Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UXRM1sP45HpP61GvCKgrqMoIzGE.roa
File: UXRM1sP45HpP61GvCKgrqMoIzGE.roa (raw, json)
Hash identifier: LEsB07SvuPSL15NvNik2f0oYWS+9Y8kbURNbj82d2mc=
Subject key identifier: 51:74:4C:D6:C3:F8:E4:7A:4F:EB:51:AF:08:A8:2B:A8:CA:08:CC:61
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C3619E9A3EC281552E2003A99055
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UXRM1sP45HpP61GvCKgrqMoIzGE.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60984
IP address blocks: 89.41.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c3:61:9e:9a:3e:c2:81:55:2e:20:03:a9:90:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51744cd6c3f8e47a4feb51af08a82ba8ca08cc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:c5:b4:89:47:02:6c:1c:7c:87:6a:cf:31:
7d:61:fc:4c:a2:f3:4a:74:ff:82:48:2e:ab:f9:c2:
ed:8b:fb:5f:cd:58:b1:78:54:22:db:96:16:fb:36:
07:37:f9:17:b9:68:e1:b2:a5:25:40:cc:90:8d:04:
6e:39:a2:81:9e:f2:b1:2d:7a:f7:57:40:63:2f:dd:
0b:12:e2:95:be:c4:53:d1:c8:5e:14:7f:d1:05:71:
53:fc:46:ae:a0:12:ea:0e:6c:cd:83:ba:56:99:ee:
24:38:be:62:e4:e2:3b:9e:c9:68:11:b1:b7:b1:6c:
47:42:81:b2:50:4b:fc:05:0a:9a:05:1b:55:75:ff:
15:c2:11:8f:fb:de:50:e0:ed:9a:ed:73:50:c8:76:
27:de:93:b1:05:21:0d:5f:2c:cd:c2:13:0b:b3:35:
fc:d8:be:14:7f:2f:99:fe:b6:3f:97:3f:1a:89:9e:
51:5a:26:41:4a:93:81:e7:04:fa:b4:58:9d:00:da:
6d:9a:ec:56:f1:08:ca:89:d7:f6:58:ec:4f:c8:1d:
56:6e:35:63:86:e1:5c:ee:ed:af:a1:6e:e4:00:f8:
07:a1:0f:a9:76:51:e7:78:37:8c:fb:4e:91:db:a0:
20:64:8b:40:2c:ce:59:05:5a:c1:1b:36:75:65:3b:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:4C:D6:C3:F8:E4:7A:4F:EB:51:AF:08:A8:2B:A8:CA:08:CC:61
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UXRM1sP45HpP61GvCKgrqMoIzGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.178.0/24
Signature Algorithm: sha256WithRSAEncryption
34:73:0b:a3:63:9a:48:48:bf:84:b7:26:6a:b8:3e:c0:47:af:
14:51:03:54:92:b2:70:61:df:f3:e8:c8:94:1b:bf:6d:be:55:
de:9f:d8:c0:3c:ec:6e:e1:26:d9:93:c6:cf:96:95:99:31:fb:
d5:12:c8:b3:e0:32:76:fa:83:da:5d:be:f6:b0:7d:6a:91:1a:
0b:3f:97:45:71:f0:b3:dc:d1:18:ae:7e:fd:7c:fa:60:02:67:
dd:18:6b:f3:ad:5c:f0:b2:ca:19:b1:c3:33:84:a1:9d:76:a8:
61:91:78:49:b8:86:c4:1c:76:1a:c2:a8:ed:c3:00:73:b0:20:
0b:98:74:b2:8b:69:37:50:07:35:56:42:89:91:12:49:36:2d:
8a:98:fb:31:58:09:9a:ad:7b:e2:80:c5:03:0c:a1:6c:32:fd:
aa:58:73:d3:b7:0b:89:95:56:6b:54:1f:e9:82:74:c1:86:8d:
5e:39:a3:62:8f:45:5f:27:54:df:84:43:d0:26:53:e2:25:ca:
37:36:51:87:b2:30:94:9c:03:39:99:5d:3c:e9:88:3c:87:aa:
cb:34:99:17:27:fd:03:4e:35:ea:67:47:d6:b7:d1:b8:2e:cf:
7a:b9:46:60:9c:96:15:96:0b:55:16:ad:e2:bc:ef:7d:97:49:
0c:72:ad:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1sNhnpo+woFVLiADqZBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTc0NGNkNmMzZjhlNDdhNGZlYjUxYWYwOGE4MmJhOGNhMDhjYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGTFtIlHAmwcfIdqzzF9YfxMovNK
dP+CSC6r+cLti/tfzVixeFQi25YW+zYHN/kXuWjhsqUlQMyQjQRuOaKBnvKxLXr3
V0BjL90LEuKVvsRT0cheFH/RBXFT/EauoBLqDmzNg7pWme4kOL5i5OI7nsloEbG3
sWxHQoGyUEv8BQqaBRtVdf8VwhGP+95Q4O2a7XNQyHYn3pOxBSENXyzNwhMLszX8
2L4Ufy+Z/rY/lz8aiZ5RWiZBSpOB5wT6tFidANptmuxW8QjKidf2WOxPyB1WbjVj
huFc7u2voW7kAPgHoQ+pdlHneDeM+06R26AgZItALM5ZBVrBGzZ1ZTunPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFF0TNbD+OR6T+tRrwioK6jKCMxhMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVVhSTTFzUDQ1SHBQNjFHdkNLZ3JxTW9JekdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSmyMA0G
CSqGSIb3DQEBCwUAA4IBAQA0cwujY5pISL+EtyZquD7AR68UUQNUkrJwYd/z6MiU
G79tvlXen9jAPOxu4SbZk8bPlpWZMfvVEsiz4DJ2+oPaXb72sH1qkRoLP5dFcfCz
3NEYrn79fPpgAmfdGGvzrVzwssoZscMzhKGddqhhkXhJuIbEHHYawqjtwwBzsCAL
mHSyi2k3UAc1VkKJkRJJNi2KmPsxWAmarXvigMUDDKFsMv2qWHPTtwuJlVZrVB/p
gnTBho1eOaNij0VfJ1TfhEPQJlPiJco3NlGHsjCUnAM5mV086Yg8h6rLNJkXJ/0D
TjXqZ0fWt9G4Ls96uUZgnJYVlgtVFq3ivO99l0kMcq2M
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:08 2025 by rpki-client