Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa
File: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (raw, json)
Hash identifier: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=
Subject key identifier: B9:C2:07:B2:E3:36:65:DE:5F:9A:65:C6:02:28:62:1D:F9:82:58:07
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019424457B24C236EB5F532776F94640256A
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208000
IP address blocks: 185.139.50.0/24 maxlen: 24
185.139.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7b:24:c2:36:eb:5f:53:27:76:f9:46:40:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c207b2e33665de5f9a65c60228621df9825807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:df:bd:5e:00:28:df:08:d8:5c:a9:5b:33:
98:1b:19:88:90:a5:66:a1:78:f3:90:5e:5d:1c:2e:
0a:56:06:19:19:3c:ca:a3:38:0f:af:8c:7d:06:70:
5c:c7:50:ea:dd:2c:59:10:38:5f:c5:ce:f3:48:de:
d8:95:e2:46:60:15:3c:e5:5b:ee:77:80:bc:d2:eb:
75:09:77:d7:e4:a6:dd:a0:4a:df:88:de:97:c1:bd:
14:c7:35:1b:8e:72:6d:38:b1:db:78:b6:81:b1:9d:
53:21:10:fe:c9:52:b8:06:fc:45:d9:29:64:01:90:
61:ed:65:ca:4f:19:fe:c7:2f:3c:04:b6:05:c0:6f:
b5:bb:39:36:d8:a2:c1:d6:f2:07:03:6d:70:f8:8b:
2a:da:a6:e8:18:73:7b:4a:79:4c:6b:8f:7d:ff:09:
5d:84:3a:e8:0e:11:b6:58:23:35:e3:e9:4f:be:16:
79:b7:f8:08:8c:85:9c:ea:3a:23:c5:0c:6b:bd:34:
4d:7a:ba:f8:d8:9e:a9:35:1f:7f:c9:10:64:2b:cc:
8a:32:29:8f:51:18:b3:83:7b:b3:c4:3a:15:6c:fb:
c8:bb:cd:99:dc:50:13:f2:3a:f8:41:91:c1:6b:6b:
13:49:8d:b7:55:c8:d3:6b:8a:7c:70:a4:53:cc:32:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:07:B2:E3:36:65:DE:5F:9A:65:C6:02:28:62:1D:F9:82:58:07
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.50.0/23
Signature Algorithm: sha256WithRSAEncryption
09:57:36:63:4f:56:eb:f7:34:b6:41:f7:4d:44:d0:8f:2a:cb:
18:4a:98:0e:83:5e:9e:76:6b:80:33:0b:ea:76:3b:34:be:cc:
ad:df:e7:ab:ce:ea:7c:e1:71:fb:9c:9e:df:b4:ea:78:b4:82:
f9:a7:b0:04:83:fb:97:aa:fe:8f:82:fc:3a:50:89:f4:75:e6:
1a:ee:ea:d2:d5:e9:0e:60:3a:8c:88:9c:e0:5f:63:21:29:2c:
4c:75:a8:98:85:9b:fa:b7:cd:b0:0e:d4:f1:27:45:de:5e:6b:
88:f6:f7:97:d2:9a:21:e6:bf:36:da:31:95:93:a6:fe:d3:f8:
13:bc:ff:3e:2d:b1:5b:32:b5:c2:f1:2e:77:42:0c:fa:04:4b:
b4:b6:44:71:65:5d:b5:b5:f4:04:15:20:91:b9:27:e1:18:99:
6c:73:be:97:b6:1b:97:19:cd:80:ef:85:9c:3f:65:a4:b8:d2:
35:d6:bb:3f:5c:e8:c7:04:37:08:0a:a7:a9:02:0d:bf:0c:8b:
76:77:8e:c6:f6:25:b7:74:a6:c4:ae:ff:ed:2d:72:7f:21:34:
48:1a:76:2f:9d:1f:cc:99:96:bb:89:65:bd:80:38:e4:8b:50:
ee:e9:2a:ca:1a:27:63:16:64:fe:ac:df:c9:06:70:3c:2f:f1:
4e:1e:02:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRXskwjbrX1MndvlGQCVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz
MmEwNWQwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWMyMDdiMmUzMzY2NWRlNWY5YTY1YzYwMjI4NjIxZGY5ODI1ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWvfvV4AKN8I2FypWzOYGxmIkKVm
oXjzkF5dHC4KVgYZGTzKozgPr4x9BnBcx1Dq3SxZEDhfxc7zSN7YleJGYBU85Vvu
d4C80ut1CXfX5KbdoErfiN6Xwb0UxzUbjnJtOLHbeLaBsZ1TIRD+yVK4BvxF2Slk
AZBh7WXKTxn+xy88BLYFwG+1uzk22KLB1vIHA21w+Isq2qboGHN7SnlMa499/wld
hDroDhG2WCM14+lPvhZ5t/gIjIWc6jojxQxrvTRNerr42J6pNR9/yRBkK8yKMimP
URizg3uzxDoVbPvIu82Z3FAT8jr4QZHBa2sTSY23VcjTa4p8cKRTzDKMMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLnCB7LjNmXeX5plxgIoYh35glgHMB8GA1UdIwQY
MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt
NWEwNmY3ODg3ZGJkLzEvdWNJSHN1TTJaZDVmbW1YR0FpaGlIZm1DV0FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk
LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYsyMA0G
CSqGSIb3DQEBCwUAA4IBAQAJVzZjT1br9zS2QfdNRNCPKssYSpgOg16edmuAMwvq
djs0vsyt3+erzup84XH7nJ7ftOp4tIL5p7AEg/uXqv6Pgvw6UIn0deYa7urS1ekO
YDqMiJzgX2MhKSxMdaiYhZv6t82wDtTxJ0XeXmuI9veX0poh5r822jGVk6b+0/gT
vP8+LbFbMrXC8S53Qgz6BEu0tkRxZV21tfQEFSCRuSfhGJlsc76XthuXGc2A74Wc
P2WkuNI11rs/XOjHBDcICqepAg2/DIt2d47G9iW3dKbErv/tLXJ/ITRIGnYvnR/M
mZa7iWW9gDjki1Du6SrKGidjFmT+rN/JBnA8L/FOHgI2
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:34 2025 by rpki-client