Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/uV1M3fky2AaC8kOeiqG8vtH6340.roa
File: uV1M3fky2AaC8kOeiqG8vtH6340.roa (raw, json)
Hash identifier: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=
Subject key identifier: B9:5D:4C:DD:F9:32:D8:06:82:F2:43:9E:8A:A1:BC:BE:D1:FA:DF:8D
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 019425FBF82AE52D9D5FEF31EEF6C397D25B
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/uV1M3fky2AaC8kOeiqG8vtH6340.roa
Signing time: Thu 02 Jan 2025 07:47:37 +0000
ROA not before: Thu 02 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48281
IP address blocks: 185.128.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f8:2a:e5:2d:9d:5f:ef:31:ee:f6:c3:97:d2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 2 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b95d4cddf932d80682f2439e8aa1bcbed1fadf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:21:ba:67:d9:16:b9:37:ff:de:6c:82:78:
51:3c:b8:e4:c5:55:eb:8f:1f:6d:3e:7e:b5:64:bc:
c7:c1:0d:a5:54:bc:b0:8f:61:3a:6c:59:46:e7:a9:
a2:21:57:3e:63:31:8e:e5:60:7c:56:7e:c1:0d:0a:
e1:a7:c4:68:35:d3:5f:82:2f:6b:99:c8:29:7e:b4:
03:8e:c6:fe:f7:a4:f6:01:97:d3:07:fb:16:6e:2a:
23:42:95:f4:36:e2:82:ed:60:db:35:01:85:f0:6f:
69:b5:b0:82:94:f5:a5:7b:cd:40:06:ae:52:da:f8:
10:d3:bd:3c:97:fb:d0:8c:0e:fc:aa:dc:4b:2d:a5:
5b:75:7e:5a:2c:dc:99:a6:0d:61:c0:b3:77:bb:07:
d7:1a:a3:76:8d:b9:7c:a6:d3:12:ac:df:49:3e:33:
56:49:05:38:e3:06:3b:66:f5:be:83:3b:b2:67:ab:
56:47:7f:d8:81:6f:0e:73:5b:50:ed:ee:4b:e8:e6:
c5:ca:88:85:c2:fa:35:1f:0e:92:a9:d7:59:30:e8:
51:40:f1:8e:19:40:fc:b0:69:56:23:9b:39:1e:a1:
6e:4d:3d:26:26:93:50:08:53:5f:95:92:5e:6d:26:
72:b0:bd:5d:0e:ae:a1:44:85:24:67:27:69:56:74:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5D:4C:DD:F9:32:D8:06:82:F2:43:9E:8A:A1:BC:BE:D1:FA:DF:8D
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/uV1M3fky2AaC8kOeiqG8vtH6340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.154.0/23
Signature Algorithm: sha256WithRSAEncryption
33:aa:f8:45:6d:90:59:01:be:72:5d:5e:7e:bb:1b:e3:ec:66:
b9:d2:77:85:44:9b:3d:f5:bd:94:e8:8f:1a:76:1a:9e:6d:34:
22:f9:9a:88:89:97:de:40:3b:74:2b:9a:c2:bd:c7:a6:a6:d7:
d3:84:6f:df:9f:7a:1a:86:a8:14:a7:41:a3:7f:13:f4:a9:2e:
16:b0:41:7c:26:6e:64:4c:11:06:d9:ba:5b:b6:50:14:96:c9:
60:a9:cc:18:4d:bb:73:47:47:e3:f9:e3:07:ea:9d:fb:7a:c3:
bb:bd:66:7d:04:c7:f9:d2:2f:1b:a8:c1:c9:7f:1e:b3:49:49:
c9:eb:92:00:ba:33:1e:97:58:eb:2c:e1:37:d2:50:4e:3c:db:
2f:f4:e6:b8:d9:4b:fd:fa:f6:7e:f8:c9:f8:fc:44:fe:a4:e3:
16:f4:63:1c:b6:df:26:c0:82:21:b2:b5:70:3d:f4:8b:e2:ec:
86:e6:52:4a:47:4a:f4:94:56:23:cb:3b:43:fb:9f:5d:ab:55:
5a:1e:65:1c:c7:c6:71:dd:f1:b8:11:ee:16:7c:1a:11:8e:06:
5d:88:1c:1f:29:6c:b7:34:8f:e6:be:0c:b8:cd:8e:af:d4:f6:
4f:44:ca:2d:5e:4b:b9:56:49:1e:85:75:75:3e:f8:b2:2a:91:
74:85:70:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl+/gq5S2dX+8x7vbDl9JbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy
NTgwYTUwHhcNMjUwMTAyMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTVkNGNkZGY5MzJkODA2ODJmMjQzOWU4YWExYmNiZWQxZmFkZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSghumfZFrk3/95sgnhRPLjkxVXr
jx9tPn61ZLzHwQ2lVLywj2E6bFlG56miIVc+YzGO5WB8Vn7BDQrhp8RoNdNfgi9r
mcgpfrQDjsb+96T2AZfTB/sWbiojQpX0NuKC7WDbNQGF8G9ptbCClPWle81ABq5S
2vgQ0708l/vQjA78qtxLLaVbdX5aLNyZpg1hwLN3uwfXGqN2jbl8ptMSrN9JPjNW
SQU44wY7ZvW+gzuyZ6tWR3/YgW8Oc1tQ7e5L6ObFyoiFwvo1Hw6SqddZMOhRQPGO
GUD8sGlWI5s5HqFuTT0mJpNQCFNflZJebSZysL1dDq6hRIUkZydpVnQAQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLldTN35MtgGgvJDnoqhvL7R+t+NMB8GA1UdIwQY
MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt
YzU1NDc2NzU5ZDBjLzEvdVYxTTNma3kyQWFDOGtPZWlxRzh2dEg2MzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj
LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYCaMA0G
CSqGSIb3DQEBCwUAA4IBAQAzqvhFbZBZAb5yXV5+uxvj7Ga50neFRJs99b2U6I8a
dhqebTQi+ZqIiZfeQDt0K5rCvcemptfThG/fn3oahqgUp0GjfxP0qS4WsEF8Jm5k
TBEG2bpbtlAUlslgqcwYTbtzR0fj+eMH6p37esO7vWZ9BMf50i8bqMHJfx6zSUnJ
65IAujMel1jrLOE30lBOPNsv9Oa42Uv9+vZ++Mn4/ET+pOMW9GMctt8mwIIhsrVw
PfSL4uyG5lJKR0r0lFYjyztD+59dq1VaHmUcx8Zx3fG4Ee4WfBoRjgZdiBwfKWy3
NI/mvgy4zY6v1PZPRMotXku5VkkehXV1PviyKpF0hXB9
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:31 2025 by rpki-client