Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/UZGcM2ffX81NtAhfATE7LMKcmU0.roa
File: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (raw, json)
Hash identifier: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=
Subject key identifier: 51:91:9C:33:67:DF:5F:CD:4D:B4:08:5F:01:31:3B:2C:C2:9C:99:4D
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 01942143F9563B3E1148D575B3F1545D3F01
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/UZGcM2ffX81NtAhfATE7LMKcmU0.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2830
IP address blocks: 193.58.222.0/24 maxlen: 24
193.58.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:56:3b:3e:11:48:d5:75:b3:f1:54:5d:3f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51919c3367df5fcd4db4085f01313b2cc29c994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:2a:c6:f6:98:60:ae:18:ba:10:b3:0d:73:
ee:46:35:5a:1a:66:43:54:49:68:b2:16:ad:17:31:
58:44:0e:f7:73:ac:43:e7:b5:a9:d7:03:2a:01:64:
f2:91:74:80:35:42:a6:91:ac:2e:ec:5e:5a:75:62:
7a:06:4f:a4:9e:0c:dc:5c:b4:c2:04:d4:b3:22:fe:
ab:7e:94:92:6e:93:b7:9a:60:eb:50:4c:c1:d2:f5:
62:ab:5b:2c:80:18:f5:e2:61:5c:5e:6c:2f:6b:69:
db:ef:53:bf:99:4e:e3:0e:b3:96:9d:36:2a:ab:2a:
9b:5d:67:7a:01:19:05:b2:61:4f:2c:54:28:d8:5c:
14:4f:f5:bf:81:13:c9:8c:a0:b7:19:0d:e3:98:57:
39:77:32:94:6d:82:a9:7f:51:86:16:06:bb:af:85:
3d:c6:c9:d1:13:19:d6:c1:8d:79:75:af:64:c5:8d:
36:5b:10:77:85:8c:57:4b:50:e2:e6:1b:93:cb:78:
78:4b:ce:60:e5:75:6d:b7:7e:1b:82:2e:f7:d5:c4:
e3:be:bc:4c:85:18:9b:02:f6:42:f7:ff:50:58:a5:
d5:e7:8c:b7:6a:ba:4d:31:b0:c7:56:67:da:e8:b6:
ca:8f:06:1e:c7:2e:1e:29:bb:07:cb:ed:56:a0:2e:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:91:9C:33:67:DF:5F:CD:4D:B4:08:5F:01:31:3B:2C:C2:9C:99:4D
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/UZGcM2ffX81NtAhfATE7LMKcmU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.222.0/23
Signature Algorithm: sha256WithRSAEncryption
17:39:5b:ef:58:7a:08:c2:74:08:8f:c2:1f:20:4a:39:a8:58:
ab:fa:25:94:70:29:cd:bd:1e:c1:d0:de:16:1c:28:4c:44:a1:
bc:f4:69:34:18:ee:02:19:41:da:81:ee:44:4e:21:7f:91:b9:
94:7f:6d:7e:8a:68:a0:a9:b7:37:c9:de:f2:52:db:4c:f9:dc:
93:59:83:a4:8f:c7:fc:0f:5d:fd:0c:70:f5:d1:02:d2:ac:6e:
86:de:26:96:05:f4:2c:3f:fb:8c:67:5d:15:ce:35:04:1e:d6:
33:8a:d8:9a:9c:4e:7a:05:1c:ab:04:88:85:65:5d:f5:3a:3a:
e5:84:cc:1f:8c:1e:a8:42:79:7c:19:63:0f:d8:3f:40:8a:8a:
90:a9:55:1a:ac:95:c7:25:72:e6:47:e6:ec:01:be:b1:5c:ae:
07:8d:de:c4:12:be:e6:0b:1e:ca:19:c5:57:c6:d8:ab:24:a6:
49:0f:96:60:35:a2:6c:85:d3:93:23:11:86:40:c6:f6:aa:48:
f3:24:b0:8c:5e:f8:c9:65:8f:fd:bb:0c:3d:69:bd:00:22:12:
52:fa:71:be:2b:65:38:58:38:c8:74:8a:e6:cb:d0:1a:f1:a9:
15:e6:b4:59:a8:50:4c:19:34:4e:b7:66:ba:24:48:7d:e1:ac:
f6:4c:4c:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/lWOz4RSNV1s/FUXT8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4
ZDQ3OWYwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTkxOWMzMzY3ZGY1ZmNkNGRiNDA4NWYwMTMxM2IyY2MyOWM5OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u0qxvaYYK4YuhCzDXPuRjVaGmZD
VEloshatFzFYRA73c6xD57Wp1wMqAWTykXSANUKmkawu7F5adWJ6Bk+kngzcXLTC
BNSzIv6rfpSSbpO3mmDrUEzB0vViq1ssgBj14mFcXmwva2nb71O/mU7jDrOWnTYq
qyqbXWd6ARkFsmFPLFQo2FwUT/W/gRPJjKC3GQ3jmFc5dzKUbYKpf1GGFga7r4U9
xsnRExnWwY15da9kxY02WxB3hYxXS1Di5huTy3h4S85g5XVtt34bgi731cTjvrxM
hRibAvZC9/9QWKXV54y3arpNMbDHVmfa6LbKjwYexy4eKbsHy+1WoC5TEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGRnDNn31/NTbQIXwExOyzCnJlNMB8GA1UdIwQY
MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt
YjE2NmFlMmVmMjg3LzEvVVpHY00yZmZYODFOdEFoZkFURTdMTUtjbVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3
LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTreMA0G
CSqGSIb3DQEBCwUAA4IBAQAXOVvvWHoIwnQIj8IfIEo5qFir+iWUcCnNvR7B0N4W
HChMRKG89Gk0GO4CGUHage5ETiF/kbmUf21+imigqbc3yd7yUttM+dyTWYOkj8f8
D139DHD10QLSrG6G3iaWBfQsP/uMZ10VzjUEHtYzitianE56BRyrBIiFZV31Ojrl
hMwfjB6oQnl8GWMP2D9AioqQqVUarJXHJXLmR+bsAb6xXK4Hjd7EEr7mCx7KGcVX
xtirJKZJD5ZgNaJshdOTIxGGQMb2qkjzJLCMXvjJZY/9uww9ab0AIhJS+nG+K2U4
WDjIdIrmy9Aa8akV5rRZqFBMGTROt2a6JEh94az2TEyT
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:32 2025 by rpki-client