Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa
File: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (raw, json)
Hash identifier: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=
Subject key identifier: B9:28:FB:C8:DC:20:44:B6:7F:88:69:30:40:5B:7A:E8:92:92:66:D7
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 019425219266CB5FEF96B9C834BA78EB5647
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209746
IP address blocks: 185.5.142.0/24 maxlen: 24
185.7.119.0/24 maxlen: 24
188.68.84.0/22 maxlen: 24
188.68.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:66:cb:5f:ef:96:b9:c8:34:ba:78:eb:56:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b928fbc8dc2044b67f886930405b7ae8929266d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:96:0a:89:b1:59:2f:99:82:dc:3b:c6:77:11:
d5:3b:87:5c:77:70:a1:9e:d8:d4:0c:a5:5c:07:3c:
ff:ef:d6:bd:88:5e:53:d5:93:68:8a:f9:71:ca:e0:
2f:20:ea:df:4c:4a:e9:59:4a:38:9f:ce:97:63:0f:
37:1d:32:d7:9e:2f:fc:2f:aa:b6:12:1f:d7:c7:9a:
aa:83:1d:76:a2:2a:b5:3f:0a:01:27:5d:46:f5:67:
77:4d:b1:77:02:03:55:60:b5:6c:4a:09:2f:be:3a:
0f:40:0a:e9:c9:7c:7c:a8:98:80:b2:14:35:e1:26:
fb:ad:ae:49:26:52:24:e4:32:48:da:ca:28:6d:f1:
35:87:54:cf:66:72:e4:34:30:d9:45:19:23:a2:64:
4c:43:8e:b6:d7:4e:53:c7:96:e2:08:3e:af:e1:bf:
ef:75:a0:3f:9b:38:c4:eb:86:9b:08:c6:7d:89:59:
f8:dc:34:72:9d:e9:e8:ea:74:f1:92:76:14:14:54:
26:2e:48:ce:91:92:81:de:a7:f8:2e:c7:39:12:46:
0a:4c:4d:db:8d:49:64:88:9b:2c:a9:15:d6:6e:c4:
ce:90:15:66:94:ee:4e:0f:af:18:87:82:20:6e:66:
c3:de:2a:7d:89:78:37:c1:3f:84:4e:3a:77:0e:f0:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:FB:C8:DC:20:44:B6:7F:88:69:30:40:5B:7A:E8:92:92:66:D7
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.142.0/24
185.7.119.0/24
188.68.84.0/22
188.68.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ff:3e:65:1b:4d:e7:fa:ee:d0:8d:41:85:37:48:ca:0a:c9:
ac:8b:9d:51:49:cb:0d:f3:5a:09:32:f6:01:9b:6e:bd:74:de:
6d:b6:79:c1:ba:4c:7d:82:57:7d:f0:9a:86:d4:7e:12:77:45:
74:91:15:4c:e7:d0:b6:7a:db:5b:0a:11:a6:6d:cb:8c:cc:5b:
b6:35:16:10:cd:a3:34:ac:bc:be:dc:32:1a:8c:e1:da:00:24:
bd:50:ac:c6:90:52:5a:fa:95:91:b9:5f:eb:b8:a8:14:df:d0:
e1:7d:2a:3c:c5:88:34:d9:6d:ec:90:a3:1b:ec:d8:26:5f:91:
a3:ba:d3:af:31:1f:bc:c0:2c:49:0f:b0:0a:da:37:ec:ae:38:
35:c6:fa:7d:c6:81:5b:97:e3:2b:b9:b6:6f:34:64:04:2e:a6:
30:f7:8b:2b:29:2b:1e:50:f8:ce:9c:a8:2f:ab:ad:69:0f:2f:
1a:4d:ad:06:ec:5a:dc:45:b7:72:8c:61:ce:4f:59:1f:1c:6c:
e5:f6:68:e3:1d:24:c4:0d:5f:3f:6c:ba:6b:e6:7a:e6:1d:21:
be:86:a0:92:a0:b8:32:f6:36:13:45:de:6f:26:69:1f:58:79:
ac:2f:23:d8:c5:72:e3:7c:8b:a8:43:f0:e5:e1:3b:69:b0:63:
78:02:d6:63
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQlIZJmy1/vlrnINLp461ZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1
NDg4OTQwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTI4ZmJjOGRjMjA0NGI2N2Y4ODY5MzA0MDViN2FlODkyOTI2NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZYKibFZL5mC3DvGdxHVO4dcd3Ch
ntjUDKVcBzz/79a9iF5T1ZNoivlxyuAvIOrfTErpWUo4n86XYw83HTLXni/8L6q2
Eh/Xx5qqgx12oiq1PwoBJ11G9Wd3TbF3AgNVYLVsSgkvvjoPQArpyXx8qJiAshQ1
4Sb7ra5JJlIk5DJI2soobfE1h1TPZnLkNDDZRRkjomRMQ462105Tx5biCD6v4b/v
daA/mzjE64abCMZ9iVn43DRyneno6nTxknYUFFQmLkjOkZKB3qf4Lsc5EkYKTE3b
jUlkiJssqRXWbsTOkBVmlO5OD68Yh4IgbmbD3ip9iXg3wT+ETjp3DvBeUwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLko+8jcIES2f4hpMEBbeuiSkmbXMB8GA1UdIwQY
MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt
MWVmN2VmMTdmYTQzLzEvdVNqN3lOd2dSTFpfaUdrd1FGdDY2SktTWnRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz
LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuQWOAwQA
uQd3AwQCvERUAwQBvEReMA0GCSqGSIb3DQEBCwUAA4IBAQCK/z5lG03n+u7QjUGF
N0jKCsmsi51RScsN81oJMvYBm269dN5ttnnBukx9gld98JqG1H4Sd0V0kRVM59C2
ettbChGmbcuMzFu2NRYQzaM0rLy+3DIajOHaACS9UKzGkFJa+pWRuV/ruKgU39Dh
fSo8xYg02W3skKMb7NgmX5GjutOvMR+8wCxJD7AK2jfsrjg1xvp9xoFbl+MrubZv
NGQELqYw94srKSseUPjOnKgvq61pDy8aTa0G7FrcRbdyjGHOT1kfHGzl9mjjHSTE
DV8/bLpr5nrmHSG+hqCSoLgy9jYTRd5vJmkfWHmsLyPYxXLjfIuoQ/Dl4TtpsGN4
AtZj
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:52 2025 by rpki-client