Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/UvaL6VYsICABr4f2mztYJpGnmok.roa
File: UvaL6VYsICABr4f2mztYJpGnmok.roa (raw, json)
Hash identifier: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=
Subject key identifier: 52:F6:8B:E9:56:2C:20:20:01:AF:87:F6:9B:3B:58:26:91:A7:9A:89
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 0194258EC6A7DC4D927FA5597340F868A2D4
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/UvaL6VYsICABr4f2mztYJpGnmok.roa
Signing time: Thu 02 Jan 2025 05:48:21 +0000
ROA not before: Thu 02 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8245
IP address blocks: 185.202.192.0/22 maxlen: 22
185.202.192.0/24 maxlen: 24
185.202.193.0/24 maxlen: 24
185.202.194.0/24 maxlen: 24
185.202.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c6:a7:dc:4d:92:7f:a5:59:73:40:f8:68:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Jan 2 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52f68be9562c202001af87f69b3b582691a79a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:98:6b:ec:42:db:37:1d:31:de:8b:0b:9e:
54:e8:05:bf:77:fd:97:38:c8:f1:99:ce:4e:6a:9f:
48:f7:f2:00:57:4b:c8:d3:f5:81:1c:80:98:37:a0:
d1:4c:be:53:61:e6:11:e8:aa:26:49:c4:14:ac:5b:
8b:55:41:bd:ea:b5:79:b7:cc:3f:21:e0:0e:c9:0f:
f5:66:78:88:8c:b7:11:14:4a:22:87:c6:6d:f1:ae:
9d:4a:a9:77:d5:08:0e:c2:34:17:0f:dc:a2:af:b7:
c2:77:b5:c5:b4:1e:ce:1c:ed:0c:62:45:9a:36:eb:
f5:3b:eb:81:6a:83:2b:93:92:00:8c:91:6e:4c:9d:
d3:7c:a5:ac:ba:f9:66:9e:7f:87:70:99:55:7c:6a:
ee:ee:cc:24:14:77:14:e9:60:9d:9b:7c:72:c0:b4:
ae:1a:fc:1f:70:a0:6c:3a:76:94:65:23:75:15:65:
b2:62:dc:1c:5e:d9:76:4b:a4:79:43:f4:2c:bc:21:
2a:b4:eb:e3:ab:b2:97:c6:6f:3b:92:53:89:b2:41:
03:d9:9e:bb:04:56:85:08:17:01:b3:b1:d9:2a:36:
35:42:ca:e7:64:9c:19:6b:bb:1a:9c:0c:74:c3:a6:
c4:22:30:1a:5c:d7:5d:c7:19:22:6c:6d:54:35:0e:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:8B:E9:56:2C:20:20:01:AF:87:F6:9B:3B:58:26:91:A7:9A:89
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/UvaL6VYsICABr4f2mztYJpGnmok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:9e:e5:95:9c:24:8e:33:e5:9a:c8:19:dd:f1:12:31:34:b7:
94:9f:34:ea:a3:81:c3:0c:90:6a:53:30:dc:7d:8f:bd:6e:4e:
cb:a5:7c:c3:5e:fa:b4:eb:aa:39:d1:cc:6a:3f:3f:0a:1f:d0:
36:9d:a2:f7:b7:d2:44:03:56:df:21:a7:4d:09:b4:d4:2f:28:
fd:b8:b6:69:bf:e3:9a:0c:32:bd:28:cd:07:d6:cc:05:a1:88:
67:14:6b:0d:40:16:95:c3:0c:98:ed:ba:8c:ec:69:a0:b5:7c:
63:b7:c4:09:e1:3f:f4:66:4e:91:29:b8:03:b2:77:e3:8f:4a:
05:ba:4e:aa:c8:cb:8e:01:81:bb:fe:e3:da:c2:83:a3:1b:bd:
78:be:b7:14:3a:f1:64:98:05:28:29:9d:0e:66:82:35:07:ed:
11:43:b9:c3:28:b6:fb:04:a6:19:f8:b5:bd:7f:a3:fc:bc:f1:
1a:1a:36:50:43:31:d2:d3:3e:a1:7f:8c:ee:34:fd:a4:db:d5:
39:f9:60:92:83:7c:44:04:48:3b:7c:38:1a:35:2f:23:8a:a5:
24:48:6d:de:89:ed:72:ca:ec:bd:0a:ff:2b:35:6c:ee:26:d8:
ab:b1:bb:87:3e:bd:55:ad:28:38:7b:09:ff:d3:a6:0c:57:5e:
be:91:e9:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljsan3E2Sf6VZc0D4aKLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODA5NjQ0MDdjNWRhYTQ0MDg4YWNmZTk1ZTY0ODhiODAw
ZmFkZTUwHhcNMjUwMTAyMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmY2OGJlOTU2MmMyMDIwMDFhZjg3ZjY5YjNiNTgyNjkxYTc5YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxSYa+xC2zcdMd6LC55U6AW/d/2X
OMjxmc5Oap9I9/IAV0vI0/WBHICYN6DRTL5TYeYR6KomScQUrFuLVUG96rV5t8w/
IeAOyQ/1ZniIjLcRFEoih8Zt8a6dSql31QgOwjQXD9yir7fCd7XFtB7OHO0MYkWa
Nuv1O+uBaoMrk5IAjJFuTJ3TfKWsuvlmnn+HcJlVfGru7swkFHcU6WCdm3xywLSu
GvwfcKBsOnaUZSN1FWWyYtwcXtl2S6R5Q/QsvCEqtOvjq7KXxm87klOJskED2Z67
BFaFCBcBs7HZKjY1QsrnZJwZa7sanAx0w6bEIjAaXNddxxkibG1UNQ68RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFL2i+lWLCAgAa+H9ps7WCaRp5qJMB8GA1UdIwQY
MBaAFG+AlkQHxdqkQIis/pXmSIuAD63lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2Qt
NWQ5MmNlZjIzYzVhLzEvVXZhTDZWWXNJQ0FCcjRmMm16dFlKcEdubW9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9iOTA2YzktMmIzZC00MzdjLWEzY2QtNWQ5MmNlZjIzYzVh
LzEvYjRDV1JBZkYycVJBaUt6LWxlWklpNEFQcmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucrAMA0G
CSqGSIb3DQEBCwUAA4IBAQC2nuWVnCSOM+WayBnd8RIxNLeUnzTqo4HDDJBqUzDc
fY+9bk7LpXzDXvq066o50cxqPz8KH9A2naL3t9JEA1bfIadNCbTULyj9uLZpv+Oa
DDK9KM0H1swFoYhnFGsNQBaVwwyY7bqM7GmgtXxjt8QJ4T/0Zk6RKbgDsnfjj0oF
uk6qyMuOAYG7/uPawoOjG714vrcUOvFkmAUoKZ0OZoI1B+0RQ7nDKLb7BKYZ+LW9
f6P8vPEaGjZQQzHS0z6hf4zuNP2k29U5+WCSg3xEBEg7fDgaNS8jiqUkSG3eie1y
yuy9Cv8rNWzuJtirsbuHPr1VrSg4ewn/06YMV16+kemU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net