Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/Upbmgaxs-6mjxomkKKYIv-UFDZc.roa
File: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (raw, json)
Hash identifier: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=
Subject key identifier: 52:96:E6:81:AC:6C:FB:A9:A3:C6:89:A4:28:A6:08:BF:E5:05:0D:97
Certificate issuer: /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial: 0194221FE2A690174D52B47BEB4105BCABFA
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/Upbmgaxs-6mjxomkKKYIv-UFDZc.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197482
IP address blocks: 91.221.198.0/23 maxlen: 23
91.221.198.0/24 maxlen: 24
91.221.199.0/24 maxlen: 24
91.236.48.0/22 maxlen: 22
91.236.48.0/24 maxlen: 24
91.236.49.0/24 maxlen: 24
91.236.50.0/24 maxlen: 24
91.236.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:a6:90:17:4d:52:b4:7b:eb:41:05:bc:ab:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5296e681ac6cfba9a3c689a428a608bfe5050d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:7d:3a:05:b0:dc:6d:ed:96:92:df:19:45:
1b:75:54:ef:13:d2:35:63:db:56:48:50:97:18:bc:
4f:2f:07:21:51:16:87:fa:dd:4d:96:83:97:12:ef:
07:01:b6:c8:ad:76:80:d5:86:dd:9c:83:85:5f:a4:
17:72:d0:2e:91:eb:91:15:91:f1:71:f6:a5:df:0f:
12:81:55:32:78:45:fa:bf:08:45:84:c2:1f:df:3c:
b5:aa:3a:58:a1:bf:19:87:88:41:6d:4f:69:0c:1c:
43:b4:6c:8a:9a:4f:bb:b0:c7:57:46:26:7e:50:d5:
2f:82:83:0c:50:6c:31:1e:56:46:49:52:0b:b9:f7:
99:ca:ff:30:e1:87:2a:2d:fc:ff:79:57:6c:94:89:
5d:9c:9a:76:66:e3:e9:39:e7:47:60:15:f1:25:da:
fc:dd:6a:08:d5:b7:65:4f:9f:ea:71:9f:23:ca:59:
61:c0:b9:47:a4:96:c4:8c:f4:a4:91:89:4c:c4:22:
ba:de:bb:5b:fc:9c:13:a4:78:cf:81:4f:a1:3d:9c:
e3:fe:1c:c8:74:bf:5c:69:7e:b4:af:59:ff:a3:72:
46:9a:1d:37:ca:46:64:53:64:95:96:65:d3:06:ca:
be:a4:dd:85:c9:58:5d:c0:87:35:c2:be:e4:fd:6c:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:E6:81:AC:6C:FB:A9:A3:C6:89:A4:28:A6:08:BF:E5:05:0D:97
X509v3 Authority Key Identifier:
keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/Upbmgaxs-6mjxomkKKYIv-UFDZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.198.0/23
91.236.48.0/22
Signature Algorithm: sha256WithRSAEncryption
44:09:76:43:5e:a1:c0:be:ad:a0:0d:0f:f0:91:bb:59:ff:71:
74:dd:14:e5:b3:67:6f:86:c0:16:ad:a1:c0:f7:bc:04:72:90:
f5:8b:b2:a7:2e:c3:fa:e9:49:ba:6f:e1:b4:65:3b:a7:47:9c:
38:53:cc:55:e7:e2:f7:da:1c:ee:81:ac:21:67:3d:56:09:40:
23:c3:be:67:89:7b:62:8f:13:e2:75:75:f8:34:58:9d:a5:90:
d4:e6:5b:27:e6:29:e4:51:2f:ae:e4:96:0b:11:2f:bf:5c:1a:
74:9f:b8:ba:6a:af:17:9d:98:67:83:73:0e:dd:8f:97:bb:1b:
56:b6:28:d9:57:de:7b:af:39:ab:c3:a4:fc:03:ac:cc:dc:d9:
2b:e9:34:74:8d:69:4e:95:a5:21:ca:40:55:30:7a:ad:d3:ff:
b5:de:75:a5:32:95:55:4d:13:68:a4:d4:3a:18:ae:90:ea:d6:
e5:6f:c3:e8:3e:10:ab:03:76:d9:3f:5d:eb:ce:66:39:89:3b:
43:c6:eb:30:0e:e5:ef:0c:d7:ac:9f:85:9e:ed:07:0c:08:4d:
5f:9e:ea:08:b4:de:c7:84:72:2e:5e:4f:48:c2:36:25:d5:9b:
41:19:a8:e1:7f:be:7d:b4:ee:d9:ef:15:19:a5:d7:42:97:68:
22:72:1c:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH+KmkBdNUrR760EFvKv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMjU0ZTFiNWNkNDUyODY4ZGYyZTE5OTJkODhkMDc2MDlm
YzRjOTIwHhcNMjUwMTAxMTM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mjk2ZTY4MWFjNmNmYmE5YTNjNjg5YTQyOGE2MDhiZmU1MDUwZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qd9OgWw3G3tlpLfGUUbdVTvE9I1
Y9tWSFCXGLxPLwchURaH+t1NloOXEu8HAbbIrXaA1YbdnIOFX6QXctAukeuRFZHx
cfal3w8SgVUyeEX6vwhFhMIf3zy1qjpYob8Zh4hBbU9pDBxDtGyKmk+7sMdXRiZ+
UNUvgoMMUGwxHlZGSVILufeZyv8w4YcqLfz/eVdslIldnJp2ZuPpOedHYBXxJdr8
3WoI1bdlT5/qcZ8jyllhwLlHpJbEjPSkkYlMxCK63rtb/JwTpHjPgU+hPZzj/hzI
dL9caX60r1n/o3JGmh03ykZkU2SVlmXTBsq+pN2FyVhdwIc1wr7k/WwVAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFKW5oGsbPupo8aJpCimCL/lBQ2XMB8GA1UdIwQY
MBaAFL4lThtc1FKGjfLhmS2I0HYJ/EySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDIt
NDJjZjVkNTFlNDE4LzEvVXBibWdheHMtNm1qeG9ta0tLWUl2LVVGRFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xNTVmYTItODAwNy00OTY3LWFkMDItNDJjZjVkNTFlNDE4
LzEvdmlWT0cxelVVb2FOOHVHWkxZalFkZ244VEpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW93GAwQC
W+wwMA0GCSqGSIb3DQEBCwUAA4IBAQBECXZDXqHAvq2gDQ/wkbtZ/3F03RTls2dv
hsAWraHA97wEcpD1i7KnLsP66Um6b+G0ZTunR5w4U8xV5+L32hzugawhZz1WCUAj
w75niXtijxPidXX4NFidpZDU5lsn5inkUS+u5JYLES+/XBp0n7i6aq8XnZhng3MO
3Y+XuxtWtijZV957rzmrw6T8A6zM3Nkr6TR0jWlOlaUhykBVMHqt0/+13nWlMpVV
TRNopNQ6GK6Q6tblb8PoPhCrA3bZP13rzmY5iTtDxuswDuXvDNesn4We7QcMCE1f
nuoItN7HhHIuXk9IwjYl1ZtBGajhf759tO7Z7xUZpddCl2gichyc
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:42 2025 by rpki-client