Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/bU4oK24H0haNNb6RLaWjZw43pzI.roa
File: bU4oK24H0haNNb6RLaWjZw43pzI.roa (raw, json)
Hash identifier: Bu7+RowLnRWpW/oivX4Xll1TQcI1jumKwyI4+ouZqfY=
Subject key identifier: 6D:4E:28:2B:6E:07:D2:16:8D:35:BE:91:2D:A5:A3:67:0E:37:A7:32
Certificate issuer: /CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Certificate serial: 0182CFD4F2FD66D18C4A63B6028B1F72A9FC
Authority key identifier: BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/bU4oK24H0haNNb6RLaWjZw43pzI.roa
Signing time: Wed 24 Aug 2022 12:30:15 +0000
ROA not before: Wed 24 Aug 2022 12:30:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44547
IP address blocks: 194.169.120.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:d4:f2:fd:66:d1:8c:4a:63:b6:02:8b:1f:72:a9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Validity
Not Before: Aug 24 12:30:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d4e282b6e07d2168d35be912da5a3670e37a732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:2d:1e:9b:d4:b8:7c:4d:2f:89:38:d2:32:
ad:ef:4c:80:c5:51:a4:08:09:f4:16:4d:91:37:3a:
67:1c:47:0c:fe:25:4a:a4:75:39:63:df:52:05:f8:
83:7a:e9:73:55:b2:f1:37:f1:7e:63:5b:4f:77:f9:
dc:d0:5a:18:bd:32:0f:15:66:84:bf:1a:8c:41:d1:
54:e2:fc:90:13:83:4f:05:61:e7:92:39:50:3d:79:
61:20:ca:49:ab:9a:4d:ca:db:18:27:4b:49:3a:72:
56:94:99:ca:bb:a2:40:ff:55:cd:ac:30:16:ab:64:
22:40:57:26:51:5e:3d:36:e1:75:19:15:f4:3d:41:
c7:da:1d:da:8a:74:32:db:50:2c:50:fd:34:11:19:
7a:34:89:7b:9b:fd:f3:2a:5a:ca:74:02:01:a5:59:
48:a0:43:55:76:7d:c1:e1:d1:88:94:02:6a:62:90:
53:5b:56:7d:a6:2d:e1:5e:31:6d:fc:43:1c:e4:20:
ff:ed:11:dd:53:6a:a8:db:e6:c0:fc:19:48:5f:64:
c9:e2:34:15:bb:a3:d3:43:d0:f4:fa:fd:f6:65:44:
e7:24:ba:38:14:67:0a:3f:d8:26:b5:ef:39:c2:f6:
b1:9b:23:20:12:6e:28:09:88:c2:1f:d8:96:11:8c:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:28:2B:6E:07:D2:16:8D:35:BE:91:2D:A5:A3:67:0E:37:A7:32
X509v3 Authority Key Identifier:
keyid:BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/bU4oK24H0haNNb6RLaWjZw43pzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/uzdtDJvvawmPpjFAvMQNg9dr1Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ee:f3:29:e1:8f:ef:b1:0e:1b:fa:07:d0:c5:19:64:a9:37:
2b:66:0f:bb:d0:3e:95:c2:dc:ae:27:1e:82:db:5a:74:90:88:
f0:42:65:a9:32:5b:4a:e6:38:be:ba:6c:2f:0d:a2:bc:13:8b:
4f:a2:8d:57:d0:fb:0f:04:f6:03:f5:4b:69:fc:c6:15:16:7f:
c2:fc:c8:21:76:c1:2d:dd:65:6c:c1:45:8a:9e:6f:05:dd:75:
2d:16:39:12:db:2c:65:8a:54:00:a3:19:d3:b4:c1:1e:b9:ed:
11:86:f8:e2:f8:02:c6:39:08:3c:2a:49:3f:f5:51:53:e1:f8:
e4:f2:7f:a5:ce:b9:64:82:07:93:2a:92:87:ac:23:94:d3:14:
3a:a6:1d:d3:5f:fd:ba:5a:8b:45:fc:f5:e8:6f:c3:a4:1b:d5:
e7:86:39:6b:58:07:f0:5f:10:63:2f:00:31:95:bd:e1:2d:92:
b9:45:10:cc:b6:c8:24:5e:e2:34:80:8b:8c:e7:4f:58:93:d5:
68:ab:99:cc:51:e8:d8:0e:cd:7e:9b:03:4a:0b:1b:f3:e2:14:
c5:ea:4c:86:19:17:e2:51:a1:cb:00:22:01:07:f0:bf:3b:9f:
14:6c:35:e9:a4:e6:c5:fa:4b:56:59:78:14:db:86:3a:b5:da:
28:79:5a:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLP1PL9ZtGMSmO2Aosfcqn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMzc2ZDBjOWJlZjZiMDk4ZmE2MzE0MGJjYzQwZDgzZDc2
YmQ1NDkwHhcNMjIwODI0MTIzMDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDRlMjgyYjZlMDdkMjE2OGQzNWJlOTEyZGE1YTM2NzBlMzdhNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqItHpvUuHxNL4k40jKt70yAxVGk
CAn0Fk2RNzpnHEcM/iVKpHU5Y99SBfiDeulzVbLxN/F+Y1tPd/nc0FoYvTIPFWaE
vxqMQdFU4vyQE4NPBWHnkjlQPXlhIMpJq5pNytsYJ0tJOnJWlJnKu6JA/1XNrDAW
q2QiQFcmUV49NuF1GRX0PUHH2h3ainQy21AsUP00ERl6NIl7m/3zKlrKdAIBpVlI
oENVdn3B4dGIlAJqYpBTW1Z9pi3hXjFt/EMc5CD/7RHdU2qo2+bA/BlIX2TJ4jQV
u6PTQ9D0+v32ZUTnJLo4FGcKP9gmte85wvaxmyMgEm4oCYjCH9iWEYz0lwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG1OKCtuB9IWjTW+kS2lo2cON6cyMB8GA1UdIwQY
MBaAFLs3bQyb72sJj6YxQLzEDYPXa9VJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXpkdERKdnZhd21QcGpGQXZNUU5nOWRyMVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjJmZTYtNWYwYS00OWU4LWFiZGIt
Y2FhMmFkMGRlMTIyLzEvYlU0b0syNEgwaGFOTmI2UkxhV2padzQzcHpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjJmZTYtNWYwYS00OWU4LWFiZGItY2FhMmFkMGRlMTIy
LzEvdXpkdERKdnZhd21QcGpGQXZNUU5nOWRyMVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuetNAwQA
wql4MA0GCSqGSIb3DQEBCwUAA4IBAQA17vMp4Y/vsQ4b+gfQxRlkqTcrZg+70D6V
wtyuJx6C21p0kIjwQmWpMltK5ji+umwvDaK8E4tPoo1X0PsPBPYD9Utp/MYVFn/C
/MghdsEt3WVswUWKnm8F3XUtFjkS2yxlilQAoxnTtMEeue0Rhvji+ALGOQg8Kkk/
9VFT4fjk8n+lzrlkggeTKpKHrCOU0xQ6ph3TX/26WotF/PXob8OkG9XnhjlrWAfw
XxBjLwAxlb3hLZK5RRDMtsgkXuI0gIuM509Yk9Voq5nMUejYDs1+mwNKCxvz4hTF
6kyGGRfiUaHLACIBB/C/O58UbDXppObF+ktWWXgU24Y6tdooeVqj
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:46 2025 by rpki-client