Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/u_xpoEFdMS4XphSvfLjhMqrSVCA.roa
File: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (raw, json)
Hash identifier: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=
Subject key identifier: BB:FC:69:A0:41:5D:31:2E:17:A6:14:AF:7C:B8:E1:32:AA:D2:54:20
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7FCB6AF480138E7965B642DBE996E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/u_xpoEFdMS4XphSvfLjhMqrSVCA.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 5.181.180.0/24 maxlen: 24
5.181.181.0/24 maxlen: 24
185.176.93.0/24 maxlen: 24
185.176.95.0/24 maxlen: 24
185.229.221.0/24 maxlen: 24
185.229.222.0/24 maxlen: 24
185.229.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fc:b6:af:48:01:38:e7:96:5b:64:2d:be:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbfc69a0415d312e17a614af7cb8e132aad25420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:d7:1b:05:6d:d7:52:a5:63:0b:ff:68:2b:
2d:01:3d:2d:44:16:ca:34:5c:a3:da:9d:0c:f0:97:
00:7d:fb:12:f8:50:da:6d:cd:98:d4:aa:b4:8d:10:
91:72:71:29:61:00:c7:1c:cc:c8:8f:10:1f:6b:bc:
ed:a7:4c:9d:7a:aa:08:28:b4:9e:f9:7f:47:91:04:
a5:cb:39:63:91:c8:2b:f4:ad:d1:da:df:79:ea:3f:
25:60:7d:8a:81:c2:bb:e9:b1:cf:df:d5:0f:a8:1f:
08:80:8b:c5:45:49:70:f9:95:55:59:9d:c7:62:3b:
52:df:a2:6e:de:8d:32:34:5f:e1:84:ca:d9:ba:a3:
fa:1e:14:4c:9a:b7:80:97:b2:ee:dd:ee:65:86:e2:
ed:ee:4f:ee:4a:47:2e:e8:12:f5:fa:2c:c8:67:09:
54:88:66:d5:3d:a9:64:1e:73:a1:01:29:57:34:b5:
7b:88:dd:35:d6:44:2c:76:0f:f1:e7:0d:f9:6e:aa:
ee:7a:27:af:f3:1e:45:a1:3e:d0:13:b4:88:1c:b1:
78:c3:89:d9:e5:57:3f:94:ab:a3:f7:a4:a9:c7:ba:
43:db:9b:c7:61:4b:c0:98:09:44:ea:5c:b2:88:bd:
a8:f0:7d:15:be:42:a5:f7:94:cd:0e:8d:f1:ef:58:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:69:A0:41:5D:31:2E:17:A6:14:AF:7C:B8:E1:32:AA:D2:54:20
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/u_xpoEFdMS4XphSvfLjhMqrSVCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/23
185.176.93.0/24
185.176.95.0/24
185.229.221.0-185.229.223.255
Signature Algorithm: sha256WithRSAEncryption
b9:c6:a9:ea:6b:22:f1:1c:3e:ed:8e:8d:16:c4:01:82:04:8a:
fc:c5:3e:1e:50:aa:85:2e:98:9f:68:6c:dc:a8:86:73:11:4c:
f1:89:d9:c6:1a:95:81:b1:9d:d1:69:a2:a7:ab:ec:1c:55:06:
a8:26:dc:7c:3e:78:a1:c3:7f:bb:b1:ff:c5:a0:69:8c:4f:5b:
2b:94:4e:80:6e:b6:a7:c7:c4:30:91:bb:50:da:cd:e5:0b:74:
79:44:6e:f8:88:39:db:e5:01:38:3d:31:53:21:9f:35:02:4a:
c6:4a:a6:7e:f1:9c:4e:b1:1e:de:b5:75:d8:c7:2f:22:d0:61:
f4:84:e1:5f:7d:50:4a:ce:62:38:45:bc:5c:48:c1:ad:2e:5e:
1a:dc:95:7b:d1:63:16:71:7d:49:af:6d:fa:c3:4a:d4:5e:f0:
fe:e8:d5:16:7f:96:6e:71:a3:e2:73:67:e1:ca:08:ce:eb:f3:
93:65:5e:6a:76:8d:f5:06:c5:29:96:05:5a:6b:ab:3d:3d:d6:
fc:8b:c0:a2:76:d4:20:9e:58:24:59:14:17:49:19:3d:61:db:
f7:c0:fb:40:36:45:3f:52:bb:13:74:77:66:01:fb:c5:63:46:
7a:0b:bd:c0:61:73:f8:e4:d6:42:bc:7d:fd:1d:3d:0e:31:d5:
f1:5b:42:2b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQj1/y2r0gBOOeWW2QtvpluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMTAxMjE0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmZjNjlhMDQxNWQzMTJlMTdhNjE0YWY3Y2I4ZTEzMmFhZDI1NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEHXGwVt11KlYwv/aCstAT0tRBbK
NFyj2p0M8JcAffsS+FDabc2Y1Kq0jRCRcnEpYQDHHMzIjxAfa7ztp0ydeqoIKLSe
+X9HkQSlyzljkcgr9K3R2t956j8lYH2KgcK76bHP39UPqB8IgIvFRUlw+ZVVWZ3H
YjtS36Ju3o0yNF/hhMrZuqP6HhRMmreAl7Lu3e5lhuLt7k/uSkcu6BL1+izIZwlU
iGbVPalkHnOhASlXNLV7iN011kQsdg/x5w35bqrueiev8x5FoT7QE7SIHLF4w4nZ
5Vc/lKuj96Spx7pD25vHYUvAmAlE6lyyiL2o8H0VvkKl95TNDo3x71hKNwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFLv8aaBBXTEuF6YUr3y44TKq0lQgMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdV94cG9FRmRNUzRYcGhTdmZMamhNcXJTVkNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBBbW0AwQA
ubBdAwQAubBfMAwDBAC55d0DBAW55cAwDQYJKoZIhvcNAQELBQADggEBALnGqepr
IvEcPu2OjRbEAYIEivzFPh5QqoUumJ9obNyohnMRTPGJ2cYalYGxndFpoqer7BxV
Bqgm3Hw+eKHDf7ux/8WgaYxPWyuUToButqfHxDCRu1DazeULdHlEbviIOdvlATg9
MVMhnzUCSsZKpn7xnE6xHt61ddjHLyLQYfSE4V99UErOYjhFvFxIwa0uXhrclXvR
YxZxfUmvbfrDStRe8P7o1RZ/lm5xo+JzZ+HKCM7r85NlXmp2jfUGxSmWBVprqz09
1vyLwKJ21CCeWCRZFBdJGT1h2/fA+0A2RT9SuxN0d2YB+8VjRnoLvcBhc/jk1kK8
ff0dPQ4x1fFbQis=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:51 2025 by rpki-client