Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/UgQvx_lbsNuoPrOWEqQQU5trSo4.roa
File: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (raw, json)
Hash identifier: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=
Subject key identifier: 52:04:2F:C7:F9:5B:B0:DB:A8:3E:B3:96:12:A4:10:53:9B:6B:4A:8E
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 019427B5D24EA720DA9D39F333A884B57266
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/UgQvx_lbsNuoPrOWEqQQU5trSo4.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47123
IP address blocks: 185.141.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d2:4e:a7:20:da:9d:39:f3:33:a8:84:b5:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52042fc7f95bb0dba83eb39612a410539b6b4a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:52:01:4c:c9:f1:88:07:74:27:e7:f4:e7:
ca:d2:4f:73:da:32:04:51:a8:1d:07:e3:a6:eb:cc:
bf:b8:44:ad:f3:e0:7a:38:3a:ec:b1:e9:90:b9:0d:
ca:f5:72:eb:af:33:0d:20:91:d3:75:fa:d7:07:38:
7a:55:a9:ae:40:aa:48:f6:d0:5a:7c:f5:fb:0c:8c:
df:0f:03:cc:bb:a9:43:a9:f1:00:7b:7f:32:50:c0:
09:6b:1a:73:cb:d9:87:68:30:b2:f8:1f:74:d1:4f:
46:ec:72:3d:69:61:83:f0:16:1f:3f:76:75:ed:a6:
e8:62:6b:2f:d1:17:8a:2a:66:0b:35:e0:5f:cc:7f:
37:61:e8:df:03:75:96:1e:fb:01:56:3c:8b:87:d4:
9f:58:cd:7d:13:44:5f:b7:f9:51:22:5a:d0:a3:e9:
1e:ea:51:38:a1:f6:d3:7a:11:b4:2c:29:64:69:e7:
c2:d7:ed:87:fa:5f:82:6d:ec:71:8e:ae:ee:4a:0c:
4d:ff:06:4a:af:03:71:da:cd:12:06:41:70:55:3d:
09:fb:1c:2d:c2:b6:a5:75:da:8b:c7:3a:83:68:e2:
57:85:05:53:26:47:86:45:d5:85:11:cf:36:df:32:
94:e9:a3:eb:58:af:eb:48:f4:f5:b6:d5:90:6f:7a:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:2F:C7:F9:5B:B0:DB:A8:3E:B3:96:12:A4:10:53:9B:6B:4A:8E
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/UgQvx_lbsNuoPrOWEqQQU5trSo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.111.0/24
Signature Algorithm: sha256WithRSAEncryption
06:59:89:4f:72:15:aa:29:10:7d:ca:09:e8:c7:3b:9c:37:dd:
2e:21:08:a3:9c:c0:81:df:dd:c5:41:94:87:c3:e0:01:5a:70:
88:22:f0:db:a8:9e:77:15:02:0c:db:fa:ea:73:6e:99:46:71:
eb:1d:d4:56:c0:f5:a4:89:35:88:34:bd:f3:70:c3:c5:16:f5:
9b:11:d9:e6:60:50:38:7d:0c:8e:a1:91:d7:7f:78:5f:3c:9e:
d9:83:4a:78:2e:5b:8d:f3:e5:07:f8:fc:cf:18:f3:ea:51:37:
50:6a:89:20:c5:b5:c4:d8:40:81:7d:dc:b6:32:14:7d:dc:c8:
ea:c0:93:fc:5f:40:d6:41:91:e6:42:5e:30:5b:70:45:f0:94:
05:49:6b:ae:e6:77:80:f5:4e:88:3b:69:6e:a0:72:92:22:d9:
43:a3:1e:64:4a:93:0c:fe:08:a1:8f:9d:eb:f7:f5:ab:77:97:
26:e3:11:86:37:41:38:94:ce:cd:db:19:7e:f4:6a:6b:b9:b6:
0a:f6:fa:32:33:57:20:c5:cc:81:8b:cd:b7:d6:ac:ec:d6:7f:
91:38:a5:39:e4:3f:bc:fb:72:93:04:de:4b:46:79:0b:fb:f8:
ee:b3:f1:bb:af:31:6b:ea:13:8f:be:ff:e8:45:1e:3d:b0:c5:
aa:73:77:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntdJOpyDanTnzM6iEtXJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwY2RlMmMxZmNlM2Q2ZmUyMTg1MzQ3ZGQ4OWRjZmQxM2Vi
YmIxNTEwHhcNMjUwMTAyMTU1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjA0MmZjN2Y5NWJiMGRiYTgzZWIzOTYxMmE0MTA1MzliNmI0YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15lSAUzJ8YgHdCfn9OfK0k9z2jIE
UagdB+Om68y/uESt8+B6ODrssemQuQ3K9XLrrzMNIJHTdfrXBzh6VamuQKpI9tBa
fPX7DIzfDwPMu6lDqfEAe38yUMAJaxpzy9mHaDCy+B900U9G7HI9aWGD8BYfP3Z1
7aboYmsv0ReKKmYLNeBfzH83YejfA3WWHvsBVjyLh9SfWM19E0Rft/lRIlrQo+ke
6lE4ofbTehG0LClkaefC1+2H+l+Cbexxjq7uSgxN/wZKrwNx2s0SBkFwVT0J+xwt
wralddqLxzqDaOJXhQVTJkeGRdWFEc823zKU6aPrWK/rSPT1ttWQb3q/jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIEL8f5W7DbqD6zlhKkEFOba0qOMB8GA1UdIwQY
MBaAFODN4sH849b+IYU0fdidz9E+u7FRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEt
ZWNiMzEyNmZjOGVkLzEvVWdRdnhfbGJzTnVvUHJPV0VxUVFVNXRyU280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEtZWNiMzEyNmZjOGVk
LzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY1vMA0G
CSqGSIb3DQEBCwUAA4IBAQAGWYlPchWqKRB9ygnoxzucN90uIQijnMCB393FQZSH
w+ABWnCIIvDbqJ53FQIM2/rqc26ZRnHrHdRWwPWkiTWINL3zcMPFFvWbEdnmYFA4
fQyOoZHXf3hfPJ7Zg0p4LluN8+UH+PzPGPPqUTdQaokgxbXE2ECBfdy2MhR93Mjq
wJP8X0DWQZHmQl4wW3BF8JQFSWuu5neA9U6IO2luoHKSItlDox5kSpMM/gihj53r
9/Wrd5cm4xGGN0E4lM7N2xl+9GprubYK9voyM1cgxcyBi8231qzs1n+ROKU55D+8
+3KTBN5LRnkL+/jus/G7rzFr6hOPvv/oRR49sMWqc3fp
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:29:08 2025 by rpki-client