Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/u1VOczY0GtYqmMxkx1bvtbbyBno.roa
File: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (raw, json)
Hash identifier: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=
Subject key identifier: BB:55:4E:73:36:34:1A:D6:2A:98:CC:64:C7:56:EF:B5:B6:F2:06:7A
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 019424B36D7E48208B290E1DDB62479EDC77
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/u1VOczY0GtYqmMxkx1bvtbbyBno.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9063
IP address blocks: 185.38.76.0/22 maxlen: 22
2a01:4060::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6d:7e:48:20:8b:29:0e:1d:db:62:47:9e:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb554e7336341ad62a98cc64c756efb5b6f2067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:70:e9:8c:97:11:23:f4:56:42:57:c3:8c:
69:0d:fe:fc:4e:df:a9:35:e7:9b:ca:7d:fa:71:61:
04:14:89:52:1b:3c:24:bc:93:23:e3:f3:23:c0:cd:
05:21:44:e1:33:62:ac:73:f2:c3:41:72:d5:3b:d4:
eb:83:90:ec:9f:2b:f5:be:c9:6c:1e:1d:8a:ae:50:
63:67:94:be:85:ae:03:99:bb:aa:42:c1:55:95:98:
22:3b:fd:3a:63:5f:01:90:0d:43:7e:34:b7:59:36:
d9:ac:12:93:31:5a:8d:42:e8:04:b5:f2:a5:fa:d4:
d9:1c:16:c0:e5:da:4d:bd:09:14:75:9e:81:91:d2:
e4:19:60:42:44:ba:6d:a3:81:36:c5:7c:cf:f4:b6:
c1:a3:6a:e1:04:6f:51:41:ed:ba:d0:f7:b1:d8:ac:
57:5b:ba:09:0c:09:cc:ba:a0:35:df:0f:f5:bc:2e:
cd:f1:99:27:c5:1c:c1:8f:d4:b6:ea:67:85:ae:98:
24:86:6f:8d:05:f3:aa:23:19:68:2a:f2:ab:cb:35:
8e:bc:a4:e2:9b:bc:e1:77:a3:4a:8b:47:4f:31:36:
95:4e:c3:00:94:8c:24:30:a9:60:92:39:d8:9e:7f:
2f:94:5f:f0:ea:c6:5e:21:03:ae:a4:4e:f2:86:1f:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:4E:73:36:34:1A:D6:2A:98:CC:64:C7:56:EF:B5:B6:F2:06:7A
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/u1VOczY0GtYqmMxkx1bvtbbyBno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.76.0/22
IPv6:
2a01:4060::/32
Signature Algorithm: sha256WithRSAEncryption
37:00:57:fa:e0:b2:0f:4f:d1:3c:54:4c:fc:b6:ad:cb:09:8c:
74:b6:3d:48:88:25:bf:3b:99:f7:58:e2:40:b0:65:19:1e:8a:
50:da:a6:12:e0:cd:1f:76:47:d7:e4:a2:47:21:80:34:c6:95:
70:55:d3:b7:0f:c7:b2:08:28:a3:51:7b:bf:1d:d5:3b:5e:85:
7a:8e:a2:5a:58:49:87:8c:da:03:a4:c0:cb:67:1c:59:85:63:
27:d4:60:d3:9b:53:f7:16:87:19:48:eb:b5:6c:f9:24:87:fe:
66:0f:ac:18:bb:6f:50:78:9c:e9:ba:89:bf:41:c3:68:f0:0d:
7a:c3:48:b2:8b:ad:ed:1a:f4:02:71:ef:89:e7:71:95:4d:20:
9d:5e:cd:2b:e5:85:e0:c2:a2:d4:b1:ac:d6:68:4f:f8:f1:54:
4e:c7:af:ea:f5:98:2c:75:ff:54:18:fd:ba:66:f6:af:e4:38:
0f:29:1b:2f:d4:66:93:25:8a:82:5d:6c:1f:bb:02:bf:79:85:
58:57:0f:16:ba:41:75:da:da:50:3c:53:62:8e:b1:41:20:b2:
ab:83:bd:c0:0d:b8:9d:d4:7f:0a:f2:84:e4:d7:22:52:4e:6a:
1f:82:56:ae:51:b2:52:ad:d1:8a:3e:81:38:68:2b:67:67:b7:
0c:c9:ae:39
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQks21+SCCLKQ4d22JHntx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjUwMTAyMDE0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjU1NGU3MzM2MzQxYWQ2MmE5OGNjNjRjNzU2ZWZiNWI2ZjIwNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr5w6YyXESP0VkJXw4xpDf78Tt+p
Neebyn36cWEEFIlSGzwkvJMj4/MjwM0FIUThM2Ksc/LDQXLVO9Trg5Dsnyv1vsls
Hh2KrlBjZ5S+ha4DmbuqQsFVlZgiO/06Y18BkA1DfjS3WTbZrBKTMVqNQugEtfKl
+tTZHBbA5dpNvQkUdZ6BkdLkGWBCRLpto4E2xXzP9LbBo2rhBG9RQe260Pex2KxX
W7oJDAnMuqA13w/1vC7N8ZknxRzBj9S26meFrpgkhm+NBfOqIxloKvKryzWOvKTi
m7zhd6NKi0dPMTaVTsMAlIwkMKlgkjnYnn8vlF/w6sZeIQOupE7yhh8nWwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLtVTnM2NBrWKpjMZMdW77W28gZ6MB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvdTFWT2N6WTBHdFlxbU14a3gxYnZ0YmJ5Qm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSZMMA0E
AgACMAcDBQAqAUBgMA0GCSqGSIb3DQEBCwUAA4IBAQA3AFf64LIPT9E8VEz8tq3L
CYx0tj1IiCW/O5n3WOJAsGUZHopQ2qYS4M0fdkfX5KJHIYA0xpVwVdO3D8eyCCij
UXu/HdU7XoV6jqJaWEmHjNoDpMDLZxxZhWMn1GDTm1P3FocZSOu1bPkkh/5mD6wY
u29QeJzpuom/QcNo8A16w0iyi63tGvQCce+J53GVTSCdXs0r5YXgwqLUsazWaE/4
8VROx6/q9Zgsdf9UGP26Zvav5DgPKRsv1GaTJYqCXWwfuwK/eYVYVw8WukF12tpQ
PFNijrFBILKrg73ADbid1H8K8oTk1yJSTmofglauUbJSrdGKPoE4aCtnZ7cMya45
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:00:16 2025 by rpki-client