Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/ua6ojvhovAehM-fnwLuDM4wJILg.roa
File: ua6ojvhovAehM-fnwLuDM4wJILg.roa (raw, json)
Hash identifier: tV1QCKiuQHhJwo7kCkRFyHX+DvQ0czIgx4Qn1V1KHGk=
Subject key identifier: B9:AE:A8:8E:F8:68:BC:07:A1:33:E7:E7:C0:BB:83:33:8C:09:20:B8
Certificate issuer: /CN=2ed318ba1e8542312c47e9a3510ba21b1efaa8d7
Certificate serial: 104CBAF4
Authority key identifier: 2E:D3:18:BA:1E:85:42:31:2C:47:E9:A3:51:0B:A2:1B:1E:FA:A8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtMYuh6FQjEsR-mjUQuiGx76qNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/ua6ojvhovAehM-fnwLuDM4wJILg.roa
Signing time: Sat 01 Jan 2022 01:58:03 +0000
ROA not before: Sat 01 Jan 2022 01:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31653
IP address blocks: 217.149.12.0/24 maxlen: 24
217.149.14.0/24 maxlen: 24
217.149.13.0/24 maxlen: 24
217.149.4.0/24 maxlen: 24
217.149.0.0/24 maxlen: 24
217.149.2.0/24 maxlen: 24
217.149.1.0/24 maxlen: 24
217.149.3.0/24 maxlen: 24
217.149.5.0/24 maxlen: 24
217.149.11.0/24 maxlen: 24
217.149.7.0/24 maxlen: 24
217.149.6.0/24 maxlen: 24
217.149.9.0/24 maxlen: 24
217.149.8.0/24 maxlen: 24
217.149.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273464052 (0x104cbaf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed318ba1e8542312c47e9a3510ba21b1efaa8d7
Validity
Not Before: Jan 1 01:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9aea88ef868bc07a133e7e7c0bb83338c0920b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:bc:a6:f9:c2:a3:31:a2:5f:22:57:3e:68:
48:4f:04:1a:20:3f:40:77:f1:1f:10:45:05:10:d2:
55:9e:96:f4:40:bb:66:06:54:93:1c:3e:da:fa:c3:
98:14:3a:70:98:2f:a3:ff:6b:73:48:a3:f8:8b:65:
41:88:42:51:d2:3f:42:9b:4f:b5:b1:7b:c9:a2:20:
a7:17:59:77:81:39:99:61:39:68:26:11:4a:a0:0b:
e0:93:95:a2:5b:fd:20:d3:e5:b2:72:9d:83:7b:8f:
38:42:ad:25:6e:0a:1c:c8:20:7e:f0:d1:55:b8:1b:
4c:b3:01:e4:3d:eb:fc:67:06:b4:aa:5d:8b:67:6c:
cd:ad:f3:a5:62:1c:5c:da:dd:47:5e:89:b6:43:10:
a8:43:af:5e:cb:af:3a:fc:f7:7f:74:f2:2c:b5:48:
30:f3:8c:b9:cd:b9:76:14:de:75:7a:09:85:eb:94:
b9:dc:93:35:a5:33:34:9b:e1:0f:8b:02:13:b6:cc:
f6:53:71:06:12:1a:77:8c:62:e7:7e:14:ad:0b:1a:
49:b5:6f:6e:00:fc:b0:36:2d:b1:6c:df:3b:46:01:
95:da:83:a5:77:1e:47:9b:f8:29:e3:a5:2e:08:46:
5d:de:0d:a3:aa:42:a3:fc:94:02:91:f3:b0:33:ea:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:A8:8E:F8:68:BC:07:A1:33:E7:E7:C0:BB:83:33:8C:09:20:B8
X509v3 Authority Key Identifier:
keyid:2E:D3:18:BA:1E:85:42:31:2C:47:E9:A3:51:0B:A2:1B:1E:FA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtMYuh6FQjEsR-mjUQuiGx76qNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/ua6ojvhovAehM-fnwLuDM4wJILg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/LtMYuh6FQjEsR-mjUQuiGx76qNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.0.0-217.149.14.255
