Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/uKvJupUJsNWoo5ivCG67FugGN0w.roa
File: uKvJupUJsNWoo5ivCG67FugGN0w.roa (raw, json)
Hash identifier: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=
Subject key identifier: B8:AB:C9:BA:95:09:B0:D5:A8:A3:98:AF:08:6E:BB:16:E8:06:37:4C
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 019423D6D9F29C493A8ED112222DD41291B0
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/uKvJupUJsNWoo5ivCG67FugGN0w.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64481
IP address blocks: 91.90.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d9:f2:9c:49:3a:8e:d1:12:22:2d:d4:12:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8abc9ba9509b0d5a8a398af086ebb16e806374c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:18:b5:67:7f:c7:e5:4c:8e:7c:1d:a5:e5:
b5:59:55:dd:a4:a2:90:e9:ec:15:50:a1:1a:9a:ee:
a7:e6:92:88:f9:04:22:76:b1:26:39:88:b2:9e:fc:
12:62:47:a5:23:6b:d9:53:95:0c:0e:ef:b3:8e:28:
85:38:8f:f2:62:ec:86:a1:b4:1b:26:8f:f6:af:62:
72:3c:22:fb:eb:c9:a0:9d:e5:58:da:86:7f:55:1d:
da:a3:a1:8d:bc:30:1b:a1:71:0a:15:0d:d8:79:63:
a8:44:d7:08:e7:92:dd:5b:4f:cd:bc:7b:72:c3:ae:
58:d9:01:e3:5e:92:6a:7c:fd:92:8a:6f:8f:72:dc:
e0:bb:d7:09:09:08:ce:67:ea:93:d9:8f:78:ea:9a:
5b:9b:76:99:2d:10:bd:6c:a5:f6:25:2a:d0:dc:17:
a9:82:f0:00:79:75:4c:f2:d1:4c:ca:74:41:0d:32:
03:2e:3f:2d:f2:47:97:d3:05:fa:2a:fa:84:bb:db:
71:d3:70:fb:8a:5c:d3:e5:29:5d:70:3f:52:b6:df:
a5:66:c7:e5:10:8d:b7:ce:5d:d0:15:93:ae:2f:3b:
27:4b:5f:14:6f:7b:cf:b5:52:50:27:26:6e:ee:3c:
bc:cd:55:6c:62:52:51:5e:29:7b:69:85:f1:a4:25:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:C9:BA:95:09:B0:D5:A8:A3:98:AF:08:6E:BB:16:E8:06:37:4C
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/uKvJupUJsNWoo5ivCG67FugGN0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.197.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1b:5a:97:83:43:26:de:67:1e:a3:6e:82:24:fb:dd:1b:31:
4d:63:4b:91:ba:1c:98:92:d7:7e:14:c1:9e:29:8e:52:b2:fb:
a2:f6:64:88:34:5c:db:9f:a8:14:a3:8e:c3:46:88:f8:c5:d1:
66:51:83:a4:e6:ec:70:99:55:68:0e:f2:b5:82:19:db:74:99:
cf:7e:de:23:50:eb:93:9b:23:ab:a3:b3:93:e7:33:ea:21:7b:
3e:26:f9:79:cc:17:bb:1b:3a:b7:6c:ab:db:53:f4:37:c2:74:
3f:3f:b0:9b:48:96:ac:79:85:a0:4f:47:05:e2:24:4c:29:05:
f8:b1:2f:d2:d1:86:c5:ee:d6:21:83:40:12:9f:fe:51:dd:02:
ec:0a:23:a9:09:e8:2d:8b:b8:ed:2e:f3:b2:d4:89:40:b3:ce:
be:7d:0d:4a:57:98:0a:67:b1:30:a8:10:2b:be:3f:da:1b:26:
53:3b:f2:69:4c:c5:43:19:40:35:68:62:8d:bd:29:c8:1f:ad:
36:0f:7f:18:18:35:f7:a8:f1:a0:4d:15:33:37:db:14:c5:a8:
e3:04:5a:e0:8d:b7:55:37:5c:6c:b1:45:2c:ea:a7:c1:23:db:
85:31:3c:eb:ed:3b:76:03:30:62:b2:e3:bb:9c:50:a1:78:2b:
ed:31:7a:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tnynEk6jtESIi3UEpGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzUwMmNkYmQzMzI1NjI4Y2Q2MTU2MDZiN2M3NDMzZWU1
YjIyMDQwHhcNMjUwMTAxMjE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGFiYzliYTk1MDliMGQ1YThhMzk4YWYwODZlYmIxNmU4MDYzNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5wYtWd/x+VMjnwdpeW1WVXdpKKQ
6ewVUKEamu6n5pKI+QQidrEmOYiynvwSYkelI2vZU5UMDu+zjiiFOI/yYuyGobQb
Jo/2r2JyPCL768mgneVY2oZ/VR3ao6GNvDAboXEKFQ3YeWOoRNcI55LdW0/NvHty
w65Y2QHjXpJqfP2Sim+Pctzgu9cJCQjOZ+qT2Y946ppbm3aZLRC9bKX2JSrQ3Bep
gvAAeXVM8tFMynRBDTIDLj8t8keX0wX6KvqEu9tx03D7ilzT5SldcD9Stt+lZsfl
EI23zl3QFZOuLzsnS18Ub3vPtVJQJyZu7jy8zVVsYlJRXil7aYXxpCXHVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLirybqVCbDVqKOYrwhuuxboBjdMMB8GA1UdIwQY
MBaAFFs1As29MyVijNYVYGt8dDPuWyIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEt
YjZiNjcwYjY4MDlhLzEvdUt2SnVwVUpzTldvbzVpdkNHNjdGdWdHTjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEtYjZiNjcwYjY4MDlh
LzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1rFMA0G
CSqGSIb3DQEBCwUAA4IBAQBRG1qXg0Mm3mceo26CJPvdGzFNY0uRuhyYktd+FMGe
KY5Ssvui9mSINFzbn6gUo47DRoj4xdFmUYOk5uxwmVVoDvK1ghnbdJnPft4jUOuT
myOro7OT5zPqIXs+Jvl5zBe7Gzq3bKvbU/Q3wnQ/P7CbSJaseYWgT0cF4iRMKQX4
sS/S0YbF7tYhg0ASn/5R3QLsCiOpCegti7jtLvOy1IlAs86+fQ1KV5gKZ7EwqBAr
vj/aGyZTO/JpTMVDGUA1aGKNvSnIH602D38YGDX3qPGgTRUzN9sUxajjBFrgjbdV
N1xssUUs6qfBI9uFMTzr7Tt2AzBisuO7nFCheCvtMXr0
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:06 2025 by rpki-client