Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/uEnvA7clDaiWPypO28uwhilipYg.roa
File: uEnvA7clDaiWPypO28uwhilipYg.roa (raw, json)
Hash identifier: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=
Subject key identifier: B8:49:EF:03:B7:25:0D:A8:96:3F:2A:4E:DB:CB:B0:86:29:62:A5:88
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01941FFA413873FEF117E1A00DFE73C6249A
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/uEnvA7clDaiWPypO28uwhilipYg.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204954
IP address blocks: 192.58.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:38:73:fe:f1:17:e1:a0:0d:fe:73:c6:24:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b849ef03b7250da8963f2a4edbcbb0862962a588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:54:f0:17:01:88:ee:a8:ea:28:6e:f6:a8:
f1:45:91:02:4e:d2:fd:a2:4d:a2:1d:af:a2:19:21:
f2:34:9c:45:6f:2f:91:f6:b8:3b:5a:d8:2d:5e:14:
a0:c9:0d:3e:ef:39:94:d8:96:77:e6:97:b4:5e:18:
e0:9c:1f:4d:59:52:cf:94:46:ee:71:ee:7a:cf:92:
35:8e:4b:44:27:f6:73:26:ae:e0:34:8e:18:c3:9c:
05:10:4e:87:61:54:5d:b8:cc:67:61:5a:7c:f3:f0:
2a:d9:6e:1e:4c:e2:0f:05:ec:b6:90:a6:c8:ae:3e:
3e:28:61:91:59:c6:f2:10:e8:f0:63:3a:79:4f:9e:
f8:47:3f:15:1c:98:67:38:81:31:67:76:25:6f:d5:
cc:90:dd:a1:e4:e6:42:66:fd:1c:de:1d:fc:91:ea:
47:20:74:73:6e:1a:f7:57:f5:ad:a8:86:d8:d2:58:
57:ef:f1:d7:5c:19:46:99:88:9a:81:9e:ab:89:c3:
5b:c8:de:4a:55:03:3a:66:68:9d:f1:e2:8c:71:23:
ef:a8:a3:5a:b3:82:2d:25:ab:ea:df:15:85:75:cf:
b7:ed:de:b1:cb:9f:99:ed:4d:a3:92:4d:49:50:22:
fd:1f:47:9e:09:0a:d7:aa:d3:d9:e4:19:ff:ee:0f:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:EF:03:B7:25:0D:A8:96:3F:2A:4E:DB:CB:B0:86:29:62:A5:88
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/uEnvA7clDaiWPypO28uwhilipYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:0a:7d:97:0b:3f:6a:a0:a8:b1:dd:48:67:04:51:f8:38:fd:
f7:ca:94:68:73:cf:4c:27:d6:9a:d6:21:18:b3:2b:7b:1a:b7:
d1:c7:ba:93:bd:db:93:e0:85:b6:22:76:fe:bb:b5:86:f1:ae:
16:16:4d:a4:5f:d8:50:51:cf:b5:c5:88:6f:16:ab:c3:26:3b:
7c:1e:82:81:d3:2e:5e:bc:a6:50:a6:44:0e:76:dd:f7:b4:88:
7a:6c:3f:f4:52:6f:ef:2d:46:c5:a3:e0:91:62:49:f2:ce:26:
3e:3d:31:b2:f9:92:a6:b3:90:dd:34:a3:39:86:69:8a:4e:40:
27:22:05:e8:77:4c:1b:dd:35:8b:29:2c:fa:83:ae:6b:3e:36:
cb:13:7c:02:e6:86:83:71:14:4e:f2:e8:d2:45:68:84:7f:1c:
b1:d1:e7:0e:71:9f:d1:a4:f2:c6:91:56:76:71:e5:5e:53:a8:
6c:a2:18:26:70:12:6a:93:ed:a2:8e:3a:a5:5d:02:ba:ab:55:
e4:09:68:13:31:ba:b4:18:80:f8:e3:5a:72:bc:83:df:2e:9a:
d5:2f:59:ea:a7:32:67:ff:ef:fc:ef:33:18:41:32:5a:77:0a:
d6:e9:44:7d:a2:ec:68:2b:57:20:56:aa:6e:44:e4:57:a2:25:
24:9d:dd:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kE4c/7xF+GgDf5zxiSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQ5ZWYwM2I3MjUwZGE4OTYzZjJhNGVkYmNiYjA4NjI5NjJhNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0FU8BcBiO6o6ihu9qjxRZECTtL9
ok2iHa+iGSHyNJxFby+R9rg7WtgtXhSgyQ0+7zmU2JZ35pe0XhjgnB9NWVLPlEbu
ce56z5I1jktEJ/ZzJq7gNI4Yw5wFEE6HYVRduMxnYVp88/Aq2W4eTOIPBey2kKbI
rj4+KGGRWcbyEOjwYzp5T574Rz8VHJhnOIExZ3Ylb9XMkN2h5OZCZv0c3h38kepH
IHRzbhr3V/WtqIbY0lhX7/HXXBlGmYiagZ6ricNbyN5KVQM6Zmid8eKMcSPvqKNa
s4ItJavq3xWFdc+37d6xy5+Z7U2jkk1JUCL9H0eeCQrXqtPZ5Bn/7g+MWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhJ7wO3JQ2olj8qTtvLsIYpYqWIMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvdUVudkE3Y2xEYWlXUHlwTzI4dXdoaWxpcFlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDo8MA0G
CSqGSIb3DQEBCwUAA4IBAQAMCn2XCz9qoKix3UhnBFH4OP33ypRoc89MJ9aa1iEY
syt7GrfRx7qTvduT4IW2Inb+u7WG8a4WFk2kX9hQUc+1xYhvFqvDJjt8HoKB0y5e
vKZQpkQOdt33tIh6bD/0Um/vLUbFo+CRYknyziY+PTGy+ZKms5DdNKM5hmmKTkAn
IgXod0wb3TWLKSz6g65rPjbLE3wC5oaDcRRO8ujSRWiEfxyx0ecOcZ/RpPLGkVZ2
ceVeU6hsohgmcBJqk+2ijjqlXQK6q1XkCWgTMbq0GID441pyvIPfLprVL1nqpzJn
/+/87zMYQTJadwrW6UR9ouxoK1cgVqpuRORXoiUknd1s
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:22 2025 by rpki-client