Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa
File: uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa (raw, json)
Hash identifier: c70DUe86Dscr+BOk1RbQf+gmFBszpSvbzYy8111R1f4=
Subject key identifier: B9:61:C7:42:A0:70:B2:6F:91:80:5E:81:1A:53:EB:08:88:94:E6:EF
Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Certificate serial: 019427471D5EF3C86EAAAA24079DBA822FC4
Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa
Signing time: Thu 02 Jan 2025 13:49:19 +0000
ROA not before: Thu 02 Jan 2025 13:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60652
IP address blocks: 195.137.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:1d:5e:f3:c8:6e:aa:aa:24:07:9d:ba:82:2f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Validity
Not Before: Jan 2 13:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b961c742a070b26f91805e811a53eb088894e6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:21:df:91:84:9f:53:14:3d:27:97:e3:ed:af:
95:4e:40:d1:a3:6c:ef:91:f2:b5:02:80:2b:a7:91:
c4:71:e0:e5:ce:46:32:2c:86:4d:2b:2e:71:e9:4f:
45:01:b9:80:2c:17:1f:f1:6c:d5:51:1d:2a:18:3f:
f0:19:fb:af:d7:cb:82:87:11:51:fb:40:68:f9:30:
a1:43:45:6d:cc:3c:f8:64:32:bb:a0:a8:fa:38:8a:
e4:3b:e9:54:1a:31:a6:4f:1d:23:a3:0c:28:13:ce:
d9:89:32:7e:f6:59:17:dc:06:b0:67:84:40:bb:b7:
c1:48:73:93:a0:62:c4:a1:64:9f:da:a6:c4:87:4d:
19:af:af:69:40:f3:c4:c3:c6:e7:9d:ff:ad:5b:95:
70:04:61:9c:29:81:f4:5c:bb:d8:67:f8:d3:74:14:
4f:6e:00:82:93:87:44:62:e6:f5:d7:7d:36:3a:3d:
2b:82:5a:21:9e:0a:f4:e8:a1:7e:f6:b6:ba:0f:94:
5a:9a:e5:c3:75:b1:26:48:d2:7f:74:bf:a6:9d:4e:
c1:f4:84:67:fa:e0:47:ad:15:f5:52:5a:a8:6c:5f:
5d:56:66:5c:cf:ff:a8:e6:42:30:26:5a:60:cc:0c:
cf:1c:78:a0:4b:95:58:74:2a:49:73:5a:9d:b8:e5:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:61:C7:42:A0:70:B2:6F:91:80:5E:81:1A:53:EB:08:88:94:E6:EF
X509v3 Authority Key Identifier:
keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c3:c8:7b:e1:2c:f7:24:cd:46:27:58:98:76:14:20:e6:e9:
2d:1b:8b:1a:6a:5e:60:15:de:32:25:fa:97:36:ee:d6:73:9b:
18:07:f3:6b:99:f6:67:f3:17:46:1b:20:93:8c:b2:f9:07:79:
0b:49:b4:78:83:ac:ca:5b:53:f7:dc:99:21:5f:68:62:2d:cd:
b8:54:ef:64:7e:ca:1b:22:d1:51:5a:c0:07:9e:8e:e0:ff:d1:
56:dc:ae:57:f8:65:7e:bf:37:50:8f:df:47:9d:0e:2a:22:3e:
3e:00:03:f8:10:14:53:a3:65:e3:d6:e7:6f:25:7f:a3:56:d2:
3a:6b:d3:e0:1a:3b:52:38:a3:3f:69:61:cd:b6:a6:1e:0f:3a:
9b:95:89:5c:e9:eb:66:f1:dc:bb:d3:b8:d0:9e:ac:90:4b:ad:
15:f6:d8:9c:67:97:00:2c:8d:0e:5b:81:58:6e:a3:24:32:dd:
a5:51:59:ed:ac:6a:d1:40:6a:ba:a2:71:5b:55:20:94:26:8b:
e7:1b:c9:52:ac:fc:74:88:21:e5:be:dd:96:03:da:e4:4e:1f:
a8:02:e7:3d:90:2c:e0:b3:7d:8a:c7:21:49:bf:63:f5:f0:e0:
9b:81:eb:ac:1a:f4:d1:0e:86:a4:e0:51:d9:a9:47:bb:e1:61:
c5:90:38:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRx1e88huqqokB526gi/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDA4Y2RjNmE0MzBlZjBkYTg4Mjk5MTcyNTZiNmFkOGQw
YTM2ZjkwHhcNMjUwMTAyMTM0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTYxYzc0MmEwNzBiMjZmOTE4MDVlODExYTUzZWIwODg4OTRlNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CHfkYSfUxQ9J5fj7a+VTkDRo2zv
kfK1AoArp5HEceDlzkYyLIZNKy5x6U9FAbmALBcf8WzVUR0qGD/wGfuv18uChxFR
+0Bo+TChQ0VtzDz4ZDK7oKj6OIrkO+lUGjGmTx0jowwoE87ZiTJ+9lkX3AawZ4RA
u7fBSHOToGLEoWSf2qbEh00Zr69pQPPEw8bnnf+tW5VwBGGcKYH0XLvYZ/jTdBRP
bgCCk4dEYub11302Oj0rglohngr06KF+9ra6D5RamuXDdbEmSNJ/dL+mnU7B9IRn
+uBHrRX1UlqobF9dVmZcz/+o5kIwJlpgzAzPHHigS5VYdCpJc1qduOUvIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLlhx0KgcLJvkYBegRpT6wiIlObvMB8GA1UdIwQY
MBaAFKLQjNxqQw7w2ogpkXJWtq2NCjb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzE5Y2MtMGY1My00ZDEwLWFmOTMt
ZGMwMWExOWIyODU2LzEvdVdISFFxQndzbS1SZ0Y2QkdsUHJDSWlVNXU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzE5Y2MtMGY1My00ZDEwLWFmOTMtZGMwMWExOWIyODU2
LzEvb3RDTTNHcEREdkRhaUNtUmNsYTJyWTBLTnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4nmMA0G
CSqGSIb3DQEBCwUAA4IBAQBMw8h74Sz3JM1GJ1iYdhQg5uktG4saal5gFd4yJfqX
Nu7Wc5sYB/NrmfZn8xdGGyCTjLL5B3kLSbR4g6zKW1P33JkhX2hiLc24VO9kfsob
ItFRWsAHno7g/9FW3K5X+GV+vzdQj99HnQ4qIj4+AAP4EBRTo2Xj1udvJX+jVtI6
a9PgGjtSOKM/aWHNtqYeDzqblYlc6etm8dy707jQnqyQS60V9ticZ5cALI0OW4FY
bqMkMt2lUVntrGrRQGq6onFbVSCUJovnG8lSrPx0iCHlvt2WA9rkTh+oAuc9kCzg
s32KxyFJv2P18OCbgeusGvTRDoak4FHZqUe74WHFkDi7
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:44 2025 by rpki-client