Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/UbUeMfpLDU2B5tdTAaw2aWanYxE.roa
File: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (raw, json)
Hash identifier: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=
Subject key identifier: 51:B5:1E:31:FA:4B:0D:4D:81:E6:D7:53:01:AC:36:69:66:A7:63:11
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 01942445795AE19C55D916BFB65A8D5B93C8
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/UbUeMfpLDU2B5tdTAaw2aWanYxE.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15623
IP address blocks: 185.241.84.0/24 maxlen: 24
185.241.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:79:5a:e1:9c:55:d9:16:bf:b6:5a:8d:5b:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b51e31fa4b0d4d81e6d75301ac366966a76311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:15:40:9a:32:d0:74:08:9b:06:5e:62:4d:
54:95:62:ed:5e:95:3e:e5:36:a4:30:b5:72:41:f7:
ce:07:71:12:16:16:b2:79:6a:76:b8:01:70:e2:39:
d0:55:c9:ad:ae:c8:38:ed:ce:68:24:6d:74:a9:6d:
ba:36:80:43:37:12:d8:05:d7:e3:05:79:96:f0:43:
f8:9b:6b:7e:4e:67:8f:d5:ab:b8:f4:7a:bf:66:b6:
af:5f:68:ad:ad:13:1b:af:9f:3d:89:4d:78:fc:d1:
a4:7a:9e:47:88:3d:1f:26:18:f1:fc:9e:97:7e:99:
4f:35:ae:12:21:5c:c0:92:b0:6f:24:57:8b:82:61:
0f:4c:a8:5a:ea:a5:b9:77:36:5e:95:f4:a7:f9:e0:
7f:16:96:e0:77:9b:c6:58:c3:65:22:53:7d:5a:cb:
49:24:11:4f:19:da:f8:79:c7:bf:c5:e7:ec:c5:4d:
ae:f2:cb:00:f4:5e:76:02:da:82:2b:c0:f1:ef:8f:
27:e0:86:f4:75:0f:9c:c7:c8:46:94:fa:68:c3:c6:
1f:e8:67:7a:95:e1:cb:b5:c9:71:c9:5d:c6:e6:f7:
41:8a:43:9e:82:96:5f:c6:6e:6e:53:4c:10:36:5f:
32:41:9b:55:c8:96:37:1a:e8:90:74:13:90:b2:e1:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:1E:31:FA:4B:0D:4D:81:E6:D7:53:01:AC:36:69:66:A7:63:11
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/UbUeMfpLDU2B5tdTAaw2aWanYxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.84.0/23
Signature Algorithm: sha256WithRSAEncryption
46:29:d8:33:36:8c:37:dd:af:dc:df:3f:e0:51:55:64:c7:4c:
55:f6:31:5d:00:ac:69:ff:17:8f:9e:60:5a:1d:83:8b:c7:8d:
12:1d:9b:1c:18:a0:c2:5c:05:b0:da:db:9a:7b:c5:ea:8c:bc:
6f:7e:79:74:17:21:41:04:a4:48:24:e4:f9:0b:3d:33:f1:c0:
35:0c:c1:73:a4:c3:9f:d0:56:0d:13:6c:88:b5:e4:48:03:ca:
78:24:70:54:f9:49:07:21:3e:95:11:79:b7:d1:9d:02:47:40:
54:de:96:0f:e8:b4:19:4e:19:09:18:26:d1:e0:6c:aa:90:00:
05:ad:80:b2:d6:7b:f0:da:91:0c:dc:d6:11:dc:70:69:c6:3a:
f3:bf:5e:b7:1f:6f:59:46:03:c4:5f:7f:c7:2a:40:a4:21:72:
3f:3f:c0:53:dd:7d:66:a0:1c:dc:df:c5:24:f6:aa:3e:73:99:
e7:4c:88:41:55:42:cd:57:f0:ce:94:30:c7:d5:6b:f9:24:e4:
9c:11:25:cd:c9:be:22:64:9f:f8:ac:33:02:0e:6d:bd:6e:21:
5e:b1:2e:de:8d:eb:f2:c8:0a:9a:74:7d:73:06:9b:25:bb:a8:
d7:2a:c1:18:8c:f7:30:04:58:43:14:19:92:99:ff:05:84:ab:
16:c1:2e:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRXla4ZxV2Ra/tlqNW5PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWE0NjcwMTQ2YWQ4ODBmMTRiYWRhNGIyNzYyYjYxM2Rk
ZjFkMTgwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWI1MWUzMWZhNGIwZDRkODFlNmQ3NTMwMWFjMzY2OTY2YTc2MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz4VQJoy0HQImwZeYk1UlWLtXpU+
5TakMLVyQffOB3ESFhayeWp2uAFw4jnQVcmtrsg47c5oJG10qW26NoBDNxLYBdfj
BXmW8EP4m2t+TmeP1au49Hq/ZravX2itrRMbr589iU14/NGkep5HiD0fJhjx/J6X
fplPNa4SIVzAkrBvJFeLgmEPTKha6qW5dzZelfSn+eB/Fpbgd5vGWMNlIlN9WstJ
JBFPGdr4ece/xefsxU2u8ssA9F52AtqCK8Dx748n4Ib0dQ+cx8hGlPpow8Yf6Gd6
leHLtclxyV3G5vdBikOegpZfxm5uU0wQNl8yQZtVyJY3GuiQdBOQsuGJowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFG1HjH6Sw1NgebXUwGsNmlmp2MRMB8GA1UdIwQY
MBaAFI+aRnAUatiA8UutpLJ2K2E93x0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEt
N2NkNTA4ZjczMzY0LzEvVWJVZU1mcExEVTJCNXRkVEFhdzJhV2FuWXhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEtN2NkNTA4ZjczMzY0
LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufFUMA0G
CSqGSIb3DQEBCwUAA4IBAQBGKdgzNow33a/c3z/gUVVkx0xV9jFdAKxp/xePnmBa
HYOLx40SHZscGKDCXAWw2tuae8XqjLxvfnl0FyFBBKRIJOT5Cz0z8cA1DMFzpMOf
0FYNE2yIteRIA8p4JHBU+UkHIT6VEXm30Z0CR0BU3pYP6LQZThkJGCbR4GyqkAAF
rYCy1nvw2pEM3NYR3HBpxjrzv163H29ZRgPEX3/HKkCkIXI/P8BT3X1moBzc38Uk
9qo+c5nnTIhBVULNV/DOlDDH1Wv5JOScESXNyb4iZJ/4rDMCDm29biFesS7ejevy
yAqadH1zBpslu6jXKsEYjPcwBFhDFBmSmf8FhKsWwS4r
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:29 2025 by rpki-client