Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UxSH4sOh9usS_e51gu5bot6qeS4.roa
File: UxSH4sOh9usS_e51gu5bot6qeS4.roa (raw, json)
Hash identifier: iCvempCm2VD9DY8Sk36nD6t+eeLBX2JDzcbsZ6Wd8Uc=
Subject key identifier: 53:14:87:E2:C3:A1:F6:EB:12:FD:EE:75:82:EE:5B:A2:DE:AA:79:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824859B24A6874863EC71CADFC451AF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UxSH4sOh9usS_e51gu5bot6qeS4.roa
Signing time: Thu 02 Jan 2025 17:51:09 +0000
ROA not before: Thu 02 Jan 2025 17:51:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 141.98.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:85:9b:24:a6:87:48:63:ec:71:ca:df:c4:51:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=531487e2c3a1f6eb12fdee7582ee5ba2deaa792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:b2:4f:78:50:c7:2e:6b:f1:49:c8:a8:7e:
73:2c:af:0b:eb:d8:34:9b:47:c6:36:ed:ac:0a:5d:
11:a8:fd:d4:9e:33:15:fe:83:e3:09:7a:39:ec:44:
44:86:d7:8b:b5:0b:fb:99:7f:12:7b:b0:ae:bb:78:
81:16:3e:75:e2:de:9d:0e:b8:83:e8:01:97:f3:3e:
6f:74:fc:6d:27:94:4e:ab:9a:29:d2:13:1f:c4:c4:
3d:ca:51:2e:e3:86:9f:61:d4:cd:c1:b8:c1:c8:e4:
61:ab:a8:2d:4b:cc:98:d8:02:dc:c6:e2:b3:c2:0b:
ec:72:17:90:56:db:48:cc:5a:83:16:04:d0:d1:23:
e7:05:78:bb:9c:de:6a:c3:28:8d:6a:d9:6a:f0:f8:
32:8e:43:6c:33:3c:bb:b9:bb:e8:60:bc:77:86:78:
3c:ee:23:71:96:d1:71:fd:36:10:12:c0:95:61:06:
b5:ea:c3:09:f1:3a:c0:22:3d:e3:f8:36:94:71:ee:
f4:23:a0:1c:a0:9e:36:f2:62:45:fb:79:e2:24:22:
b6:00:c1:eb:d1:82:d3:86:f8:6f:fc:ad:e1:a5:98:
cb:a4:84:8f:1a:fd:6b:7e:34:ed:75:6a:82:43:26:
60:bd:88:fb:a4:b2:11:e8:a4:2d:9b:7d:e2:37:1d:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:14:87:E2:C3:A1:F6:EB:12:FD:EE:75:82:EE:5B:A2:DE:AA:79:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UxSH4sOh9usS_e51gu5bot6qeS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.7.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d2:eb:05:a1:03:27:c7:4d:b6:dc:69:1c:6e:66:31:91:c7:
dc:40:6d:91:b3:68:17:bb:ce:b8:d3:a2:68:9a:77:24:13:5a:
d1:c8:3d:56:7a:d7:8d:3e:de:51:10:bc:be:4a:d0:c0:5f:af:
2a:61:a3:ed:23:37:60:6e:7d:59:09:99:ae:ab:a0:ea:11:17:
39:d5:25:5c:9c:0b:07:4a:72:b9:12:38:69:b8:97:a8:49:71:
e4:47:00:6c:c6:9e:3f:30:6a:44:2b:eb:01:2c:3b:4c:0b:57:
11:39:07:63:df:1b:f8:43:c3:97:66:39:33:a8:69:1c:1f:15:
e2:b9:37:fe:bb:81:a9:0b:f7:92:07:03:5e:3e:97:04:fd:da:
f6:aa:2d:36:89:17:d5:38:b3:d2:38:70:ac:f2:28:84:bf:b9:
3c:a4:df:6b:f8:e3:bd:53:cd:60:10:35:56:c0:77:b6:21:1a:
67:fd:77:54:f5:9b:73:22:8b:73:b8:e1:3e:c1:4e:3b:ae:64:
6a:81:76:6d:34:b1:4f:28:2c:88:59:6f:19:64:05:2a:99:9b:
f7:08:79:c7:56:66:03:a2:8b:79:3d:a2:4b:d7:10:5b:85:f4:
e3:94:55:22:72:89:39:8e:8d:ed:9e:7b:69:52:9a:60:f6:e1:
b8:35:b5:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJIWbJKaHSGPsccrfxFGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzE0ODdlMmMzYTFmNmViMTJmZGVlNzU4MmVlNWJhMmRlYWE3OTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudiyT3hQxy5r8UnIqH5zLK8L69g0
m0fGNu2sCl0RqP3UnjMV/oPjCXo57EREhteLtQv7mX8Se7Cuu3iBFj514t6dDriD
6AGX8z5vdPxtJ5ROq5op0hMfxMQ9ylEu44afYdTNwbjByORhq6gtS8yY2ALcxuKz
wgvscheQVttIzFqDFgTQ0SPnBXi7nN5qwyiNatlq8PgyjkNsMzy7ubvoYLx3hng8
7iNxltFx/TYQEsCVYQa16sMJ8TrAIj3j+DaUce70I6AcoJ428mJF+3niJCK2AMHr
0YLThvhv/K3hpZjLpISPGv1rfjTtdWqCQyZgvYj7pLIR6KQtm33iNx0j9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMUh+LDofbrEv3udYLuW6LeqnkuMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVXhTSDRzT2g5dXNTX2U1MWd1NWJvdDZxZVM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIHMA0G
CSqGSIb3DQEBCwUAA4IBAQAH0usFoQMnx0223GkcbmYxkcfcQG2Rs2gXu86406Jo
mnckE1rRyD1WeteNPt5RELy+StDAX68qYaPtIzdgbn1ZCZmuq6DqERc51SVcnAsH
SnK5EjhpuJeoSXHkRwBsxp4/MGpEK+sBLDtMC1cROQdj3xv4Q8OXZjkzqGkcHxXi
uTf+u4GpC/eSBwNePpcE/dr2qi02iRfVOLPSOHCs8iiEv7k8pN9r+OO9U81gEDVW
wHe2IRpn/XdU9ZtzIotzuOE+wU47rmRqgXZtNLFPKCyIWW8ZZAUqmZv3CHnHVmYD
oot5PaJL1xBbhfTjlFUicok5jo3tnntpUppg9uG4NbVU
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:34 2025 by rpki-client