Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/uYQNZGrXH6jilfHVW7M6-uKjZF8.roa
File: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (raw, json)
Hash identifier: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=
Subject key identifier: B9:84:0D:64:6A:D7:1F:A8:E2:95:F1:D5:5B:B3:3A:FA:E2:A3:64:5F
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 019425214553D1E8326128FEAA44D5AAEF02
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/uYQNZGrXH6jilfHVW7M6-uKjZF8.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207326
IP address blocks: 93.177.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:45:53:d1:e8:32:61:28:fe:aa:44:d5:aa:ef:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9840d646ad71fa8e295f1d55bb33afae2a3645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:cb:3b:59:c0:2f:ae:a2:ad:79:1b:97:4a:
3b:f7:68:0c:30:b9:7c:d6:40:1c:71:49:35:c8:09:
4c:10:49:33:9e:19:bc:ab:40:e7:ab:58:f3:24:c9:
47:69:e6:3e:83:f9:b9:38:68:72:3a:bc:d7:bb:d3:
2e:96:56:d9:c3:eb:64:9d:7c:90:8e:8d:43:5b:2b:
eb:6f:81:92:47:3e:49:52:47:77:42:6b:a6:a3:fd:
ee:51:fa:ed:37:8b:f3:c2:47:1a:74:f6:6e:94:63:
29:e7:59:70:73:f9:03:8e:9a:30:f3:fa:dc:4f:15:
5e:57:c4:49:14:d8:26:44:01:e8:a0:be:73:1d:5b:
42:59:7a:16:1f:ce:22:f2:1b:d4:13:2d:8b:d7:9e:
1f:1d:23:37:fc:a6:78:4b:76:27:39:0d:20:39:a1:
00:cf:b7:2b:18:f8:26:5a:a3:7a:74:26:7b:a6:70:
4f:dd:0d:75:f6:23:ed:c4:7a:d5:86:4b:0e:38:1a:
85:bd:1f:ee:8f:b4:70:f6:95:7d:91:07:c8:7c:4e:
e1:fe:28:d7:15:98:5f:1e:86:07:7e:47:e6:ba:92:
03:99:e1:a5:52:00:a8:08:11:0c:ca:cc:e6:bb:84:
d0:dd:4d:26:fc:c8:64:69:99:95:8e:8a:90:cc:09:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:0D:64:6A:D7:1F:A8:E2:95:F1:D5:5B:B3:3A:FA:E2:A3:64:5F
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/uYQNZGrXH6jilfHVW7M6-uKjZF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.103.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9e:75:75:fb:03:85:cb:a3:12:55:16:28:20:e5:be:d2:64:
88:8f:07:e0:52:3b:1a:08:db:f5:f2:cd:92:73:49:9b:d3:37:
8d:9d:3e:0c:f9:bf:e4:24:a9:3d:44:3d:0a:4e:7b:d8:3e:9d:
f3:ab:5e:25:1e:50:dd:04:1f:a5:54:05:2e:d6:e5:14:1f:5b:
8c:c2:03:94:d3:a7:df:30:a0:de:fd:bd:cc:df:ab:d9:7f:55:
cd:51:e4:fb:ee:76:d7:bb:18:28:15:21:26:74:63:c6:21:8f:
92:3a:ff:bc:f4:6a:bf:da:3d:c5:56:20:c3:72:2d:85:21:2b:
50:ca:00:30:b0:96:0e:b7:db:04:ce:87:44:79:4e:09:fb:a5:
37:76:87:91:c4:c1:d2:ee:b0:d5:1a:10:89:34:5f:d3:f3:15:
57:7d:86:03:f8:d8:7f:22:90:83:76:74:95:eb:fe:a7:97:6a:
fb:59:ef:50:b8:9b:81:4d:ab:e6:6b:92:fb:a9:64:ab:bd:53:
76:fb:39:b9:86:d3:c7:25:2b:d0:91:00:34:8a:f4:56:b5:a6:
2a:2a:ba:88:dd:4e:4d:de:d3:85:fb:80:f6:01:2d:43:61:2c:
dc:63:29:d5:b3:98:93:d8:79:40:fb:2e:88:31:c8:6e:36:c6:
dc:3e:ac:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIUVT0egyYSj+qkTVqu8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjUwMTAyMDM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTg0MGQ2NDZhZDcxZmE4ZTI5NWYxZDU1YmIzM2FmYWUyYTM2NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHPLO1nAL66irXkbl0o792gMMLl8
1kAccUk1yAlMEEkznhm8q0Dnq1jzJMlHaeY+g/m5OGhyOrzXu9MullbZw+tknXyQ
jo1DWyvrb4GSRz5JUkd3Qmumo/3uUfrtN4vzwkcadPZulGMp51lwc/kDjpow8/rc
TxVeV8RJFNgmRAHooL5zHVtCWXoWH84i8hvUEy2L154fHSM3/KZ4S3YnOQ0gOaEA
z7crGPgmWqN6dCZ7pnBP3Q119iPtxHrVhksOOBqFvR/uj7Rw9pV9kQfIfE7h/ijX
FZhfHoYHfkfmupIDmeGlUgCoCBEMyszmu4TQ3U0m/MhkaZmVjoqQzAlsLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmEDWRq1x+o4pXx1VuzOvrio2RfMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvdVlRTlpHclhINmppbGZIVlc3TTYtdUtqWkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFnMA0G
CSqGSIb3DQEBCwUAA4IBAQCHnnV1+wOFy6MSVRYoIOW+0mSIjwfgUjsaCNv18s2S
c0mb0zeNnT4M+b/kJKk9RD0KTnvYPp3zq14lHlDdBB+lVAUu1uUUH1uMwgOU06ff
MKDe/b3M36vZf1XNUeT77nbXuxgoFSEmdGPGIY+SOv+89Gq/2j3FViDDci2FIStQ
ygAwsJYOt9sEzodEeU4J+6U3doeRxMHS7rDVGhCJNF/T8xVXfYYD+Nh/IpCDdnSV
6/6nl2r7We9QuJuBTavma5L7qWSrvVN2+zm5htPHJSvQkQA0ivRWtaYqKrqI3U5N
3tOF+4D2AS1DYSzcYynVs5iT2HlA+y6IMchuNsbcPqzw
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:22 2025 by rpki-client