Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa
File: UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa (raw, json)
Hash identifier: PtCBoS2fU2dVe/kQVt6ngep+Cy21rwc2tXuFBDN9uBk=
Subject key identifier: 52:A3:7F:ED:E4:8F:9C:CC:F1:54:AC:24:6F:1D:D6:21:F4:C4:88:08
Certificate issuer: /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial: 018663A362DA64BC445A3B9EB5D8883C5E20
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa
Signing time: Sat 18 Feb 2023 08:28:17 +0000
ROA not before: Sat 18 Feb 2023 08:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 94.247.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:63:a3:62:da:64:bc:44:5a:3b:9e:b5:d8:88:3c:5e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Validity
Not Before: Feb 18 08:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52a37fede48f9cccf154ac246f1dd621f4c48808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:e6:43:b6:a8:69:9a:15:c3:15:51:a8:ae:
eb:ec:4d:df:b3:f4:fb:90:cb:3d:4d:8c:ff:a8:df:
1d:bf:fd:41:53:7a:66:c8:08:be:46:66:d2:aa:90:
44:fb:c1:67:30:5d:ec:67:59:4a:73:cc:12:7c:92:
42:ec:6e:8d:36:26:ab:3b:a1:26:11:8c:77:a1:ed:
1d:87:ea:ab:89:76:94:1a:1d:e8:b1:cd:ce:af:ed:
81:bb:31:63:1c:6c:5f:c3:8d:0f:97:82:65:e5:35:
cb:d2:fe:77:17:83:33:19:5b:4a:8b:b4:b4:04:11:
67:d9:e4:c1:8e:1c:53:85:58:28:58:d0:cc:93:a0:
08:06:64:6f:1d:93:7a:24:b3:df:70:88:0e:fc:c1:
8c:d6:3d:22:db:f1:f3:ca:3c:7d:c1:55:ca:36:d4:
3c:43:72:62:57:a7:8d:a0:14:5c:e9:17:4b:62:53:
df:4a:1d:94:d4:bf:39:64:c9:30:d8:69:f0:23:c1:
ad:19:e9:b9:6e:2f:f6:8f:65:45:54:81:bc:b3:9a:
56:96:fc:bd:20:f2:48:ce:bf:da:68:c9:f9:ff:cc:
cf:53:a1:7c:0d:dd:8d:55:9e:35:49:e0:30:a0:31:
64:5b:f0:e4:69:98:2d:ff:5a:97:7b:99:2f:61:80:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A3:7F:ED:E4:8F:9C:CC:F1:54:AC:24:6F:1D:D6:21:F4:C4:88:08
X509v3 Authority Key Identifier:
keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:94:79:00:df:b9:d0:83:b7:04:14:53:ad:4d:2c:8d:d4:f8:
9b:d0:ef:cf:ed:3f:88:9f:32:86:64:a1:23:12:9c:1d:34:2d:
7a:11:ea:86:c1:ea:a6:ab:2f:f4:59:83:2e:fd:6a:09:03:47:
dc:61:7b:73:fa:87:29:82:8a:3c:cf:ca:8d:ef:91:ff:9d:06:
43:d6:54:b9:df:03:08:dc:8d:e4:d9:6d:b7:9a:c0:31:fa:98:
3c:93:49:df:22:7b:0a:ad:91:d8:ee:d6:62:5a:87:10:06:e4:
32:6d:26:e8:a5:d9:96:ed:1e:a0:a2:74:ca:97:eb:2e:7c:5c:
67:f6:82:81:fb:60:7c:c6:10:18:20:2a:e3:53:4c:e4:03:04:
5e:ac:29:74:ab:09:e9:9e:03:78:3c:c7:e4:43:ca:ce:df:0c:
7a:24:03:d4:b7:48:65:d3:81:ab:2d:4d:34:9c:1c:92:03:ab:
23:2f:dc:95:d1:84:ec:bd:42:04:6e:28:f5:aa:5e:c8:43:1f:
31:32:0b:4b:ef:46:7f:67:13:dd:23:0a:5c:33:a0:a8:5d:3f:
cc:01:e9:d7:80:eb:2e:c9:15:05:d9:e0:59:87:ab:1c:0d:1e:
99:79:2c:76:85:5f:95:f3:c6:c8:66:c7:2f:44:dc:15:30:62:
4c:6f:80:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZjo2LaZLxEWjuetdiIPF4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTYzMzJjYzM5N2QzMzhlMWQ2YTFmYjg2YzJiNzFjOTJj
YjI1NTkwHhcNMjMwMjE4MDgyODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmEzN2ZlZGU0OGY5Y2NjZjE1NGFjMjQ2ZjFkZDYyMWY0YzQ4ODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqurmQ7aoaZoVwxVRqK7r7E3fs/T7
kMs9TYz/qN8dv/1BU3pmyAi+RmbSqpBE+8FnMF3sZ1lKc8wSfJJC7G6NNiarO6Em
EYx3oe0dh+qriXaUGh3osc3Or+2BuzFjHGxfw40Pl4Jl5TXL0v53F4MzGVtKi7S0
BBFn2eTBjhxThVgoWNDMk6AIBmRvHZN6JLPfcIgO/MGM1j0i2/Hzyjx9wVXKNtQ8
Q3JiV6eNoBRc6RdLYlPfSh2U1L85ZMkw2GnwI8GtGem5bi/2j2VFVIG8s5pWlvy9
IPJIzr/aaMn5/8zPU6F8Dd2NVZ41SeAwoDFkW/DkaZgt/1qXe5kvYYAUVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFKjf+3kj5zM8VSsJG8d1iH0xIgIMB8GA1UdIwQY
MBaAFKPmMyzDl9M44dah+4bCtxySyyVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1ZekxNT1gwempoMXFIN2hzSzNISkxMSlZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81ZWM1NWEtNzQ2MS00MDhlLWI0NWMt
ZTVmMjZiYzRkNDZlLzEvVXFOXzdlU1BuTXp4Vkt3a2J4M1dJZlRFaUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81ZWM1NWEtNzQ2MS00MDhlLWI0NWMtZTVmMjZiYzRkNDZl
LzEvby1ZekxNT1gwempoMXFIN2hzSzNISkxMSlZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXveKMA0G
CSqGSIb3DQEBCwUAA4IBAQAvlHkA37nQg7cEFFOtTSyN1Pib0O/P7T+InzKGZKEj
EpwdNC16EeqGweqmqy/0WYMu/WoJA0fcYXtz+ocpgoo8z8qN75H/nQZD1lS53wMI
3I3k2W23msAx+pg8k0nfInsKrZHY7tZiWocQBuQybSbopdmW7R6gonTKl+sufFxn
9oKB+2B8xhAYICrjU0zkAwRerCl0qwnpngN4PMfkQ8rO3wx6JAPUt0hl04GrLU00
nBySA6sjL9yV0YTsvUIEbij1ql7IQx8xMgtL70Z/ZxPdIwpcM6CoXT/MAenXgOsu
yRUF2eBZh6scDR6ZeSx2hV+V88bIZscvRNwVMGJMb4Bg
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:30 2025 by rpki-client