Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/UJuJe34B0guqTgOl--QOCgSYvZE.roa
File: UJuJe34B0guqTgOl--QOCgSYvZE.roa (raw, json)
Hash identifier: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=
Subject key identifier: 50:9B:89:7B:7E:01:D2:0B:AA:4E:03:A5:FB:E4:0E:0A:04:98:BD:91
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 01942445132ED8FC65B0989C135F01462DBC
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/UJuJe34B0guqTgOl--QOCgSYvZE.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47891
IP address blocks: 85.14.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:13:2e:d8:fc:65:b0:98:9c:13:5f:01:46:2d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=509b897b7e01d20baa4e03a5fbe40e0a0498bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:7a:23:cd:d7:01:ab:53:89:b4:f6:2c:ad:
df:6b:81:64:6b:a1:99:1b:85:02:d2:9a:6a:31:6b:
65:0d:0e:ef:6d:86:3c:79:b1:c6:ff:77:80:21:a0:
fb:b4:67:4c:07:2e:b7:91:56:02:22:92:fb:84:ef:
f3:76:dc:fc:53:5d:1c:e2:e9:2d:6b:8d:36:5c:0e:
36:2a:e1:c0:aa:7f:a8:6f:66:83:91:10:55:eb:e6:
76:0d:65:b3:9f:e9:a1:b7:78:44:ac:97:06:18:45:
a2:0c:39:1c:c6:d1:62:13:53:d9:55:70:ac:50:b9:
33:35:f6:7c:28:b2:65:b0:3b:88:fe:da:59:e3:fb:
00:80:03:4d:4e:80:a1:c7:76:7f:21:10:be:40:7b:
8f:76:87:fd:7b:0a:e5:cb:e0:35:b8:64:01:6a:78:
6b:f8:78:16:bb:2c:81:ad:af:0c:9b:96:99:ec:43:
52:7c:56:fd:d6:cd:08:89:c8:38:fc:9c:12:cb:a9:
1f:fd:3c:11:6c:52:46:ed:8e:62:b7:46:75:ac:51:
43:c1:10:bd:99:2b:43:a4:3d:f6:6b:cc:d6:ce:ee:
06:83:16:60:10:de:0b:cb:db:fb:42:7f:65:f9:e1:
a2:f0:66:62:82:a1:e9:da:9c:df:91:db:cd:bf:cc:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:89:7B:7E:01:D2:0B:AA:4E:03:A5:FB:E4:0E:0A:04:98:BD:91
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/UJuJe34B0guqTgOl--QOCgSYvZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.142.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:77:94:dd:1d:ad:82:96:fd:46:27:f2:ed:29:ea:a6:93:c3:
ff:86:a1:63:fc:78:cd:ca:dc:f2:a8:10:6a:61:f7:31:61:10:
0a:b2:34:85:79:e1:fd:32:6c:eb:03:6e:30:43:4d:0e:93:dc:
60:45:8b:b9:9c:78:76:31:c6:f1:5b:5d:c7:73:0b:82:3e:28:
d1:ab:b1:79:1b:af:7d:31:28:d6:8d:f4:92:08:84:59:ed:fe:
26:54:47:dd:29:8e:05:e4:53:40:11:81:73:8e:fc:02:21:ef:
55:17:60:96:97:32:76:15:80:18:07:db:c7:71:0b:57:9e:12:
4b:0e:d6:d3:2a:49:05:5c:67:58:06:f8:72:09:9a:ba:34:df:
89:7e:a8:f4:1a:c8:22:07:bc:42:30:ff:fb:55:68:dc:f6:41:
bd:82:66:fc:59:a8:4b:b1:bc:04:81:04:4e:eb:1d:9f:a4:e2:
8f:63:37:6e:e3:2f:2f:7b:47:1b:58:94:1a:fc:27:2b:2c:31:
4b:6c:02:41:bc:fe:a6:9f:b6:86:68:b3:30:9a:fd:ad:97:8b:
76:67:0e:e4:03:e3:ce:b8:98:84:95:18:27:42:8b:de:ab:8f:
42:32:e6:1a:cb:b2:b9:ec:44:29:36:4e:3f:45:38:9b:ca:fc:
8c:92:6f:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRRMu2PxlsJicE18BRi28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl
M2ZiZDMwHhcNMjUwMTAxMjM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDliODk3YjdlMDFkMjBiYWE0ZTAzYTVmYmU0MGUwYTA0OThiZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCB6I83XAatTibT2LK3fa4Fka6GZ
G4UC0ppqMWtlDQ7vbYY8ebHG/3eAIaD7tGdMBy63kVYCIpL7hO/zdtz8U10c4ukt
a402XA42KuHAqn+ob2aDkRBV6+Z2DWWzn+mht3hErJcGGEWiDDkcxtFiE1PZVXCs
ULkzNfZ8KLJlsDuI/tpZ4/sAgANNToChx3Z/IRC+QHuPdof9ewrly+A1uGQBanhr
+HgWuyyBra8Mm5aZ7ENSfFb91s0Iicg4/JwSy6kf/TwRbFJG7Y5it0Z1rFFDwRC9
mStDpD32a8zWzu4GgxZgEN4Ly9v7Qn9l+eGi8GZigqHp2pzfkdvNv8yPSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFCbiXt+AdILqk4DpfvkDgoEmL2RMB8GA1UdIwQY
MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt
MWE1ZTVmMTkxYmZhLzEvVUp1SmUzNEIwZ3VxVGdPbC0tUU9DZ1NZdlpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh
LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVQ6OMA0G
CSqGSIb3DQEBCwUAA4IBAQB/d5TdHa2Clv1GJ/LtKeqmk8P/hqFj/HjNytzyqBBq
YfcxYRAKsjSFeeH9MmzrA24wQ00Ok9xgRYu5nHh2McbxW13HcwuCPijRq7F5G699
MSjWjfSSCIRZ7f4mVEfdKY4F5FNAEYFzjvwCIe9VF2CWlzJ2FYAYB9vHcQtXnhJL
DtbTKkkFXGdYBvhyCZq6NN+Jfqj0GsgiB7xCMP/7VWjc9kG9gmb8WahLsbwEgQRO
6x2fpOKPYzdu4y8ve0cbWJQa/CcrLDFLbAJBvP6mn7aGaLMwmv2tl4t2Zw7kA+PO
uJiElRgnQoveq49CMuYay7K57EQpNk4/RTibyvyMkm/m
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:53 2025 by rpki-client