Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/Ulpr1Jmx493698v74uoqJ6oAAdo.roa
File: Ulpr1Jmx493698v74uoqJ6oAAdo.roa (raw, json)
Hash identifier: aX3T4TwzWXMQGdso/RiECcia7uU/LVFW5r2Zl+EkDn8=
Subject key identifier: 52:5A:6B:D4:99:B1:E3:DD:FA:F7:CB:FB:E2:EA:2A:27:AA:00:01:DA
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0187CC106ECBAE332900236903852582B9B4
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/Ulpr1Jmx493698v74uoqJ6oAAdo.roa
Signing time: Sat 29 Apr 2023 08:10:41 +0000
ROA not before: Sat 29 Apr 2023 08:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:10:6e:cb:ae:33:29:00:23:69:03:85:25:82:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Apr 29 08:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=525a6bd499b1e3ddfaf7cbfbe2ea2a27aa0001da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:5c:38:88:32:f6:a4:9e:67:c6:8c:ea:ff:
47:d1:81:06:fe:d6:c3:5d:83:28:3d:c0:5c:bf:ca:
66:8c:0f:9f:87:7d:4f:1a:e4:59:a4:6b:b1:87:96:
07:90:5d:9e:7c:60:b6:14:27:7b:4f:64:10:f7:f9:
2e:86:28:a2:3d:7b:20:b8:7e:e8:b3:23:e9:b3:70:
31:f0:8a:b7:72:85:03:87:f6:66:c9:a6:a0:41:d4:
bd:02:44:87:4e:71:19:fb:31:21:17:c8:4d:ec:bc:
51:27:34:e3:72:f3:ca:3b:10:12:84:5e:e5:b8:f4:
e6:d7:85:11:3b:1a:fd:9c:69:39:5b:98:3e:d9:f0:
a6:0b:9e:38:02:4b:98:b6:87:fe:3c:40:55:77:d8:
fa:d7:03:11:45:14:ba:b7:89:5b:c3:99:75:90:5f:
0d:06:61:85:d9:fa:a1:91:52:ae:7e:26:67:34:53:
7e:c7:8f:a0:2d:e1:12:af:86:a1:04:2c:30:35:2d:
5f:a7:4e:78:26:67:b3:ce:73:29:66:9c:df:35:77:
84:a7:bb:3f:c8:fd:b9:44:a3:c2:d1:fe:71:4c:81:
65:d0:69:25:6c:78:07:28:3c:e4:fb:90:32:91:7a:
03:2f:bc:92:d9:d6:2a:70:7d:67:00:b5:e0:47:68:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:6B:D4:99:B1:E3:DD:FA:F7:CB:FB:E2:EA:2A:27:AA:00:01:DA
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/Ulpr1Jmx493698v74uoqJ6oAAdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
af:af:a1:a5:e4:3e:48:dd:84:f0:a1:f0:60:d4:06:16:94:4a:
f7:03:bc:f3:44:76:01:c9:c1:fd:94:4f:7d:f6:5f:be:23:2b:
37:80:d3:2e:21:81:a2:57:5e:a2:31:af:ea:00:05:45:c0:e8:
92:db:66:1a:49:34:51:f2:e3:2a:78:0d:eb:fb:b0:85:97:a9:
b1:00:9f:19:91:be:a6:70:c8:a6:a5:08:fa:03:a8:62:77:92:
34:dd:92:a2:82:11:51:a0:ab:e8:27:52:37:91:df:b4:b2:80:
c6:da:b6:ab:71:c7:d5:4d:32:72:05:d0:10:57:f3:40:77:5d:
75:94:58:6f:10:dc:6b:cc:c5:dc:26:a8:b2:90:57:5b:46:b1:
14:26:b0:a8:94:1c:7d:f2:6d:ae:f1:7d:9a:28:00:22:91:ed:
fe:6e:28:66:a2:e9:04:4b:4f:a8:93:07:11:a2:46:77:33:b9:
94:74:91:87:b6:70:62:42:83:81:e7:4e:a6:f8:69:03:eb:8e:
34:c8:8c:bb:d9:f7:3e:64:25:24:9f:08:87:23:bc:17:36:12:
03:cf:eb:e4:23:be:bc:c1:43:1a:23:d8:50:e8:fa:fe:40:1f:
74:22:74:4d:13:b6:cf:1a:05:60:20:b2:17:85:05:1f:4c:32:
bd:d6:6f:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfMEG7LrjMpACNpA4Ulgrm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjMwNDI5MDgxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjVhNmJkNDk5YjFlM2RkZmFmN2NiZmJlMmVhMmEyN2FhMDAwMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftcOIgy9qSeZ8aM6v9H0YEG/tbD
XYMoPcBcv8pmjA+fh31PGuRZpGuxh5YHkF2efGC2FCd7T2QQ9/kuhiiiPXsguH7o
syPps3Ax8Iq3coUDh/ZmyaagQdS9AkSHTnEZ+zEhF8hN7LxRJzTjcvPKOxAShF7l
uPTm14UROxr9nGk5W5g+2fCmC544AkuYtof+PEBVd9j61wMRRRS6t4lbw5l1kF8N
BmGF2fqhkVKufiZnNFN+x4+gLeESr4ahBCwwNS1fp054JmezznMpZpzfNXeEp7s/
yP25RKPC0f5xTIFl0GklbHgHKDzk+5AykXoDL7yS2dYqcH1nALXgR2hrwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJaa9SZsePd+vfL++LqKieqAAHaMB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvVWxwcjFKbXg0OTM2OTh2NzR1b3FKNm9BQWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU+MA0G
CSqGSIb3DQEBCwUAA4IBAQCvr6Gl5D5I3YTwofBg1AYWlEr3A7zzRHYBycH9lE99
9l++Iys3gNMuIYGiV16iMa/qAAVFwOiS22YaSTRR8uMqeA3r+7CFl6mxAJ8Zkb6m
cMimpQj6A6hid5I03ZKighFRoKvoJ1I3kd+0soDG2rarccfVTTJyBdAQV/NAd111
lFhvENxrzMXcJqiykFdbRrEUJrColBx98m2u8X2aKAAike3+bihmoukES0+okwcR
okZ3M7mUdJGHtnBiQoOB506m+GkD6440yIy72fc+ZCUknwiHI7wXNhIDz+vkI768
wUMaI9hQ6Pr+QB90InRNE7bPGgVgILIXhQUfTDK91m/+
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:05 2025 by rpki-client