Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa
File: UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa (raw, json)
Hash identifier: c7iWfc2h0xfZuOGmHIC37VdlCYWmVoLvyubnSxmqlrQ=
Subject key identifier: 51:90:53:C0:3C:21:B1:D7:84:E8:BF:2D:33:B2:CC:82:4D:AF:71:04
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0195A9C0F42D4FD7A345B884090D0F153168
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa
Signing time: Tue 18 Mar 2025 14:55:49 +0000
ROA not before: Tue 18 Mar 2025 14:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.179.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:c0:f4:2d:4f:d7:a3:45:b8:84:09:0d:0f:15:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Mar 18 14:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=519053c03c21b1d784e8bf2d33b2cc824daf7104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:bc:f2:b4:fc:60:69:89:91:59:97:1a:8e:
04:db:67:dc:56:93:61:40:0d:50:45:6f:9c:8a:18:
4a:f2:2c:a5:f3:77:9b:54:d0:27:76:8e:66:95:f8:
ca:be:e3:63:75:72:b1:05:18:1d:63:f9:f3:1e:82:
b3:56:2a:9a:46:cd:ee:0e:10:3b:14:0c:87:0f:68:
ad:57:47:69:de:d5:e4:d9:0b:8e:1c:ff:79:e6:c5:
5d:da:33:65:3d:90:09:a2:24:d0:95:6f:fa:6e:16:
cc:08:eb:88:2f:9a:59:78:99:51:c9:ce:35:a8:8d:
12:53:00:c4:0b:e9:7e:ac:d3:33:b7:16:04:00:2b:
44:b0:07:44:7a:d2:90:5a:c5:8e:a3:c0:ef:eb:26:
5e:e1:89:88:61:37:6b:25:d7:f7:9b:d3:53:4a:d6:
c9:e7:ea:a3:3b:8d:23:79:87:b2:07:b8:01:62:b2:
b8:cd:c4:e8:11:f9:e8:9b:55:59:ab:ea:a5:42:f8:
7d:66:4e:42:54:b3:61:69:48:72:e2:07:63:d8:64:
01:ba:7b:10:7f:1e:d7:7e:b5:ad:b6:26:04:e9:a5:
41:c8:32:17:93:71:3d:21:02:1e:1d:92:9a:d8:4b:
47:38:2a:71:12:61:7e:01:2c:ac:07:7a:48:d5:7e:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:90:53:C0:3C:21:B1:D7:84:E8:BF:2D:33:B2:CC:82:4D:AF:71:04
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/19
Signature Algorithm: sha256WithRSAEncryption
85:04:7a:af:76:31:a5:4c:78:5c:12:83:22:e2:46:62:8f:10:
b1:40:3a:22:4f:81:40:e2:a6:53:57:ce:9a:66:fc:76:5c:65:
74:e0:36:54:1b:93:d4:e4:be:e4:ed:9e:7f:25:d8:63:22:ed:
28:55:e6:66:18:d7:ed:81:59:0c:3e:cd:fa:72:64:b2:62:dd:
16:81:ea:81:34:96:e2:4a:56:0a:2c:d6:dd:ef:39:10:5c:5c:
2e:a2:da:60:04:19:d7:6c:c4:16:91:6a:8d:ff:7c:5a:b0:47:
ff:be:f6:a6:df:fb:cf:cf:d5:18:6d:24:e7:a8:2c:f8:b8:d5:
90:3a:de:31:40:b3:b4:d0:59:77:af:a0:94:66:d5:24:26:b1:
f2:8d:4d:83:41:7e:93:dc:e0:50:26:aa:8b:65:df:73:b9:9c:
21:7d:68:c1:75:53:2d:89:ff:ee:8b:77:66:56:29:a3:be:88:
b2:0f:6f:e5:38:3f:54:d0:12:7f:69:2d:fc:67:42:31:a9:8b:
a9:19:33:c6:5d:12:7a:e9:fe:13:9f:69:12:0d:8c:e5:42:6f:
7a:3c:10:2c:3a:08:12:42:f9:d3:9a:0c:10:33:8c:83:b4:1d:
d2:a8:2a:17:f1:72:b3:94:45:2d:95:50:60:bd:52:97:fe:b1:
d4:fc:8d:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWpwPQtT9ejRbiECQ0PFTFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx
NjRiZDEwHhcNMjUwMzE4MTQ1NTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTkwNTNjMDNjMjFiMWQ3ODRlOGJmMmQzM2IyY2M4MjRkYWY3MTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDG88rT8YGmJkVmXGo4E22fcVpNh
QA1QRW+cihhK8iyl83ebVNAndo5mlfjKvuNjdXKxBRgdY/nzHoKzViqaRs3uDhA7
FAyHD2itV0dp3tXk2QuOHP955sVd2jNlPZAJoiTQlW/6bhbMCOuIL5pZeJlRyc41
qI0SUwDEC+l+rNMztxYEACtEsAdEetKQWsWOo8Dv6yZe4YmIYTdrJdf3m9NTStbJ
5+qjO40jeYeyB7gBYrK4zcToEfnom1VZq+qlQvh9Zk5CVLNhaUhy4gdj2GQBunsQ
fx7XfrWttiYE6aVByDIXk3E9IQIeHZKa2EtHOCpxEmF+ASysB3pI1X4FrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGQU8A8IbHXhOi/LTOyzIJNr3EEMB8GA1UdIwQY
MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt
NzM3MGZkODBkZjZjLzEvVVpCVHdEd2hzZGVFNkw4dE03TE1nazJ2Y1FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj
LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwrPAMA0G
CSqGSIb3DQEBCwUAA4IBAQCFBHqvdjGlTHhcEoMi4kZijxCxQDoiT4FA4qZTV86a
Zvx2XGV04DZUG5PU5L7k7Z5/JdhjIu0oVeZmGNftgVkMPs36cmSyYt0WgeqBNJbi
SlYKLNbd7zkQXFwuotpgBBnXbMQWkWqN/3xasEf/vvam3/vPz9UYbSTnqCz4uNWQ
Ot4xQLO00Fl3r6CUZtUkJrHyjU2DQX6T3OBQJqqLZd9zuZwhfWjBdVMtif/ui3dm
VimjvoiyD2/lOD9U0BJ/aS38Z0IxqYupGTPGXRJ66f4Tn2kSDYzlQm96PBAsOggS
QvnTmgwQM4yDtB3SqCoX8XKzlEUtlVBgvVKX/rHU/I0k
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:29 2025 by rpki-client