Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/ugu10uqgjGyZJDMyHffSmwF17-o.roa
File: ugu10uqgjGyZJDMyHffSmwF17-o.roa (raw, json)
Hash identifier: 0pM4lNsM+6sitUvNd0zR476aWZKQwCSesWcZpkycqOM=
Subject key identifier: BA:0B:B5:D2:EA:A0:8C:6C:99:24:33:32:1D:F7:D2:9B:01:75:EF:EA
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FF9FF32BF0EB1D0CA99CACD1FC6E253
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/ugu10uqgjGyZJDMyHffSmwF17-o.roa
Signing time: Wed 01 Jan 2025 03:47:44 +0000
ROA not before: Wed 01 Jan 2025 03:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13121
IP address blocks: 46.231.224.0/23 maxlen: 23
213.169.64.0/19 maxlen: 19
213.169.88.0/21 maxlen: 21
2a01:6880::/32 maxlen: 32
2a01:6880:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:ff:32:bf:0e:b1:d0:ca:99:ca:cd:1f:c6:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0bb5d2eaa08c6c992433321df7d29b0175efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:ef:8f:6f:ba:dc:21:60:58:a5:50:c3:ba:
cd:9e:92:f7:a5:f9:c7:30:e9:41:99:d0:85:06:dc:
a8:38:b2:1d:26:85:68:db:30:c8:e4:58:5a:c8:20:
15:4c:3c:74:f0:d9:41:98:49:fe:7a:7d:5b:89:a8:
c0:09:2d:11:3b:66:c5:70:5d:df:c1:aa:60:c1:35:
f2:3c:81:cd:6a:c7:1f:92:f6:3a:27:99:52:27:6c:
85:28:fb:43:83:ac:10:94:48:5b:dd:8f:89:03:0d:
73:ca:2b:8d:32:13:71:f4:64:e3:88:1f:fb:5b:b2:
40:80:cc:f3:e5:d2:85:17:c6:f7:4e:18:74:9f:22:
5d:b1:b5:ad:78:07:57:60:77:94:34:c2:3a:e6:fd:
0a:c6:d7:7d:07:4e:87:e7:88:c5:1a:4c:78:66:c3:
9a:73:7e:b1:f8:36:9f:95:a8:ea:34:65:82:f2:c1:
48:da:7e:81:a1:0e:17:21:e7:9c:b6:05:d2:3a:f6:
15:6c:bd:08:99:69:fe:a7:90:32:ec:cd:83:01:b2:
e6:f5:0f:99:2e:9c:65:ed:99:b6:3f:88:cd:3c:74:
31:4d:6a:86:92:05:50:56:33:e4:1a:66:c4:98:6f:
85:c1:12:02:cc:b9:1d:45:5b:99:3d:83:1e:51:15:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:B5:D2:EA:A0:8C:6C:99:24:33:32:1D:F7:D2:9B:01:75:EF:EA
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/ugu10uqgjGyZJDMyHffSmwF17-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.224.0/23
213.169.64.0/19
IPv6:
2a01:6880::/32
Signature Algorithm: sha256WithRSAEncryption
2e:3d:1f:e6:bb:2e:f6:3d:60:ea:25:df:d1:d9:a1:c1:7e:dc:
f4:d2:ee:2a:4f:c7:71:f1:09:b3:a2:47:35:e2:1f:b5:1d:20:
ac:31:25:fc:aa:61:26:31:d1:76:a9:14:17:8b:34:22:40:f3:
b5:17:9a:77:4f:27:f0:b1:e6:51:c8:47:9c:31:ae:72:a5:12:
1e:4c:9d:6f:73:f6:1d:38:d4:5e:0c:77:e7:fb:36:a1:25:c6:
a1:e7:6b:57:49:f7:c4:01:e3:51:64:9e:44:89:86:c4:ae:0b:
0c:d8:af:1f:e2:68:c3:47:10:76:78:ab:f5:b8:fe:94:58:64:
3e:c1:0d:78:2d:31:c4:e1:f8:38:bc:ad:ea:00:3b:54:ca:e8:
c4:c7:eb:98:35:e1:a3:1f:94:da:43:97:8e:fd:fb:fb:7d:ec:
c5:f7:81:44:d4:eb:ac:ad:38:c1:e1:02:9e:b1:b6:ff:f6:3c:
42:36:58:4b:8f:09:53:93:88:77:13:aa:3f:7d:ef:a6:b7:c5:
a9:16:7b:0e:ef:29:3f:1d:f3:56:7a:b0:c2:f1:d4:70:eb:33:
5e:01:e1:59:11:ea:0d:e9:ae:39:06:de:c8:97:f5:26:27:2f:
f5:45:fe:73:cc:06:fc:c5:f4:b0:23:b1:7a:ef:da:8d:57:1f:
87:d5:19:d9
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+f8yvw6x0MqZys0fxuJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzIxMDc4ZjM1OWQ3OTkwMjc2ZGFiYjBmOGMzMDA3MGU2
ODU5NjMwHhcNMjUwMTAxMDM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTBiYjVkMmVhYTA4YzZjOTkyNDMzMzIxZGY3ZDI5YjAxNzVlZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtirvj2+63CFgWKVQw7rNnpL3pfnH
MOlBmdCFBtyoOLIdJoVo2zDI5FhayCAVTDx08NlBmEn+en1biajACS0RO2bFcF3f
wapgwTXyPIHNascfkvY6J5lSJ2yFKPtDg6wQlEhb3Y+JAw1zyiuNMhNx9GTjiB/7
W7JAgMzz5dKFF8b3Thh0nyJdsbWteAdXYHeUNMI65v0Kxtd9B06H54jFGkx4ZsOa
c36x+DaflajqNGWC8sFI2n6BoQ4XIeectgXSOvYVbL0ImWn+p5Ay7M2DAbLm9Q+Z
Lpxl7Zm2P4jNPHQxTWqGkgVQVjPkGmbEmG+FwRICzLkdRVuZPYMeURXGfwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLoLtdLqoIxsmSQzMh330psBde/qMB8GA1UdIwQY
MBaAFCcyEHjzWdeZAnbauw+MMAcOaFljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpJUWVQTloxNWtDZHRxN0Q0d3dCdzVvV1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjI3ZjItZTM2OS00YjA3LThkMWQt
YzM0MzFkMzIwNDA2LzEvdWd1MTB1cWdqR3laSkRNeUhmZlNtd0YxNy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYjI3ZjItZTM2OS00YjA3LThkMWQtYzM0MzFkMzIwNDA2
LzEvSnpJUWVQTloxNWtDZHRxN0Q0d3dCdzVvV1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLufgAwQF
1alAMA0EAgACMAcDBQAqAWiAMA0GCSqGSIb3DQEBCwUAA4IBAQAuPR/muy72PWDq
Jd/R2aHBftz00u4qT8dx8Qmzokc14h+1HSCsMSX8qmEmMdF2qRQXizQiQPO1F5p3
TyfwseZRyEecMa5ypRIeTJ1vc/YdONReDHfn+zahJcah52tXSffEAeNRZJ5EiYbE
rgsM2K8f4mjDRxB2eKv1uP6UWGQ+wQ14LTHE4fg4vK3qADtUyujEx+uYNeGjH5Ta
Q5eO/fv7fezF94FE1OusrTjB4QKesbb/9jxCNlhLjwlTk4h3E6o/fe+mt8WpFnsO
7yk/HfNWerDC8dRw6zNeAeFZEeoN6a45Bt7Il/UmJy/1Rf5zzAb8xfSwI7F679qN
Vx+H1RnZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:07 2025 by rpki-client