Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/UvYnHc7rFlBw3j4tqyHKN3v104E.roa
File: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (raw, json)
Hash identifier: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=
Subject key identifier: 52:F6:27:1D:CE:EB:16:50:70:DE:3E:2D:AB:21:CA:37:7B:F5:D3:81
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0194258EADE0F71EF00046816191DA0F4919
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/UvYnHc7rFlBw3j4tqyHKN3v104E.roa
Signing time: Thu 02 Jan 2025 05:48:15 +0000
ROA not before: Thu 02 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206746
IP address blocks: 185.176.100.0/24 maxlen: 24
185.176.101.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
2a0a:1180::/32 maxlen: 32
2a0a:1181::/32 maxlen: 32
2a0a:1182::/32 maxlen: 32
2a0a:1183::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ad:e0:f7:1e:f0:00:46:81:61:91:da:0f:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 2 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f6271dceeb165070de3e2dab21ca377bf5d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:23:d7:76:2f:d4:07:0f:a1:47:0b:ec:eb:
ef:e9:26:cb:68:20:2a:7f:c3:40:62:19:c9:1a:f2:
b2:e6:56:ef:fb:69:03:e2:61:7b:52:1f:5d:e9:9b:
50:b0:d7:35:fe:0c:85:6c:93:df:4e:e1:c3:8d:8d:
f5:04:fa:11:b2:35:85:84:4a:e9:94:fd:3b:cb:e4:
cb:bc:0e:2d:48:4a:66:14:ef:45:a7:27:0d:e5:fd:
e7:54:cf:41:56:54:05:5c:72:d4:45:dc:66:99:c7:
be:c9:0a:61:7c:3c:6d:14:e4:c4:76:1d:77:2a:ba:
99:95:ce:66:92:d4:25:64:80:aa:35:c2:e2:1d:a8:
83:d3:c8:5b:95:62:1f:b1:24:7b:d8:34:bb:ba:ef:
d6:70:49:d0:35:79:2f:6e:96:2c:af:76:d9:31:d6:
49:3b:06:94:c6:75:a8:9e:9a:1b:f1:58:55:c5:24:
6e:92:dd:d1:6b:43:a2:d3:44:51:a2:1b:7a:c8:40:
3a:9d:f0:06:f0:43:3b:dd:2e:5c:01:ca:54:89:99:
78:77:ab:fa:8d:9a:67:bc:56:43:2b:54:aa:24:08:
3b:e3:e9:83:8b:03:20:47:35:88:97:36:73:e5:09:
07:67:eb:03:18:ed:98:55:95:34:22:25:a7:b2:2a:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:27:1D:CE:EB:16:50:70:DE:3E:2D:AB:21:CA:37:7B:F5:D3:81
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/UvYnHc7rFlBw3j4tqyHKN3v104E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
IPv6:
2a0a:1180::/30
Signature Algorithm: sha256WithRSAEncryption
88:19:ba:f7:02:1c:f8:ab:4a:34:9d:d2:9b:be:64:d6:7b:41:
81:af:24:e1:d5:b2:11:5a:34:b7:77:f9:a5:2a:c2:42:c4:18:
e8:49:8c:6e:7d:02:12:e4:6f:48:a7:cf:6a:36:f9:74:9f:9c:
68:b2:81:e6:fe:77:1e:b1:e8:63:6e:4a:c3:6e:af:7f:50:f6:
3b:e6:2d:9a:63:5f:96:99:42:76:51:9b:e5:95:2b:e4:cd:55:
5a:39:32:8e:23:41:75:3a:0f:c4:03:fd:2e:a5:a8:3f:bb:d8:
a5:1c:ff:33:d1:b0:0a:e3:5b:1b:8a:80:41:88:de:82:e8:cd:
81:b1:a7:b8:c7:8c:6f:43:4c:2e:d3:be:d1:8d:30:bd:a0:b9:
1e:3f:91:37:ce:b4:a0:54:b2:9e:db:07:a0:e9:42:26:6e:70:
a9:e5:29:35:95:2b:3d:98:ba:23:d9:ef:bb:6f:a9:04:27:d5:
f7:cb:59:f0:1c:3d:14:9e:b4:03:bf:f6:7a:e3:b5:49:75:00:
c7:87:6a:e1:81:ba:d5:34:22:34:27:12:20:7b:e6:d7:f3:17:
97:2c:51:3f:87:22:14:82:8a:1f:4e:4e:1d:f6:58:67:65:f5:
24:da:b6:d1:45:da:6c:db:ba:18:5a:05:a8:f6:04:67:15:63:
62:33:23:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQljq3g9x7wAEaBYZHaD0kZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDFlYTA1OTYzYzk3NTZmMjhlZTJlOThiOGYzY2M0Nzlk
YzlmNTgwHhcNMjUwMTAyMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmY2MjcxZGNlZWIxNjUwNzBkZTNlMmRhYjIxY2EzNzdiZjVkMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Ij13Yv1AcPoUcL7Ovv6SbLaCAq
f8NAYhnJGvKy5lbv+2kD4mF7Uh9d6ZtQsNc1/gyFbJPfTuHDjY31BPoRsjWFhErp
lP07y+TLvA4tSEpmFO9FpycN5f3nVM9BVlQFXHLURdxmmce+yQphfDxtFOTEdh13
KrqZlc5mktQlZICqNcLiHaiD08hblWIfsSR72DS7uu/WcEnQNXkvbpYsr3bZMdZJ
OwaUxnWonpob8VhVxSRukt3Ra0Oi00RRoht6yEA6nfAG8EM73S5cAcpUiZl4d6v6
jZpnvFZDK1SqJAg74+mDiwMgRzWIlzZz5QkHZ+sDGO2YVZU0IiWnsiqbFQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFL2Jx3O6xZQcN4+Lashyjd79dOBMB8GA1UdIwQY
MBaAFJMB6gWWPJdW8o7i6YuPPMR53J9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUt
OGYwOGUwMjcyZGY4LzEvVXZZbkhjN3JGbEJ3M2o0dHF5SEtOM3YxMDRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lYmY2Y2ItYTc3OS00NjRmLThiZWUtOGYwOGUwMjcyZGY4
LzEva3dIcUJaWThsMWJ5anVMcGk0ODh4SG5jbjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubBkMA0E
AgACMAcDBQIqChGAMA0GCSqGSIb3DQEBCwUAA4IBAQCIGbr3Ahz4q0o0ndKbvmTW
e0GBryTh1bIRWjS3d/mlKsJCxBjoSYxufQIS5G9Ip89qNvl0n5xosoHm/ncesehj
bkrDbq9/UPY75i2aY1+WmUJ2UZvllSvkzVVaOTKOI0F1Og/EA/0upag/u9ilHP8z
0bAK41sbioBBiN6C6M2Bsae4x4xvQ0wu077RjTC9oLkeP5E3zrSgVLKe2weg6UIm
bnCp5Sk1lSs9mLoj2e+7b6kEJ9X3y1nwHD0UnrQDv/Z647VJdQDHh2rhgbrVNCI0
JxIge+bX8xeXLFE/hyIUgoofTk4d9lhnZfUk2rbRRdps27oYWgWo9gRnFWNiMyOt
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:31 2025 by rpki-client