Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa
File: uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa (raw, json)
Hash identifier: p6HLTz97eUfObx31ZQ7fD3+tg4SDQ5VAA/i07H3/8o4=
Subject key identifier: B8:E9:5F:5B:0F:E8:B7:51:8D:CF:EC:43:B3:41:DF:13:C7:F4:19:78
Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial: 01956AA25ACADEABA29F363159FBAAA82BA2
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa
Signing time: Thu 06 Mar 2025 08:46:19 +0000
ROA not before: Thu 06 Mar 2025 08:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47719
IP address blocks: 194.146.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6a:a2:5a:ca:de:ab:a2:9f:36:31:59:fb:aa:a8:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Validity
Not Before: Mar 6 08:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e95f5b0fe8b7518dcfec43b341df13c7f41978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:b6:7c:61:64:4f:54:28:28:c1:23:fd:6a:
00:14:bf:d9:8d:ca:35:22:9d:ac:b5:25:31:01:f7:
55:5b:fa:06:59:62:11:56:b5:2b:2b:01:9c:a9:2c:
1b:a5:9c:8e:c1:57:97:63:37:fd:53:48:0e:8b:ed:
1d:3c:c9:3b:b5:25:2d:2b:a5:50:db:7b:0b:82:a6:
56:ce:5f:9c:87:52:88:06:88:0c:93:9e:86:55:57:
a4:13:04:2a:c6:cc:47:a6:e5:33:57:e5:6c:f5:81:
3e:2f:75:58:4f:06:f0:16:e1:2a:7c:e0:54:dc:c6:
2a:bd:81:bd:4d:70:e4:2a:19:37:b4:c2:67:1b:63:
53:75:eb:a4:88:2f:15:71:73:cc:1a:fe:3e:95:07:
d1:b4:85:80:2c:6f:1b:ae:db:5e:b7:07:5f:8c:fa:
40:17:1d:26:0d:70:e7:3e:a1:67:37:e6:6f:aa:8d:
c6:b5:39:97:d2:67:80:77:dd:11:b0:e8:e2:be:45:
e1:f1:8d:89:05:dd:bf:7b:29:72:95:8d:63:4d:3d:
ef:92:67:46:b3:41:87:6d:b4:1f:88:94:af:e8:16:
1f:93:3d:e3:c2:a8:05:f9:b9:0a:d2:1a:3e:8f:6f:
76:f5:49:ce:b4:d3:78:28:be:0d:14:c4:32:bd:26:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E9:5F:5B:0F:E8:B7:51:8D:CF:EC:43:B3:41:DF:13:C7:F4:19:78
X509v3 Authority Key Identifier:
keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/uOlfWw_ot1GNz-xDs0HfE8f0GXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.153.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ce:a2:56:74:a7:21:5d:f5:02:73:86:93:21:f9:7d:e4:7f:
c3:c8:0b:ea:cb:43:46:6f:40:7a:59:45:a3:e9:3b:29:e2:58:
42:a6:d1:7d:5b:88:3a:7a:20:7a:51:82:b6:ef:9d:07:80:ff:
4f:e5:94:42:7f:ad:4f:aa:e3:1a:10:1d:57:fd:fb:6c:5e:7c:
35:ae:eb:0f:7a:93:99:9c:50:8d:98:f1:d3:bb:65:9a:d0:7b:
f1:d0:a8:78:05:c5:cb:43:07:f7:bf:2c:df:41:12:b5:01:e2:
de:33:ca:c3:2f:53:5f:15:d9:14:54:2b:fc:8b:c4:60:d7:32:
28:f5:ee:81:62:47:39:3d:a6:62:45:65:ed:42:eb:48:02:07:
4c:bd:81:ff:07:d8:92:66:af:3d:11:c9:ce:4b:55:57:16:84:
ff:6c:17:10:86:6d:b2:51:ba:4d:ca:a7:4c:95:27:49:3e:96:
d3:82:24:82:c9:4b:7d:98:d7:11:92:5c:ba:6e:11:3c:7d:63:
13:f4:92:07:7e:20:47:68:a6:df:d1:b3:22:c3:34:f9:70:3f:
60:cf:d7:da:f5:da:31:e2:6d:de:e4:ba:02:d7:f6:01:6f:05:
7b:62:88:05:bb:a5:aa:fc:08:f8:d8:f8:65:dd:b0:4f:60:81:
7f:0c:7e:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVqolrK3quinzYxWfuqqCuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk
NDRlN2IwHhcNMjUwMzA2MDg0NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGU5NWY1YjBmZThiNzUxOGRjZmVjNDNiMzQxZGYxM2M3ZjQxOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8W2fGFkT1QoKMEj/WoAFL/Zjco1
Ip2stSUxAfdVW/oGWWIRVrUrKwGcqSwbpZyOwVeXYzf9U0gOi+0dPMk7tSUtK6VQ
23sLgqZWzl+ch1KIBogMk56GVVekEwQqxsxHpuUzV+Vs9YE+L3VYTwbwFuEqfOBU
3MYqvYG9TXDkKhk3tMJnG2NTdeukiC8VcXPMGv4+lQfRtIWALG8brttetwdfjPpA
Fx0mDXDnPqFnN+Zvqo3GtTmX0meAd90RsOjivkXh8Y2JBd2/eylylY1jTT3vkmdG
s0GHbbQfiJSv6BYfkz3jwqgF+bkK0ho+j2929UnOtNN4KL4NFMQyvSYMMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjpX1sP6LdRjc/sQ7NB3xPH9Bl4MB8GA1UdIwQY
MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt
YjVlMGU0YzMzMTVjLzEvdU9sZld3X290MUdOei14RHMwSGZFOGYwR1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj
LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpKZMA0G
CSqGSIb3DQEBCwUAA4IBAQCRzqJWdKchXfUCc4aTIfl95H/DyAvqy0NGb0B6WUWj
6Tsp4lhCptF9W4g6eiB6UYK2750HgP9P5ZRCf61PquMaEB1X/ftsXnw1rusPepOZ
nFCNmPHTu2Wa0Hvx0Kh4BcXLQwf3vyzfQRK1AeLeM8rDL1NfFdkUVCv8i8Rg1zIo
9e6BYkc5PaZiRWXtQutIAgdMvYH/B9iSZq89EcnOS1VXFoT/bBcQhm2yUbpNyqdM
lSdJPpbTgiSCyUt9mNcRkly6bhE8fWMT9JIHfiBHaKbf0bMiwzT5cD9gz9fa9dox
4m3e5LoC1/YBbwV7YogFu6Wq/Aj42Phl3bBPYIF/DH6S
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net