Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/UakAn5yyBqPOSEIfTXfDNciKFEs.roa
File: UakAn5yyBqPOSEIfTXfDNciKFEs.roa (raw, json)
Hash identifier: btkptULyCnT6MWQIHbySDipzPG0rdTy55cYQICbq99M=
Subject key identifier: 51:A9:00:9F:9C:B2:06:A3:CE:48:42:1F:4D:77:C3:35:C8:8A:14:4B
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0194258EA93B59B20EE93AF4030CBF148AB5
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/UakAn5yyBqPOSEIfTXfDNciKFEs.roa
Signing time: Thu 02 Jan 2025 05:48:13 +0000
ROA not before: Thu 02 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209486
IP address blocks: 194.36.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:a9:3b:59:b2:0e:e9:3a:f4:03:0c:bf:14:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Jan 2 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a9009f9cb206a3ce48421f4d77c335c88a144b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:0e:f6:f0:b9:80:cd:86:92:86:d8:21:2f:
a6:49:f2:3d:9e:70:f5:47:0d:68:a6:84:ba:fe:c6:
c4:5b:05:32:cb:aa:f4:64:bc:ac:03:85:4b:6a:e8:
73:df:68:a5:84:0f:61:75:09:8a:8a:f0:6c:cb:35:
92:11:6b:cc:b3:84:42:9c:de:cd:3a:47:1d:98:69:
f5:75:0c:19:2a:00:b0:40:a9:8f:32:e9:7a:c9:80:
af:da:0e:ff:18:e5:55:46:50:d4:f9:33:25:8c:c4:
a6:ee:ac:dc:76:f7:4e:7c:5c:ff:0a:c8:a0:34:5f:
6b:21:b3:3f:bd:c0:83:36:28:a6:57:aa:3d:5f:6f:
00:8d:b5:56:80:45:fd:98:3e:69:3a:70:ae:d1:3f:
c6:cb:5c:62:ca:98:30:85:41:92:2c:95:1e:1c:9d:
69:f6:e5:ea:36:f6:e2:62:8c:8b:b6:40:dd:61:21:
ba:bd:1a:e6:8c:ba:c5:71:ad:bf:d3:3a:d6:c2:2f:
9d:c6:4f:ef:b9:f0:dd:26:6b:7a:60:15:78:85:2e:
dd:ab:00:b2:03:e0:6e:3c:b4:1a:c7:9f:de:61:40:
dd:9a:72:4f:bd:58:6f:68:9a:41:b9:ab:76:55:c0:
5b:70:46:a1:4e:5c:21:55:45:c5:13:22:75:77:f3:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A9:00:9F:9C:B2:06:A3:CE:48:42:1F:4D:77:C3:35:C8:8A:14:4B
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/UakAn5yyBqPOSEIfTXfDNciKFEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.180.0/22
Signature Algorithm: sha256WithRSAEncryption
49:8f:f8:0b:1a:32:b9:78:f4:57:1c:03:f0:8f:3c:c3:a3:a6:
29:72:38:32:47:13:d2:2e:97:4b:6d:9e:98:65:fb:47:7c:30:
51:b1:89:61:8b:db:00:08:62:49:17:6d:fa:b5:90:5a:3b:8a:
d8:6f:c4:0b:dd:95:dd:09:a7:ae:80:b7:ec:11:54:17:d2:11:
3a:57:84:98:86:b3:f3:55:08:ac:e3:18:92:f9:b4:f2:05:b0:
57:06:46:c9:d1:3c:11:ad:24:b5:b8:d5:63:9c:90:d6:5d:3e:
85:f1:d4:72:97:c4:6a:9c:03:79:6d:a9:e9:80:26:6d:86:7c:
63:ae:66:bd:e3:45:9a:1d:8c:49:d0:d1:3b:75:5b:83:19:ee:
4a:7c:06:36:f9:35:3c:44:0e:9f:75:54:58:03:22:5a:54:4e:
5d:41:e0:a7:ec:15:39:22:aa:ea:a4:f2:98:14:93:fb:3d:30:
66:37:62:6a:7f:b4:c0:ee:b9:54:e4:7b:70:e0:72:eb:8c:bb:
08:94:3e:3d:28:16:f5:2d:57:74:78:ef:53:ff:ef:97:13:bf:
ea:9f:ec:35:bc:27:3f:5e:93:19:ac:9e:69:a5:3f:68:64:30:
2a:91:06:de:b9:55:dc:5a:19:c5:94:71:6c:50:50:b7:43:8e:
58:6e:c4:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljqk7WbIO6Tr0Awy/FIq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWY2NGRlNTYxOGY3NWMxOWRmNTEzOTUzZjY0Njk4Nzll
MDg3NzMwHhcNMjUwMTAyMDU0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE5MDA5ZjljYjIwNmEzY2U0ODQyMWY0ZDc3YzMzNWM4OGExNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHEO9vC5gM2GkobYIS+mSfI9nnD1
Rw1opoS6/sbEWwUyy6r0ZLysA4VLauhz32ilhA9hdQmKivBsyzWSEWvMs4RCnN7N
OkcdmGn1dQwZKgCwQKmPMul6yYCv2g7/GOVVRlDU+TMljMSm7qzcdvdOfFz/Csig
NF9rIbM/vcCDNiimV6o9X28AjbVWgEX9mD5pOnCu0T/Gy1xiypgwhUGSLJUeHJ1p
9uXqNvbiYoyLtkDdYSG6vRrmjLrFca2/0zrWwi+dxk/vufDdJmt6YBV4hS7dqwCy
A+BuPLQax5/eYUDdmnJPvVhvaJpBuat2VcBbcEahTlwhVUXFEyJ1d/PDJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGpAJ+csgajzkhCH013wzXIihRLMB8GA1UdIwQY
MBaAFLMfZN5WGPdcGd9ROVP2Rph54IdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTIt
MWNjZTViNThmOGUzLzEvVWFrQW41eXlCcVBPU0VJZlRYZkROY2lLRkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zZmEwMDctZjM0NC00NjdlLWI3MTItMWNjZTViNThmOGUz
LzEvc3g5azNsWVk5MXdaMzFFNVVfWkdtSG5naDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiS0MA0G
CSqGSIb3DQEBCwUAA4IBAQBJj/gLGjK5ePRXHAPwjzzDo6YpcjgyRxPSLpdLbZ6Y
ZftHfDBRsYlhi9sACGJJF236tZBaO4rYb8QL3ZXdCaeugLfsEVQX0hE6V4SYhrPz
VQis4xiS+bTyBbBXBkbJ0TwRrSS1uNVjnJDWXT6F8dRyl8RqnAN5banpgCZthnxj
rma940WaHYxJ0NE7dVuDGe5KfAY2+TU8RA6fdVRYAyJaVE5dQeCn7BU5IqrqpPKY
FJP7PTBmN2Jqf7TA7rlU5Htw4HLrjLsIlD49KBb1LVd0eO9T/++XE7/qn+w1vCc/
XpMZrJ5ppT9oZDAqkQbeuVXcWhnFlHFsUFC3Q45YbsS5
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:04 2025 by rpki-client