Signature Algorithm: sha256WithRSAEncryption
4c:86:47:67:a1:7e:5e:81:56:9a:5e:42:c8:1d:e8:39:4d:7a:
bc:d2:20:4b:ae:23:7d:1a:5c:a4:0d:09:cd:65:75:d1:d9:8a:
95:7c:59:b7:30:38:d6:02:28:f5:9d:70:e3:5b:47:52:b6:64:
15:c4:29:47:7b:34:9c:da:d8:5a:bf:9e:1a:74:4d:56:10:f0:
17:36:a2:14:48:ca:77:ef:af:d2:6f:b5:49:ae:f5:a4:52:87:
93:12:42:1f:a3:5f:ed:8a:be:4d:d8:64:9c:82:bd:a6:38:2f:
b2:10:43:66:0a:ea:9d:05:20:9b:c6:e7:9f:82:d6:52:46:3f:
b3:b0:ff:f9:69:a3:0d:44:df:dd:00:23:6a:60:06:bc:10:7e:
88:45:c7:16:d9:e3:0e:56:73:04:c6:90:a8:60:a1:a6:5c:67:
39:ed:e2:12:5d:84:be:1d:cd:21:87:a4:54:36:20:bd:4e:d8:
59:2e:f5:4f:7d:8f:eb:43:6e:59:e1:ba:8d:41:43:57:9a:28:
3c:b2:17:79:fb:97:0d:bf:fc:ac:88:a3:41:f8:e2:66:b9:03:
b7:f2:17:8a:c0:bd:a4:e9:e9:87:9d:7b:1f:18:d5:98:3d:8a:
74:f5:5b:1e:da:92:c0:0b:c9:ff:34:e8:0e:27:35:e5:08:65:
a0:c9:01:16
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIEEEy69DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZWQzMThiYTFlODU0MjMxMmM0N2U5YTM1MTBiYTIxYjFlZmFhOGQ3MB4XDTIyMDEw
MTAxNTgwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjlhZWE4OGVmODY4
YmMwN2ExMzNlN2U3YzBiYjgzMzM4YzA5MjBiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3UvKb5wqMxol8iVz5oSE8EGiA/QHfxHxBFBRDSVZ6W9EC7
ZgZUkxw+2vrDmBQ6cJgvo/9rc0ij+ItlQYhCUdI/QptPtbF7yaIgpxdZd4E5mWE5
aCYRSqAL4JOVolv9INPlsnKdg3uPOEKtJW4KHMggfvDRVbgbTLMB5D3r/GcGtKpd
i2dsza3zpWIcXNrdR16JtkMQqEOvXsuvOvz3f3TyLLVIMPOMuc25dhTedXoJheuU
udyTNaUzNJvhD4sCE7bM9lNxBhIad4xi534UrQsaSbVvbgD8sDYtsWzfO0YBldqD
pXceR5v4KeOlLghGXd4No6pCo/yUApHzsDPqyl0CAwEAAaOCAhAwggIMMB0GA1Ud
DgQWBBS5rqiO+Gi8B6Ez5+fAu4MzjAkguDAfBgNVHSMEGDAWgBQu0xi6HoVCMSxH
6aNRC6IbHvqo1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x0TVl1aDZGUWpFc1ItbWpVUXVpR3g3NnFOYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvZDE5N2RhLTk3MTQtNDIyNy1hNzI2LTFjYzZhZmI1ZmQ5Mi8x
L3VhNm9qdmhvdkFlaE0tZm53THVETTR3SklMZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
ZDE5N2RhLTk3MTQtNDIyNy1hNzI2LTFjYzZhZmI1ZmQ5Mi8xL0x0TVl1aDZGUWpF
c1ItbWpVUXVpR3g3NnFOYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAEwDTALAwMA2ZUDBADZlQ4wDQYJKoZIhvcN
AQELBQADggEBAEyGR2ehfl6BVppeQsgd6DlNerzSIEuuI30aXKQNCc1lddHZipV8
WbcwONYCKPWdcONbR1K2ZBXEKUd7NJza2Fq/nhp0TVYQ8Bc2ohRIynfvr9JvtUmu
9aRSh5MSQh+jX+2Kvk3YZJyCvaY4L7IQQ2YK6p0FIJvG55+C1lJGP7Ow//lpow1E
390AI2pgBrwQfohFxxbZ4w5WcwTGkKhgoaZcZznt4hJdhL4dzSGHpFQ2IL1O2Fku
9U99j+tDblnhuo1BQ1eaKDyyF3n7lw2//KyIo0H44ma5A7fyF4rAvaTp6Yedex8Y
1Zg9inT1Wx7aksALyf806A4nNeUIZaDJARY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:36 2025 by rpki-client