Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uqdpFYbEZmSQcI9e2QxzA21bJyU.roa
File: uqdpFYbEZmSQcI9e2QxzA21bJyU.roa (raw, json)
Hash identifier: wfLrEHcgt+ndgHwz1K4AVmoTfmzIEA6xcdAY4tC7VEA=
Subject key identifier: BA:A7:69:15:86:C4:66:64:90:70:8F:5E:D9:0C:73:03:6D:5B:27:25
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01941F8C5DA304EC655734206892441802E3
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uqdpFYbEZmSQcI9e2QxzA21bJyU.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 92.51.36.0/24 maxlen: 24
92.51.37.0/24 maxlen: 24
92.51.38.0/24 maxlen: 24
92.51.39.0/24 maxlen: 24
92.51.44.0/24 maxlen: 24
92.51.45.0/24 maxlen: 24
92.51.46.0/24 maxlen: 24
92.51.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5d:a3:04:ec:65:57:34:20:68:92:44:18:02:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa7691586c4666490708f5ed90c73036d5b2725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:2f:a0:3f:1d:4e:1e:75:52:64:e9:e7:08:
f6:74:cd:7b:33:90:29:e4:0e:17:a4:be:cc:56:64:
eb:82:2b:e7:a6:49:e1:a8:61:8a:69:76:f5:56:d6:
a4:af:d3:26:58:52:ab:aa:0a:c6:89:0c:da:d7:bd:
31:57:53:b1:42:70:c2:ea:01:68:2d:22:48:44:98:
b5:6c:80:d3:75:39:69:fa:58:4a:8b:ee:55:3a:07:
7b:ca:dc:d4:d0:b0:4f:7c:35:48:21:7e:4d:13:36:
69:1f:27:52:e4:6c:eb:da:cf:a3:4f:90:a8:b4:f2:
17:0d:0e:40:9d:54:09:58:fe:ec:0c:16:d9:49:29:
76:f1:82:b2:ba:9f:4d:8b:89:2c:e3:3a:c3:44:37:
f2:eb:18:9a:a8:9c:ee:9b:86:9d:3b:9f:ac:b5:5e:
d8:36:ab:ab:72:c1:e0:76:95:48:18:b2:8b:f7:88:
8d:e9:63:09:69:83:e4:77:d4:5b:2b:cd:fa:d3:d0:
68:23:29:4f:cd:51:44:94:72:d0:7e:3a:96:2e:14:
d9:0d:bf:1d:72:9e:d3:b8:09:dc:76:a3:ac:a2:b1:
e1:bd:91:d1:72:20:ef:27:db:ab:16:4c:2b:16:fa:
be:c1:35:ce:04:fa:13:2f:49:13:06:e2:7d:dc:4e:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:69:15:86:C4:66:64:90:70:8F:5E:D9:0C:73:03:6D:5B:27:25
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/uqdpFYbEZmSQcI9e2QxzA21bJyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.36.0/22
92.51.44.0/22
Signature Algorithm: sha256WithRSAEncryption
53:13:f5:5a:48:a9:64:e7:c3:e8:6a:e1:be:6d:53:2c:3a:b2:
17:57:5d:bf:1c:3c:c3:18:04:cf:0a:53:46:b1:cc:bb:45:6e:
5f:16:0a:82:8f:e7:bc:53:f6:68:3a:b2:13:3a:37:d8:3e:17:
63:6f:9d:03:df:fa:7c:f8:32:d3:45:05:c0:47:2d:96:47:dd:
26:9a:04:c4:ca:7e:70:ad:8a:ac:37:75:e1:cb:c7:cd:65:15:
92:47:9f:54:e4:63:c3:7d:5c:6c:cd:19:59:22:d1:48:02:d1:
f8:29:87:e8:0c:73:30:87:cd:c5:54:50:18:75:f2:46:98:86:
8e:52:f7:33:e6:90:ec:a5:0c:82:97:67:50:0d:e1:2d:fd:c0:
80:3c:47:87:af:a6:f5:eb:35:ea:c7:29:36:64:8a:33:fe:9e:
f3:c9:fd:8e:b6:7a:74:d9:b5:a1:66:60:62:b9:c6:66:25:ad:
fd:bb:8a:c6:d7:fe:ba:62:1b:5d:4a:91:7f:3a:c4:46:d2:29:
99:38:90:ba:05:f9:49:c8:59:a0:dc:d3:11:f0:56:2e:a9:4f:
c6:a3:a8:6a:c1:72:fe:56:8c:dd:a2:3b:28:21:a3:28:c0:01:
00:5d:23:b7:a2:c9:35:d9:f8:4f:3f:ff:d7:97:93:4b:fc:a9:
d7:89:a9:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjF2jBOxlVzQgaJJEGALjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjUwMTAxMDE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWE3NjkxNTg2YzQ2NjY0OTA3MDhmNWVkOTBjNzMwMzZkNWIyNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAkvoD8dTh51UmTp5wj2dM17M5Ap
5A4XpL7MVmTrgivnpknhqGGKaXb1Vtakr9MmWFKrqgrGiQza170xV1OxQnDC6gFo
LSJIRJi1bIDTdTlp+lhKi+5VOgd7ytzU0LBPfDVIIX5NEzZpHydS5Gzr2s+jT5Co
tPIXDQ5AnVQJWP7sDBbZSSl28YKyup9Ni4ks4zrDRDfy6xiaqJzum4adO5+stV7Y
NqurcsHgdpVIGLKL94iN6WMJaYPkd9RbK83609BoIylPzVFElHLQfjqWLhTZDb8d
cp7TuAncdqOsorHhvZHRciDvJ9urFkwrFvq+wTXOBPoTL0kTBuJ93E4OAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLqnaRWGxGZkkHCPXtkMcwNtWyclMB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvdXFkcEZZYkVabVNRY0k5ZTJReHpBMjFiSnlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXDMkAwQC
XDMsMA0GCSqGSIb3DQEBCwUAA4IBAQBTE/VaSKlk58PoauG+bVMsOrIXV12/HDzD
GATPClNGscy7RW5fFgqCj+e8U/ZoOrITOjfYPhdjb50D3/p8+DLTRQXARy2WR90m
mgTEyn5wrYqsN3Xhy8fNZRWSR59U5GPDfVxszRlZItFIAtH4KYfoDHMwh83FVFAY
dfJGmIaOUvcz5pDspQyCl2dQDeEt/cCAPEeHr6b16zXqxyk2ZIoz/p7zyf2Otnp0
2bWhZmBiucZmJa39u4rG1/66YhtdSpF/OsRG0imZOJC6BflJyFmg3NMR8FYuqU/G
o6hqwXL+VozdojsoIaMowAEAXSO3osk12fhPP//Xl5NL/KnXialA
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:53 2025 by rpki-client