Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/uqWPOGEjKAK6cva-7ggQuyGZx84.roa
File: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (raw, json)
Hash identifier: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=
Subject key identifier: BA:A5:8F:38:61:23:28:02:BA:72:F6:BE:EE:08:10:BB:21:99:C7:CE
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 0194214452B483C881B9268AB327CAC6E1B0
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/uqWPOGEjKAK6cva-7ggQuyGZx84.roa
Signing time: Wed 01 Jan 2025 09:48:33 +0000
ROA not before: Wed 01 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34300
IP address blocks: 62.173.128.0/19 maxlen: 32
85.93.128.0/19 maxlen: 32
185.31.160.0/22 maxlen: 32
185.113.108.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:52:b4:83:c8:81:b9:26:8a:b3:27:ca:c6:e1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa58f3861232802ba72f6beee0810bb2199c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e6:99:e4:05:d1:b4:25:d4:1e:31:ca:fa:9d:
62:f1:d0:70:42:85:24:5d:8f:3b:99:d5:a1:e5:14:
f9:4d:e1:df:13:57:7a:88:fd:17:ea:70:0b:9e:8e:
e1:7e:dd:f0:a2:9a:63:f2:35:03:bc:3b:e3:e4:54:
83:fc:1a:90:4e:9a:f8:4c:ca:ba:3b:dd:99:a6:65:
92:44:46:ac:69:31:94:a2:94:78:13:51:23:86:f0:
3d:ec:c3:44:f2:33:ef:32:7c:f5:db:04:7d:08:a1:
47:16:14:45:ea:1b:11:85:2d:95:4d:b2:ab:70:14:
6a:9e:35:90:02:8d:e8:db:3b:7f:b4:24:37:b0:f2:
6d:ca:f6:a5:50:07:7e:e5:01:db:ca:3c:69:72:59:
93:32:05:ca:3e:22:ef:5c:98:63:93:af:c0:3e:83:
39:09:65:08:9c:5e:7a:86:91:32:36:f8:cc:06:70:
33:e8:cb:bf:76:fe:eb:83:0b:c1:cf:41:e7:bd:2e:
a5:66:5b:59:05:37:dc:b8:9d:6e:5c:fc:5f:86:b0:
96:b1:1b:fb:c0:24:98:01:3e:04:bf:45:a2:32:aa:
cc:52:3f:65:11:f4:7d:88:59:7e:7b:81:de:21:03:
88:73:c7:93:e0:c6:87:0d:eb:1d:dd:86:f2:41:ee:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A5:8F:38:61:23:28:02:BA:72:F6:BE:EE:08:10:BB:21:99:C7:CE
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/uqWPOGEjKAK6cva-7ggQuyGZx84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.128.0/19
85.93.128.0/19
185.31.160.0/22
185.113.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:6d:62:6c:dd:ce:63:9a:1d:7e:22:22:31:5f:a2:6f:b6:19:
f3:b8:66:42:60:22:f3:2c:51:f7:02:61:fb:11:75:8d:ca:00:
63:71:28:50:51:7c:6b:1d:26:a0:5a:30:19:4c:a0:19:e3:2d:
ec:1b:38:2b:25:4d:ef:ad:03:5e:03:1a:81:4f:0f:17:ee:d7:
81:00:97:1a:c0:f9:fa:ca:d6:d7:b3:53:cc:32:4e:d0:1a:1e:
41:0e:f0:8c:c3:ab:0a:2f:0e:44:aa:9c:9f:7f:0e:04:3b:13:
a6:ad:3c:73:95:b6:3c:de:c8:ca:1b:f1:de:a2:bd:24:a6:64:
41:5e:db:ed:27:00:58:09:2b:b6:ac:6f:30:75:36:6a:22:e5:
77:67:73:28:a9:e5:bc:23:30:13:40:cf:bf:68:44:49:89:c8:
e5:2e:e3:1c:43:d1:f6:f8:04:e0:7a:99:e3:a4:f2:e9:e5:4c:
76:22:61:11:d0:c4:b4:7d:9e:86:66:8b:5a:ee:76:31:5a:2d:
13:2f:27:e9:6e:ed:e4:8a:f1:57:68:58:1a:67:70:56:f4:68:
a4:3f:ed:89:31:5b:12:66:33:65:ce:b5:96:e4:eb:e5:79:44:
c4:d5:c7:a0:63:33:33:f0:b4:8d:a2:d9:7f:3f:20:5e:cb:d1:
ed:00:c8:96
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQhRFK0g8iBuSaKsyfKxuGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWRmMTE3NzRmNDQwN2FkZGJkZjNjZmJhNGMxZTdhYTAy
NDIyMjMwHhcNMjUwMTAxMDk0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWE1OGYzODYxMjMyODAyYmE3MmY2YmVlZTA4MTBiYjIxOTljN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOaZ5AXRtCXUHjHK+p1i8dBwQoUk
XY87mdWh5RT5TeHfE1d6iP0X6nALno7hft3woppj8jUDvDvj5FSD/BqQTpr4TMq6
O92ZpmWSREasaTGUopR4E1EjhvA97MNE8jPvMnz12wR9CKFHFhRF6hsRhS2VTbKr
cBRqnjWQAo3o2zt/tCQ3sPJtyvalUAd+5QHbyjxpclmTMgXKPiLvXJhjk6/APoM5
CWUInF56hpEyNvjMBnAz6Mu/dv7rgwvBz0HnvS6lZltZBTfcuJ1uXPxfhrCWsRv7
wCSYAT4Ev0WiMqrMUj9lEfR9iFl+e4HeIQOIc8eT4MaHDesd3YbyQe7BswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLqljzhhIygCunL2vu4IELshmcfOMB8GA1UdIwQY
MBaAFLPt8Rd09EB63b3zz7pMHnqgJCIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgt
YWRjYTFhNTdhYjBjLzEvdXFXUE9HRWpLQUs2Y3ZhLTdnZ1F1eUdaeDg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgtYWRjYTFhNTdhYjBj
LzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFPq2AAwQF
VV2AAwQCuR+gAwQCuXFsMA0GCSqGSIb3DQEBCwUAA4IBAQB9bWJs3c5jmh1+IiIx
X6JvthnzuGZCYCLzLFH3AmH7EXWNygBjcShQUXxrHSagWjAZTKAZ4y3sGzgrJU3v
rQNeAxqBTw8X7teBAJcawPn6ytbXs1PMMk7QGh5BDvCMw6sKLw5Eqpyffw4EOxOm
rTxzlbY83sjKG/Heor0kpmRBXtvtJwBYCSu2rG8wdTZqIuV3Z3MoqeW8IzATQM+/
aERJicjlLuMcQ9H2+ATgepnjpPLp5Ux2ImER0MS0fZ6GZota7nYxWi0TLyfpbu3k
ivFXaFgaZ3BW9GikP+2JMVsSZjNlzrWW5OvleUTE1cegYzMz8LSNotl/PyBey9Ht
AMiW
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:50 2025 by rpki-client