Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/UPeMe9exPA-XO-Wpe9l87kFbuLg.roa
File: UPeMe9exPA-XO-Wpe9l87kFbuLg.roa (raw, json)
Hash identifier: T5LXO+IIz5Jw7BGuFA7+Eefp0y4OKrkkqOT1rRFNsZQ=
Subject key identifier: 50:F7:8C:7B:D7:B1:3C:0F:97:3B:E5:A9:7B:D9:7C:EE:41:5B:B8:B8
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01942826242407E17FEB61689462D6BB2762
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/UPeMe9exPA-XO-Wpe9l87kFbuLg.roa
Signing time: Thu 02 Jan 2025 17:52:55 +0000
ROA not before: Thu 02 Jan 2025 17:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8647
IP address blocks: 185.23.164.0/22 maxlen: 24
193.200.175.0/24 maxlen: 24
2a0f:3a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:24:24:07:e1:7f:eb:61:68:94:62:d6:bb:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 2 17:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50f78c7bd7b13c0f973be5a97bd97cee415bb8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:ad:aa:1e:ec:cc:cb:f8:63:95:d6:d0:93:
f8:ad:df:eb:24:d1:dd:e7:8d:7b:1c:cc:4b:d8:77:
36:3b:76:f9:07:f8:9b:0d:d1:d9:41:be:a2:5f:30:
37:8b:f7:83:ff:42:99:02:2a:03:bf:d7:58:46:a6:
ad:29:c2:03:ec:50:c1:d6:d5:6e:2e:a9:9c:92:2e:
0a:b8:43:3e:01:b9:3e:6c:2a:73:cc:b6:b4:8c:0f:
f0:ef:e1:21:ce:35:e3:a9:01:ef:fa:ce:2e:4a:35:
b3:26:29:dd:ce:7c:b7:22:27:9f:89:a0:8c:44:ec:
58:77:1e:32:71:86:a2:d6:2e:0e:ce:41:f8:f2:fb:
0f:99:e5:b8:87:81:d2:5a:cc:6b:ac:e7:a4:0f:ac:
e7:4e:44:cc:da:ce:e5:9f:96:8f:7a:bb:04:bb:bb:
8d:f1:83:39:59:2d:94:d1:7f:49:c9:4b:6d:0b:bb:
4e:8b:96:24:1e:18:d2:7b:ba:f5:d9:54:be:e0:2b:
71:f3:6a:96:eb:d4:17:81:a5:7f:2c:b0:3c:d5:b6:
55:6d:5e:20:aa:39:08:22:d4:a5:42:84:7f:50:99:
60:11:63:34:b5:45:29:6a:17:9b:13:7d:d5:f5:7b:
b7:86:15:30:6f:73:24:53:09:8f:23:98:60:31:3b:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F7:8C:7B:D7:B1:3C:0F:97:3B:E5:A9:7B:D9:7C:EE:41:5B:B8:B8
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/UPeMe9exPA-XO-Wpe9l87kFbuLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.164.0/22
193.200.175.0/24
IPv6:
2a0f:3a00::/29
Signature Algorithm: sha256WithRSAEncryption
14:a8:e3:7b:31:54:b6:ce:53:f5:76:a5:f9:9e:25:e4:7c:dd:
0f:75:e9:ac:08:cb:fb:41:62:36:f2:95:05:4c:2c:fe:d2:e7:
c5:f8:2f:b2:4b:37:ec:8f:cf:bb:08:87:ec:76:33:b7:e8:d3:
05:4e:97:8e:b9:18:fd:89:41:7b:42:d6:1b:d7:ad:8c:3c:de:
80:60:d4:9b:97:90:19:e2:d8:06:06:1b:d0:f0:99:0d:d0:c7:
7d:2a:44:cc:ff:63:d8:cc:32:99:84:1e:67:46:bd:33:f6:b6:
9f:f5:ef:c0:89:14:e1:c8:38:64:48:2a:f4:02:3e:2c:cf:57:
bf:f6:c2:d1:5e:79:5d:07:08:8f:df:8d:dd:9f:e9:52:65:41:
d8:ec:87:07:be:fa:39:45:16:5e:a5:5f:e6:f5:b8:85:5a:34:
c6:d5:27:64:6c:cd:2c:ba:0e:27:c1:dd:44:38:eb:8f:a7:01:
5d:b4:f7:26:3a:91:50:05:1b:40:84:e4:a8:79:ff:a5:b7:66:
8b:8c:f1:e0:f5:06:f9:0f:02:dd:45:25:ea:45:5a:f1:59:d4:
7e:c2:b1:cc:f0:14:3e:cf:1c:a4:18:7b:1d:64:d6:45:29:9d:
a8:48:03:e6:e0:8f:6f:00:93:75:9e:45:15:b2:8a:7f:5b:2c:
a2:75:72:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQoJiQkB+F/62FolGLWuydiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUwMTAyMTc1MjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGY3OGM3YmQ3YjEzYzBmOTczYmU1YTk3YmQ5N2NlZTQxNWJiOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJitqh7szMv4Y5XW0JP4rd/rJNHd
5417HMxL2Hc2O3b5B/ibDdHZQb6iXzA3i/eD/0KZAioDv9dYRqatKcID7FDB1tVu
Lqmcki4KuEM+Abk+bCpzzLa0jA/w7+EhzjXjqQHv+s4uSjWzJindzny3IiefiaCM
ROxYdx4ycYai1i4OzkH48vsPmeW4h4HSWsxrrOekD6znTkTM2s7ln5aPersEu7uN
8YM5WS2U0X9JyUttC7tOi5YkHhjSe7r12VS+4Ctx82qW69QXgaV/LLA81bZVbV4g
qjkIItSlQoR/UJlgEWM0tUUpahebE33V9Xu3hhUwb3MkUwmPI5hgMTu64wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFD3jHvXsTwPlzvlqXvZfO5BW7i4MB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvVVBlTWU5ZXhQQS1YTy1XcGU5bDg3a0ZidUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRekAwQA
wcivMA0EAgACMAcDBQMqDzoAMA0GCSqGSIb3DQEBCwUAA4IBAQAUqON7MVS2zlP1
dqX5niXkfN0PdemsCMv7QWI28pUFTCz+0ufF+C+ySzfsj8+7CIfsdjO36NMFTpeO
uRj9iUF7QtYb162MPN6AYNSbl5AZ4tgGBhvQ8JkN0Md9KkTM/2PYzDKZhB5nRr0z
9raf9e/AiRThyDhkSCr0Aj4sz1e/9sLRXnldBwiP343dn+lSZUHY7IcHvvo5RRZe
pV/m9biFWjTG1SdkbM0sug4nwd1EOOuPpwFdtPcmOpFQBRtAhOSoef+lt2aLjPHg
9Qb5DwLdRSXqRVrxWdR+wrHM8BQ+zxykGHsdZNZFKZ2oSAPm4I9vAJN1nkUVsop/
WyyidXK/
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:45 2025 by rpki-client