5c:57:67:af:ef:25:
ce:38:2b:d8:18:eb:f2:7b:8a:46:9b:c8:c5:67:74:
76:2d:a5:46:75:61:33:21:97:da:d4:f9:33:8b:b2:
28:5b:d9:92:f1:01:3a:7c:5b:02:f4:61:46:51:a9:
32:51:f4:ff:5a:1d:c1:a8:ac:be:0b:7a:52:26:b0:
8b:25:00:b2:3a:11:a3:13:61:cc:69:18:2e:7a:c1:
ea:93:88:aa:80:44:8a:53:bc:e2:d7:e1:9c:01:97:
84:d4:c0:70:05:e5:f7:d4:a6:dd:1b:89:81:24:2f:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:96:BB:C0:48:B1:2D:C3:93:D8:D5:BB:AC:A9:B5:7B:C3:7D:65
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UfuWu8BIsS3Dk9jVu6yptXvDfWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.15.244.0/22
Signature Algorithm: sha256WithRSAEncryption
69:23:8f:0e:e8:b7:2f:9e:78:bb:35:86:9c:04:22:b3:3e:3c:
8d:ea:6e:01:93:e8:f3:83:e4:c4:68:79:ae:86:9b:a7:7b:99:
c4:f0:10:1e:2c:00:03:48:3d:b2:ae:cc:1f:b4:f4:00:7b:28:
c7:38:9a:c9:5d:87:41:13:ed:17:3a:e5:62:62:83:73:fa:46:
2c:1c:b7:df:dd:c8:a4:4d:fb:cc:0a:03:21:f2:b4:4e:46:63:
81:84:9a:74:c9:62:4f:2e:8b:6b:d3:03:61:4e:9d:4e:15:a0:
1f:3a:07:82:59:64:cc:fa:ef:6d:40:29:9f:cb:ed:53:e6:17:
a5:3e:c4:32:92:94:ce:3f:a5:f7:7b:54:09:a7:34:d8:d3:15:
1c:38:8b:01:2a:74:79:e3:27:9e:fa:e2:44:f8:c6:01:d9:5d:
a6:8e:39:69:c6:1e:53:88:6b:82:31:cd:c1:4e:b3:86:f1:7a:
28:08:6f:dc:a6:b5:05:a3:c2:ae:08:d5:24:16:1f:9a:34:2d:
f2:c7:8f:39:ac:10:1c:a5:95:ab:88:21:17:d7:46:ad:0a:d2:
f5:73:93:b8:6b:4c:8f:a3:d3:cd:58:de:79:20:ce:fb:aa:9a:
ad:0d:34:3f:9d:c7:8d:e5:72:5f:c1:b2:f9:d4:93:db:0f:15:
92:50:b7:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjamSlr91qA6lWV0ryof17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjUwMTAxMTk0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWZiOTZiYmMwNDhiMTJkYzM5M2Q4ZDViYmFjYTliNTdiYzM3ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ+AG9k+YE/R0HhJe/BNJPNVF6La
t894lSsSkBeYUpO8HgpP/VIN/N/0vp/hG8ju+dOLjjkG+LZ2DV7KLe9DidYibaaj
CQyTl1T1zkvqp39k+JvU4kxhnXK3DLT9jkCmEGRm64qM51lsr7WAftSYvWkxJ516
kLEvvaf90tgibNpRx2BfJkhCtxn0NqpV5kZcV2ev7yXOOCvYGOvye4pGm8jFZ3R2
LaVGdWEzIZfa1Pkzi7IoW9mS8QE6fFsC9GFGUakyUfT/Wh3BqKy+C3pSJrCLJQCy
OhGjE2HMaRguesHqk4iqgESKU7zi1+GcAZeE1MBwBeX31KbdG4mBJC8QqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFH7lrvASLEtw5PY1busqbV7w31lMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvVWZ1V3U4QklzUzNEazlqVnU2eXB0WHZEZldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkQ/0MA0G
CSqGSIb3DQEBCwUAA4IBAQBpI48O6Lcvnni7NYacBCKzPjyN6m4Bk+jzg+TEaHmu
hpune5nE8BAeLAADSD2yrswftPQAeyjHOJrJXYdBE+0XOuViYoNz+kYsHLff3cik
TfvMCgMh8rRORmOBhJp0yWJPLotr0wNhTp1OFaAfOgeCWWTM+u9tQCmfy+1T5hel
PsQykpTOP6X3e1QJpzTY0xUcOIsBKnR54yee+uJE+MYB2V2mjjlpxh5TiGuCMc3B
TrOG8XooCG/cprUFo8KuCNUkFh+aNC3yx485rBAcpZWriCEX10atCtL1c5O4a0yP
o9PNWN55IM77qpqtDTQ/nceN5XJfwbL51JPbDxWSULf3
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:10:24 2025 by rpki-client