Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa
File: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (raw, json)
Hash identifier: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=
Subject key identifier: B8:D8:F4:BE:17:14:2B:F5:21:7D:2C:6B:C5:56:4B:62:9D:A7:EA:79
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 019422202DBE8435E80FBED56853607FCD5D
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15913
IP address blocks: 94.198.16.0/21 maxlen: 21
94.198.20.0/22 maxlen: 22
185.157.188.0/24 maxlen: 24
185.157.189.0/24 maxlen: 24
185.157.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2d:be:84:35:e8:0f:be:d5:68:53:60:7f:cd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8d8f4be17142bf5217d2c6bc5564b629da7ea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:5a:b0:f5:34:31:1e:5c:7a:c0:67:c8:3a:
79:e5:a2:20:51:8b:1d:c5:f2:7d:e7:d9:55:10:13:
47:98:f4:f3:35:7a:5c:d8:65:f9:d9:6a:b3:9d:b7:
b6:59:e0:04:99:20:76:84:61:ec:bb:8e:16:db:5e:
3c:f7:09:9a:f7:c0:c0:f1:8a:69:94:3f:b3:33:a0:
48:3d:16:27:87:04:f1:24:66:10:fb:b5:bd:8b:2f:
ea:06:ac:d7:58:f6:08:dc:76:9a:a2:07:26:79:da:
78:8c:bc:37:a5:0f:d6:41:40:1a:8e:e7:b7:41:aa:
6d:9a:44:f7:f7:15:1e:c1:52:24:5b:cf:16:09:ea:
d7:46:2c:e2:ec:a8:46:23:97:08:48:56:b1:b6:83:
53:30:a9:e9:c8:0f:41:89:60:3a:10:ed:58:a3:7b:
19:62:20:5b:cb:60:d7:cd:9e:91:70:0b:c2:fb:fd:
19:1b:47:94:44:26:3d:d5:7e:f2:46:90:3c:cb:c4:
03:17:4c:75:36:b9:99:46:7b:c7:2d:e8:1e:cc:de:
c9:b6:1f:7b:b1:5d:5e:35:ea:92:4e:8c:3e:e4:52:
73:83:c2:2c:dd:79:41:5e:91:ea:bb:eb:88:21:2a:
d0:22:6f:80:ac:62:de:e8:20:7a:f1:e8:e8:2d:2c:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:F4:BE:17:14:2B:F5:21:7D:2C:6B:C5:56:4B:62:9D:A7:EA:79
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.16.0/21
185.157.188.0-185.157.190.255
Signature Algorithm: sha256WithRSAEncryption
93:52:0b:ef:f6:70:46:e6:df:b8:5a:0c:02:61:7a:f9:01:35:
4f:71:21:fb:05:82:89:89:59:11:c3:b4:dd:01:15:af:a6:8f:
67:1a:e0:a2:b9:b6:c7:c4:9b:da:d7:98:9a:59:d3:9a:f6:cc:
eb:7e:66:08:2a:fa:95:c6:ec:37:ff:b7:eb:49:d1:60:6a:4f:
b6:da:26:ed:38:6d:ba:01:48:a2:30:76:c3:3a:85:59:4f:99:
62:d9:9d:a7:3b:69:04:5c:ab:a1:fc:e5:a4:ed:8e:5a:2f:d1:
97:88:8d:74:6f:e8:57:dd:09:bb:8e:8b:6b:91:05:a1:7f:a2:
13:5d:b2:6a:b5:b7:dd:22:28:1a:65:db:a0:39:54:1e:67:be:
f0:64:87:e5:83:06:ec:b3:61:63:1a:70:a0:e0:6b:e1:e2:34:
e2:d3:4c:de:1f:14:42:11:fa:be:15:28:95:20:fa:38:13:88:
15:b3:aa:4c:be:f2:9f:f5:d3:24:4c:db:9f:b2:e3:26:d3:0c:
87:6a:59:d1:02:54:27:ac:e6:28:b9:67:fa:82:3e:8e:ea:f5:
a3:bb:10:d2:ff:ec:01:28:86:bb:bc:1e:16:54:5c:8c:cf:ab:
95:cd:a3:02:53:49:14:38:fb:68:d1:42:e8:a5:a5:7c:2c:2d:
77:a5:ce:a9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQiIC2+hDXoD77VaFNgf81dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjQxZmFiM2U2M2VhZjViZGYwNzE2NmRmNWFhNjgxNjJl
YWQ3YTYwHhcNMjUwMTAxMTM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGQ4ZjRiZTE3MTQyYmY1MjE3ZDJjNmJjNTU2NGI2MjlkYTdlYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdJasPU0MR5cesBnyDp55aIgUYsd
xfJ959lVEBNHmPTzNXpc2GX52Wqznbe2WeAEmSB2hGHsu44W21489wma98DA8Ypp
lD+zM6BIPRYnhwTxJGYQ+7W9iy/qBqzXWPYI3Haaogcmedp4jLw3pQ/WQUAajue3
QaptmkT39xUewVIkW88WCerXRizi7KhGI5cISFaxtoNTMKnpyA9BiWA6EO1Yo3sZ
YiBby2DXzZ6RcAvC+/0ZG0eURCY91X7yRpA8y8QDF0x1NrmZRnvHLegezN7Jth97
sV1eNeqSTow+5FJzg8Is3XlBXpHqu+uIISrQIm+ArGLe6CB68ejoLSwm4QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLjY9L4XFCv1IX0sa8VWS2Kdp+p5MB8GA1UdIwQY
MBaAFIj0H6s+Y+r1vfBxZt9apoFi6temMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMt
ODk3Y2I2YTQzMGQ3LzEvdU5qMHZoY1VLX1VoZlN4cnhWWkxZcDJuNm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDZkOGItYzc1OC00YjkzLWI5ZjMtODk3Y2I2YTQzMGQ3
LzEvaVBRZnF6NWo2dlc5OEhGbTMxcW1nV0xxMTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDXsYQMAwD
BAK5nbwDBAC5nb4wDQYJKoZIhvcNAQELBQADggEBAJNSC+/2cEbm37haDAJhevkB
NU9xIfsFgomJWRHDtN0BFa+mj2ca4KK5tsfEm9rXmJpZ05r2zOt+Zggq+pXG7Df/
t+tJ0WBqT7baJu04bboBSKIwdsM6hVlPmWLZnac7aQRcq6H85aTtjlov0ZeIjXRv
6FfdCbuOi2uRBaF/ohNdsmq1t90iKBpl26A5VB5nvvBkh+WDBuyzYWMacKDga+Hi
NOLTTN4fFEIR+r4VKJUg+jgTiBWzqky+8p/10yRM25+y4ybTDIdqWdECVCes5ii5
Z/qCPo7q9aO7ENL/7AEohru8HhZUXIzPq5XNowJTSRQ4+2jRQuilpXwsLXelzqk=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net