Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/UHqtBgSDgvWiKqqXMe1OOteaUSY.roa
File: UHqtBgSDgvWiKqqXMe1OOteaUSY.roa (raw, json)
Hash identifier: CfsdekWehjVXBaU77dZF4ZxuaSUomCVNK9b+NLACtb8=
Subject key identifier: 50:7A:AD:06:04:83:82:F5:A2:2A:AA:97:31:ED:4E:3A:D7:9A:51:26
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 019423D6BA88380207A4102F4966DB54BEC1
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/UHqtBgSDgvWiKqqXMe1OOteaUSY.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202220
IP address blocks: 176.97.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ba:88:38:02:07:a4:10:2f:49:66:db:54:be:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=507aad06048382f5a22aaa9731ed4e3ad79a5126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:f4:96:83:1b:90:8d:de:d5:51:64:92:97:
c2:26:6f:1f:5f:74:7d:c7:85:8d:3c:7a:ea:8d:f8:
a3:cb:f2:fc:dc:63:31:46:c5:fb:ee:d6:f2:7a:5a:
4a:e2:30:59:b0:8f:17:82:ca:96:74:eb:a6:9b:bd:
4c:31:fd:c3:92:f6:6f:ab:9e:77:4c:c6:93:cc:9f:
d3:02:03:42:ed:2e:3e:f1:a7:6f:7e:a7:61:cf:fa:
59:91:bf:e4:18:a5:c4:71:09:07:22:15:b0:0d:a4:
3f:b1:d3:88:bb:b7:63:22:75:21:50:1e:c8:cb:cb:
cd:4e:07:c5:9f:17:cf:9e:9d:f6:c7:f1:70:36:bc:
a7:5f:bd:82:3e:42:4c:cf:71:25:0b:8b:c0:83:61:
d9:2e:e8:23:9b:1a:60:12:18:5b:d5:c7:07:3c:2b:
0a:b9:5a:6f:30:51:94:bc:48:2d:fb:50:37:ce:03:
43:21:67:ce:49:0d:ff:7b:51:ec:f1:d0:79:68:0e:
a2:f4:4f:dd:e1:4b:44:e7:8d:f3:e3:bb:5b:ec:99:
cc:e2:3a:7e:f0:31:01:9e:3d:19:4e:6d:76:7b:68:
ea:cd:75:22:6a:c5:f7:3d:ab:d3:48:38:09:8d:22:
bf:41:90:6b:5a:7b:40:c7:d0:e7:4a:35:49:55:70:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:AD:06:04:83:82:F5:A2:2A:AA:97:31:ED:4E:3A:D7:9A:51:26
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/UHqtBgSDgvWiKqqXMe1OOteaUSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.51.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c4:3c:b2:91:b7:01:8d:35:13:c3:fc:90:67:4d:39:8a:07:
b4:19:36:3a:47:1a:12:75:4b:ed:8f:f0:6d:d9:64:d7:82:e4:
58:ca:2c:60:49:8d:3e:00:65:f2:f2:ee:9e:71:ec:b0:00:d4:
3e:ae:13:7b:40:7f:a4:8a:03:8b:04:c6:c0:22:07:41:41:a6:
37:dc:5c:86:5c:5d:29:94:d8:06:67:be:0f:a0:2d:e1:fb:58:
21:8f:b9:27:f9:7b:78:dd:a5:55:f2:bb:bb:64:fc:bc:f9:cd:
5f:b3:f7:3a:2f:c8:97:4b:7c:b6:e6:d2:1a:d9:b1:49:70:21:
96:e3:1f:0b:6c:16:33:b1:3a:38:4f:c5:2a:f7:58:56:57:83:
5f:be:a8:0a:8d:74:81:a5:c8:a4:a8:41:4f:30:54:c5:61:33:
a8:62:09:f2:c1:2e:c1:33:66:25:7f:30:ac:37:eb:2d:9a:c1:
c3:0d:80:94:c5:54:e2:f1:e3:76:01:d9:c7:35:90:10:8d:cf:
60:d8:c2:ab:83:7e:d4:e0:c7:36:0f:47:ea:ec:56:5b:4e:b8:
44:03:fe:79:7b:b7:f2:0e:96:3a:4c:5b:f0:d5:3a:56:d1:12:
1b:b6:41:6c:65:d8:e0:2b:81:fa:fc:f9:22:f9:5e:b0:85:83:
94:fb:71:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1rqIOAIHpBAvSWbbVL7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjUwMTAxMjE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDdhYWQwNjA0ODM4MmY1YTIyYWFhOTczMWVkNGUzYWQ3OWE1MTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke70loMbkI3e1VFkkpfCJm8fX3R9
x4WNPHrqjfijy/L83GMxRsX77tbyelpK4jBZsI8XgsqWdOumm71MMf3DkvZvq553
TMaTzJ/TAgNC7S4+8advfqdhz/pZkb/kGKXEcQkHIhWwDaQ/sdOIu7djInUhUB7I
y8vNTgfFnxfPnp32x/FwNrynX72CPkJMz3ElC4vAg2HZLugjmxpgEhhb1ccHPCsK
uVpvMFGUvEgt+1A3zgNDIWfOSQ3/e1Hs8dB5aA6i9E/d4UtE543z47tb7JnM4jp+
8DEBnj0ZTm12e2jqzXUiasX3PavTSDgJjSK/QZBrWntAx9DnSjVJVXCrywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFB6rQYEg4L1oiqqlzHtTjrXmlEmMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEvVUhxdEJnU0RndldpS3FxWE1lMU9PdGVhVVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGEzMA0G
CSqGSIb3DQEBCwUAA4IBAQAJxDyykbcBjTUTw/yQZ005ige0GTY6RxoSdUvtj/Bt
2WTXguRYyixgSY0+AGXy8u6eceywANQ+rhN7QH+kigOLBMbAIgdBQaY33FyGXF0p
lNgGZ74PoC3h+1ghj7kn+Xt43aVV8ru7ZPy8+c1fs/c6L8iXS3y25tIa2bFJcCGW
4x8LbBYzsTo4T8Uq91hWV4NfvqgKjXSBpcikqEFPMFTFYTOoYgnywS7BM2YlfzCs
N+stmsHDDYCUxVTi8eN2AdnHNZAQjc9g2MKrg37U4Mc2D0fq7FZbTrhEA/55e7fy
DpY6TFvw1TpW0RIbtkFsZdjgK4H6/Pki+V6whYOU+3Gn
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:16 2025 by rpki-client