Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uGL_JZqTZZQvI24uzHuKmJCDbsU.roa
File: uGL_JZqTZZQvI24uzHuKmJCDbsU.roa (raw, json)
Hash identifier: zAwmg64kWP0/E2m7ghT+2Kcec9VMNpJUDGiBIiUsQTE=
Subject key identifier: B8:62:FF:25:9A:93:65:94:2F:23:6E:2E:CC:7B:8A:98:90:83:6E:C5
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195A5AF15A5C6919955CB6445A555AB6C9D
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uGL_JZqTZZQvI24uzHuKmJCDbsU.roa
Signing time: Mon 17 Mar 2025 19:57:49 +0000
ROA not before: Mon 17 Mar 2025 19:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 88.209.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:af:15:a5:c6:91:99:55:cb:64:45:a5:55:ab:6c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 17 19:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b862ff259a9365942f236e2ecc7b8a9890836ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:66:db:0a:3b:08:9e:96:8b:dc:c3:21:16:
1c:7a:a7:d7:ab:da:82:59:63:ab:31:0f:7d:b4:4c:
b1:ee:7a:7c:37:4f:90:b2:bb:f3:01:b9:a1:1a:18:
b5:5f:7e:86:0a:8c:d2:6e:d9:0d:a5:dc:77:ad:3f:
8b:ac:df:3d:2d:75:13:de:c3:81:cd:f0:64:84:8c:
e1:16:b6:0e:d0:1b:80:1e:b3:60:08:32:42:d7:5d:
f5:85:4a:9c:4a:aa:3b:d2:61:65:55:e3:13:56:e6:
d9:29:f1:c1:96:4b:b6:07:70:4e:ad:6b:88:be:fe:
0c:c1:84:41:2c:10:15:c4:00:17:d9:c0:c1:da:8c:
90:19:52:ea:2d:59:83:4b:db:a7:45:8c:7e:ef:d9:
34:42:ea:e9:58:2f:29:87:60:10:7d:cb:bc:24:34:
32:07:e8:46:27:a1:e1:5e:e0:13:70:e2:94:3b:ba:
61:32:b1:c6:37:4b:67:9a:9b:15:77:b2:3e:b0:c5:
2c:2c:45:28:6e:20:2b:a6:62:bc:43:75:df:0a:f0:
b3:59:13:7c:09:a5:78:38:35:7f:6a:ab:3a:0f:47:
a1:94:8f:a9:de:ff:56:b7:1d:76:dc:a8:db:57:15:
d4:6c:96:87:0e:6b:ac:61:04:c6:e1:87:b5:c2:25:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:62:FF:25:9A:93:65:94:2F:23:6E:2E:CC:7B:8A:98:90:83:6E:C5
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/uGL_JZqTZZQvI24uzHuKmJCDbsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8c:35:45:44:01:b2:71:59:56:db:f3:a8:83:20:57:f9:f5:
93:f5:83:be:98:fe:96:55:81:c1:ea:e3:c1:8f:72:33:b1:ac:
84:56:46:83:51:79:87:2a:8e:1e:ea:fa:66:24:a2:bb:42:35:
ed:85:7b:e1:cb:56:2f:60:a4:d7:23:1b:8d:1b:c4:31:0c:91:
c3:b2:d7:13:08:e3:43:8e:11:26:64:e3:57:dc:91:6e:c4:c7:
e9:95:78:2c:33:e9:c9:d0:b6:f1:f6:bc:02:32:71:5a:c8:5e:
b7:2d:74:e0:0d:75:f2:07:90:ff:48:55:78:f2:91:7f:dc:a9:
0e:a7:5d:cd:75:58:81:2d:f3:fa:c3:b8:3b:7a:e9:20:42:fa:
95:90:8c:23:98:05:77:8c:e6:a4:23:7f:1a:bc:6a:00:23:db:
50:59:7e:a9:33:c8:ab:d0:fb:45:55:e7:87:4f:70:63:5e:76:
7c:1d:2c:0c:56:a3:a4:93:f1:b5:f6:74:81:fd:30:9d:43:7c:
62:ea:4a:36:7a:7b:55:93:eb:2b:bd:6f:2c:02:2b:6c:98:39:
2d:58:97:f2:75:3e:88:fd:eb:7b:f0:15:96:6a:02:54:eb:00:
b4:29:09:64:87:2e:17:e1:fc:9b:fa:d4:aa:83:bd:b0:b5:ef:
5b:d6:1c:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWlrxWlxpGZVctkRaVVq2ydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwMzE3MTk1NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODYyZmYyNTlhOTM2NTk0MmYyMzZlMmVjYzdiOGE5ODkwODM2ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Zm2wo7CJ6Wi9zDIRYceqfXq9qC
WWOrMQ99tEyx7np8N0+QsrvzAbmhGhi1X36GCozSbtkNpdx3rT+LrN89LXUT3sOB
zfBkhIzhFrYO0BuAHrNgCDJC1131hUqcSqo70mFlVeMTVubZKfHBlku2B3BOrWuI
vv4MwYRBLBAVxAAX2cDB2oyQGVLqLVmDS9unRYx+79k0QurpWC8ph2AQfcu8JDQy
B+hGJ6HhXuATcOKUO7phMrHGN0tnmpsVd7I+sMUsLEUobiArpmK8Q3XfCvCzWRN8
CaV4ODV/aqs6D0ehlI+p3v9Wtx123KjbVxXUbJaHDmusYQTG4Ye1wiXlPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhi/yWak2WULyNuLsx7ipiQg27FMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvdUdMX0pacVRaWlF2STI0dXpIdUttSkNEYnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNHYMA0G
CSqGSIb3DQEBCwUAA4IBAQAajDVFRAGycVlW2/OogyBX+fWT9YO+mP6WVYHB6uPB
j3IzsayEVkaDUXmHKo4e6vpmJKK7QjXthXvhy1YvYKTXIxuNG8QxDJHDstcTCOND
jhEmZONX3JFuxMfplXgsM+nJ0Lbx9rwCMnFayF63LXTgDXXyB5D/SFV48pF/3KkO
p13NdViBLfP6w7g7eukgQvqVkIwjmAV3jOakI38avGoAI9tQWX6pM8ir0PtFVeeH
T3BjXnZ8HSwMVqOkk/G19nSB/TCdQ3xi6ko2entVk+srvW8sAitsmDktWJfydT6I
/et78BWWagJU6wC0KQlkhy4X4fyb+tSqg72wte9b1hyt
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:15:44 2025 by rpki-client