Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/UQnmCoONwiJ5kPJipbbPRWpehRQ.roa
File: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (raw, json)
Hash identifier: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=
Subject key identifier: 51:09:E6:0A:83:8D:C2:22:79:90:F2:62:A5:B6:CF:45:6A:5E:85:14
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019427485A7C324A24AA117691C46D2646F8
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/UQnmCoONwiJ5kPJipbbPRWpehRQ.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58104
IP address blocks: 94.184.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5a:7c:32:4a:24:aa:11:76:91:c4:6d:26:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5109e60a838dc2227990f262a5b6cf456a5e8514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:50:92:50:f9:6a:6b:68:4c:ee:3b:8d:82:72:
3a:60:37:8d:e1:ef:62:00:91:71:32:eb:9c:c1:f9:
4f:3b:f1:5e:96:1c:e1:59:27:fa:90:a5:1e:4b:d6:
7c:44:29:c0:07:65:9d:03:fd:16:5e:6d:f0:6f:d6:
f9:97:35:3d:51:37:dc:fb:44:21:59:e5:b1:0c:d9:
b6:ec:c1:a8:ae:59:d0:65:db:f9:05:b6:ec:3e:4c:
cb:e5:46:de:8a:d2:5c:b4:b7:4f:e8:8e:13:d4:db:
11:e9:40:13:bc:9f:37:20:dc:59:ba:09:11:63:cb:
c9:46:5d:4f:fd:46:81:f3:fc:07:b2:25:4c:d7:c8:
4e:64:24:bc:6e:57:7c:a0:6c:41:39:3b:cb:83:70:
85:ef:08:5d:97:68:f1:2f:84:a6:d1:02:7f:8c:27:
c9:0c:cc:a8:6b:1f:ef:b2:7d:4d:70:1d:45:11:3b:
ec:fc:89:d5:1f:5a:23:c8:90:dd:e6:50:fa:4a:c8:
92:cf:d3:6f:e6:b6:81:8b:5f:c0:8f:41:c6:c1:12:
c2:ff:df:ba:44:fb:d4:8f:f7:07:5d:6c:1f:4a:92:
81:f2:37:65:08:d7:76:63:34:03:ad:1c:36:cb:17:
ff:e0:92:55:63:20:21:ac:65:3e:97:94:84:39:62:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:E6:0A:83:8D:C2:22:79:90:F2:62:A5:B6:CF:45:6A:5E:85:14
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/UQnmCoONwiJ5kPJipbbPRWpehRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ac:4d:21:e7:ac:8a:6f:42:90:28:cb:b6:92:09:a9:90:70:
2c:5e:fa:12:19:da:3c:3f:25:a5:a8:4c:aa:b0:89:25:5a:17:
13:2b:04:1d:99:d0:88:45:4d:8f:df:63:99:e1:12:8b:04:7c:
de:81:ed:37:36:46:fc:e0:b3:ce:50:2b:06:e7:29:c4:59:06:
f5:ae:46:22:35:54:e3:9e:00:24:c4:aa:07:e9:f9:c1:d3:d7:
f2:b2:a9:37:3c:34:86:5f:f0:18:52:45:f0:5f:5c:93:37:36:
8a:2c:6f:b9:47:f3:2b:54:2b:48:f1:b4:26:bc:57:a6:55:2f:
79:55:ea:05:1c:a4:f7:7d:18:74:f3:9e:52:6c:c3:a5:51:24:
94:04:9c:35:8b:8c:54:84:41:63:1f:d0:2c:92:a5:c3:83:85:
a2:9f:bb:d0:bd:27:0b:ac:78:b1:c4:db:2e:4d:ea:9e:56:e3:
c2:c9:8e:9e:03:7a:67:78:a4:bb:37:13:ea:97:ad:38:7a:27:
7f:b8:51:22:66:ac:d8:3f:7e:bb:aa:99:59:33:9d:5b:c0:fe:
0d:a9:a5:a9:49:87:ab:4a:7c:64:74:e7:96:35:c9:90:6e:86:
f8:ce:17:53:b6:df:52:37:ed:0c:39:c8:41:44:99:98:78:d0:
6b:ad:5c:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFp8MkokqhF2kcRtJkb4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjUwMTAyMTM1MDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTA5ZTYwYTgzOGRjMjIyNzk5MGYyNjJhNWI2Y2Y0NTZhNWU4NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lCSUPlqa2hM7juNgnI6YDeN4e9i
AJFxMuucwflPO/FelhzhWSf6kKUeS9Z8RCnAB2WdA/0WXm3wb9b5lzU9UTfc+0Qh
WeWxDNm27MGorlnQZdv5BbbsPkzL5UbeitJctLdP6I4T1NsR6UATvJ83INxZugkR
Y8vJRl1P/UaB8/wHsiVM18hOZCS8bld8oGxBOTvLg3CF7whdl2jxL4Sm0QJ/jCfJ
DMyoax/vsn1NcB1FETvs/InVH1ojyJDd5lD6SsiSz9Nv5raBi1/Aj0HGwRLC/9+6
RPvUj/cHXWwfSpKB8jdlCNd2YzQDrRw2yxf/4JJVYyAhrGU+l5SEOWLPKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEJ5gqDjcIieZDyYqW2z0VqXoUUMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvVVFubUNvT053aUo1a1BKaXBiYlBSV3BlaFJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXrhYMA0G
CSqGSIb3DQEBCwUAA4IBAQB+rE0h56yKb0KQKMu2kgmpkHAsXvoSGdo8PyWlqEyq
sIklWhcTKwQdmdCIRU2P32OZ4RKLBHzege03Nkb84LPOUCsG5ynEWQb1rkYiNVTj
ngAkxKoH6fnB09fysqk3PDSGX/AYUkXwX1yTNzaKLG+5R/MrVCtI8bQmvFemVS95
VeoFHKT3fRh0855SbMOlUSSUBJw1i4xUhEFjH9AskqXDg4Win7vQvScLrHixxNsu
TeqeVuPCyY6eA3pneKS7NxPql604eid/uFEiZqzYP367qplZM51bwP4NqaWpSYer
SnxkdOeWNcmQbob4zhdTtt9SN+0MOchBRJmYeNBrrVwF
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:24 2025 by rpki-client