Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/upuyMhhoaTp-ZNDsg3Bv5lLBWbs.roa
File: upuyMhhoaTp-ZNDsg3Bv5lLBWbs.roa (raw, json)
Hash identifier: rku9PCjZtDoisX/uYlAZpyZg5d3xTNvnapYHvJjhNik=
Subject key identifier: BA:9B:B2:32:18:68:69:3A:7E:64:D0:EC:83:70:6F:E6:52:C1:59:BB
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD5266ABDB315FE7E2EFA1FF6B4B1F
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/upuyMhhoaTp-ZNDsg3Bv5lLBWbs.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39337
IP address blocks: 195.208.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:52:66:ab:db:31:5f:e7:e2:ef:a1:ff:6b:4b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba9bb2321868693a7e64d0ec83706fe652c159bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:75:f1:ec:7d:4c:f8:f3:21:6c:3d:40:09:
27:a2:3b:b4:71:95:fa:1a:00:23:ea:6d:8d:71:62:
0b:ad:de:b8:d2:d4:7e:db:e2:44:ca:e4:e5:28:32:
71:09:a1:ef:55:36:cd:22:66:50:04:76:91:50:79:
c5:8b:bb:4b:47:ad:be:6a:df:5f:ca:a4:ed:48:26:
a8:a9:29:f5:2c:f0:99:86:28:b8:d6:89:5e:59:d8:
44:b4:e2:75:3a:df:11:0e:13:e2:80:0b:c3:7a:1a:
04:f1:74:90:8e:fb:2a:e4:a7:28:61:1a:53:5f:2b:
af:76:d6:02:fb:d7:a2:c7:df:47:85:92:26:c5:5d:
04:5e:f3:bb:1e:cd:19:7e:aa:66:83:6e:99:f0:7a:
8f:be:40:f5:0d:fc:9e:29:1a:c8:a5:03:d1:db:d8:
8f:cf:6a:45:70:94:41:38:bc:a2:fe:27:a8:f1:fe:
71:fe:7d:ec:64:1d:90:d1:80:66:ee:cb:06:e9:46:
ab:b4:2e:44:55:9e:9e:bd:b9:99:29:c9:2a:fc:eb:
c7:a8:b0:ba:c9:2d:77:68:7d:c4:eb:53:16:18:da:
25:78:2b:d6:2f:3c:21:88:b5:4d:c2:85:03:09:83:
72:03:af:4c:24:d3:72:c5:16:7e:48:79:1b:db:dc:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:B2:32:18:68:69:3A:7E:64:D0:EC:83:70:6F:E6:52:C1:59:BB
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/upuyMhhoaTp-ZNDsg3Bv5lLBWbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:d6:95:2e:a8:cb:71:d4:b3:c0:0e:6a:ab:3e:81:63:1a:63:
f6:c6:e0:ec:ee:a1:8e:2b:a3:51:ac:9a:9a:87:e3:af:20:6b:
30:56:a5:a6:d8:3a:9c:10:5a:6f:e7:21:33:b4:43:2d:ef:31:
d0:21:d9:f8:ee:9a:95:02:45:98:d9:a9:4a:e3:8d:d9:3a:d3:
54:9d:38:a2:1a:6e:73:20:a7:ac:91:51:3f:c3:98:a0:10:e9:
8f:5c:0a:3c:f8:90:c0:f9:0e:9a:cd:30:8d:1f:ea:6a:36:ea:
97:50:44:44:ea:6c:50:f0:5f:eb:45:77:e5:fb:97:56:20:6a:
92:16:0e:3b:ac:1c:09:bf:5c:29:ba:df:36:17:51:91:5a:d8:
2a:72:16:58:04:b6:69:5d:89:41:f5:f6:ed:f8:73:6d:69:ce:
84:91:7d:2b:08:e6:c6:63:df:89:a5:53:49:58:aa:4e:88:6d:
92:1f:ed:fd:25:3f:bb:30:3e:ef:d6:78:17:36:ed:84:18:92:
07:e5:ab:fd:c8:86:eb:a6:30:cf:48:c8:1f:ad:21:70:dc:22:
bb:5e:ba:89:ae:5a:54:41:1a:d1:2e:0b:50:e9:80:be:05:8d:
d1:5c:4f:aa:7f:9d:b8:d3:7c:0a:69:dd:f5:1e:6c:f9:4d:f4:
f5:c3:23:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/VJmq9sxX+fi76H/a0sfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjUwMTAyMDc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTliYjIzMjE4Njg2OTNhN2U2NGQwZWM4MzcwNmZlNjUyYzE1OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwt18ex9TPjzIWw9QAknoju0cZX6
GgAj6m2NcWILrd640tR+2+JEyuTlKDJxCaHvVTbNImZQBHaRUHnFi7tLR62+at9f
yqTtSCaoqSn1LPCZhii41oleWdhEtOJ1Ot8RDhPigAvDehoE8XSQjvsq5KcoYRpT
XyuvdtYC+9eix99HhZImxV0EXvO7Hs0Zfqpmg26Z8HqPvkD1DfyeKRrIpQPR29iP
z2pFcJRBOLyi/ieo8f5x/n3sZB2Q0YBm7ssG6UartC5EVZ6evbmZKckq/OvHqLC6
yS13aH3E61MWGNoleCvWLzwhiLVNwoUDCYNyA69MJNNyxRZ+SHkb29ylaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqbsjIYaGk6fmTQ7INwb+ZSwVm7MB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvdXB1eU1oaG9hVHAtWk5Ec2czQnY1bExCV2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9C4MA0G
CSqGSIb3DQEBCwUAA4IBAQBO1pUuqMtx1LPADmqrPoFjGmP2xuDs7qGOK6NRrJqa
h+OvIGswVqWm2DqcEFpv5yEztEMt7zHQIdn47pqVAkWY2alK443ZOtNUnTiiGm5z
IKeskVE/w5igEOmPXAo8+JDA+Q6azTCNH+pqNuqXUERE6mxQ8F/rRXfl+5dWIGqS
Fg47rBwJv1wput82F1GRWtgqchZYBLZpXYlB9fbt+HNtac6EkX0rCObGY9+JpVNJ
WKpOiG2SH+39JT+7MD7v1ngXNu2EGJIH5av9yIbrpjDPSMgfrSFw3CK7XrqJrlpU
QRrRLgtQ6YC+BY3RXE+qf52403wKad31Hmz5TfT1wyMO
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:14 2025 by rpki-client