Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/UrDlMe0qpvsS_4c6z9IjME9U_ys.roa
File: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (raw, json)
Hash identifier: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=
Subject key identifier: 52:B0:E5:31:ED:2A:A6:FB:12:FF:87:3A:CF:D2:23:30:4F:54:FF:2B
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019421B1B57C270993E7F2C3838E23A70EE9
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/UrDlMe0qpvsS_4c6z9IjME9U_ys.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 185.43.76.0/22 maxlen: 24
2a01:6ca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b5:7c:27:09:93:e7:f2:c3:83:8e:23:a7:0e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52b0e531ed2aa6fb12ff873acfd223304f54ff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:f7:05:4d:2d:51:61:a8:66:7f:a9:fe:47:
8f:84:e6:cb:d5:73:c1:53:9d:50:3e:2a:e6:58:02:
e1:b8:ff:67:d5:bc:94:f8:aa:3b:01:e6:0c:3d:4c:
f2:91:fb:cf:40:db:15:95:ca:2f:93:aa:51:2e:e9:
a5:b5:aa:a0:ff:5c:89:65:1c:b9:52:d0:92:4e:90:
45:09:9b:26:01:ac:0a:6d:cd:ed:cd:48:4f:29:39:
22:53:5f:d1:a5:d4:d2:16:06:14:cf:13:56:d7:37:
30:70:70:78:ef:ac:bd:83:a0:80:44:22:ae:9e:85:
f9:4d:12:00:7c:a6:1c:75:7c:93:9b:ec:12:95:ca:
7b:fa:f2:35:0d:11:fc:4a:ed:9d:f1:f6:5d:b3:2f:
81:59:fe:db:54:08:77:c0:6c:72:33:8a:fa:d7:c3:
3d:5d:48:ad:7d:64:53:38:f3:ec:1a:28:b6:a3:56:
ca:ba:a3:48:e3:9e:78:19:7d:92:33:ef:89:93:f8:
11:e3:6f:a3:59:4a:59:e4:77:16:10:c5:8a:f0:47:
72:d5:d2:9e:ac:c8:9a:d2:41:21:8c:de:17:25:93:
b0:90:af:3e:0c:eb:28:df:08:f6:53:04:de:cd:fd:
72:14:0b:c0:1d:e7:0b:70:e4:99:b8:0a:c9:5c:7f:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:E5:31:ED:2A:A6:FB:12:FF:87:3A:CF:D2:23:30:4F:54:FF:2B
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/UrDlMe0qpvsS_4c6z9IjME9U_ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.76.0/22
IPv6:
2a01:6ca0::/32
Signature Algorithm: sha256WithRSAEncryption
20:8a:e2:df:f1:8a:67:57:67:37:d4:83:33:db:35:47:78:87:
cd:da:f4:c2:8a:22:73:26:e9:28:8a:c2:c8:d6:aa:5c:64:99:
82:07:c0:fd:61:7a:ef:f5:37:d9:d8:51:ac:bb:42:e5:df:5b:
6f:c8:64:26:9c:75:7c:e0:6d:d9:d2:64:d9:41:7c:fc:6f:78:
81:45:79:4c:f7:f1:0b:b1:a2:25:e8:23:0b:aa:44:1f:8f:f0:
41:4d:e5:3b:27:9a:40:71:ae:42:56:2a:67:bd:68:d9:2f:d8:
e9:f0:42:41:98:84:7b:19:96:82:19:46:51:a2:c7:5b:a1:e6:
bd:37:99:79:4d:c8:d7:42:2e:3a:55:31:01:9e:d3:92:fc:9a:
48:10:99:bb:25:3f:56:61:86:bc:4b:2a:6f:eb:9c:d3:72:23:
8e:28:a5:8e:70:14:c5:7c:3c:9f:e1:0c:33:85:22:83:48:f1:
bf:02:87:a9:99:0e:71:7f:e8:7a:81:70:04:67:17:a8:49:74:
45:c7:13:f0:82:6c:13:ac:89:c4:a3:90:27:95:83:9d:8e:01:
70:67:72:b6:7f:b2:0a:39:34:69:d8:78:4b:66:ee:c8:45:b5:
49:7b:b3:77:13:2c:e8:d8:70:aa:a2:ad:1a:4c:58:19:43:f7:
21:86:7f:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhsbV8JwmT5/LDg44jpw7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjUwMTAxMTE0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmIwZTUzMWVkMmFhNmZiMTJmZjg3M2FjZmQyMjMzMDRmNTRmZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOb3BU0tUWGoZn+p/kePhObL1XPB
U51QPirmWALhuP9n1byU+Ko7AeYMPUzykfvPQNsVlcovk6pRLumltaqg/1yJZRy5
UtCSTpBFCZsmAawKbc3tzUhPKTkiU1/RpdTSFgYUzxNW1zcwcHB476y9g6CARCKu
noX5TRIAfKYcdXyTm+wSlcp7+vI1DRH8Su2d8fZdsy+BWf7bVAh3wGxyM4r618M9
XUitfWRTOPPsGii2o1bKuqNI4554GX2SM++Jk/gR42+jWUpZ5HcWEMWK8Edy1dKe
rMia0kEhjN4XJZOwkK8+DOso3wj2UwTezf1yFAvAHecLcOSZuArJXH8U7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFKw5THtKqb7Ev+HOs/SIzBPVP8rMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xL1VyRGxNZTBxcHZzU180YzZ6OUlqTUU5VV95cy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4LWNlYzE2MzMzZDdm
Mi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5K0ww
DQQCAAIwBwMFACoBbKAwDQYJKoZIhvcNAQELBQADggEBACCK4t/ximdXZzfUgzPb
NUd4h83a9MKKInMm6SiKwsjWqlxkmYIHwP1heu/1N9nYUay7QuXfW2/IZCacdXzg
bdnSZNlBfPxveIFFeUz38QuxoiXoIwuqRB+P8EFN5TsnmkBxrkJWKme9aNkv2Onw
QkGYhHsZloIZRlGix1uh5r03mXlNyNdCLjpVMQGe05L8mkgQmbslP1ZhhrxLKm/r
nNNyI44opY5wFMV8PJ/hDDOFIoNI8b8Ch6mZDnF/6HqBcARnF6hJdEXHE/CCbBOs
icSjkCeVg52OAXBncrZ/sgo5NGnYeEtm7shFtUl7s3cTLOjYcKqirRpMWBlD9yGG
f/M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:32 2025 by rpki-client