Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uhJ-XIVNq77fWXsLmAjcO82hF0c.roa
File: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (raw, json)
Hash identifier: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=
Subject key identifier: BA:12:7E:5C:85:4D:AB:BE:DF:59:7B:0B:98:08:DC:3B:CD:A1:17:47
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 0194236A33C3A3BC8C8E42F3F0D9CFC8D3F3
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uhJ-XIVNq77fWXsLmAjcO82hF0c.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59588
IP address blocks: 185.254.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:c3:a3:bc:8c:8e:42:f3:f0:d9:cf:c8:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba127e5c854dabbedf597b0b9808dc3bcda11747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:cb:75:33:05:89:54:01:82:da:b4:91:fd:
d0:31:cc:9a:99:e3:51:6d:f0:ae:d5:f0:52:17:aa:
1d:f2:c8:99:13:8e:da:c5:d8:ad:6d:0d:87:89:e8:
10:28:f9:f5:b9:d1:aa:2e:8b:09:88:c7:6a:ad:30:
a6:12:1e:7f:95:4d:80:d2:0f:e3:e6:c9:0e:ce:93:
ed:37:35:b3:19:d9:a6:f7:5d:2e:74:ae:ab:6c:9c:
7f:1a:89:4f:2d:6f:c2:62:3f:3b:3a:f6:b8:ef:4c:
88:bf:83:b3:0a:52:b6:5a:5b:8c:60:84:bc:b7:7b:
dc:f0:56:6c:4d:d1:2f:74:24:9b:95:64:49:cf:75:
89:1b:8c:2c:34:b5:74:b0:6a:85:7e:fb:45:20:64:
d5:f1:f7:42:51:c9:1c:b5:57:b1:62:48:e2:46:7a:
6a:42:c1:1d:00:b0:e8:d5:da:75:bd:7e:74:19:45:
4d:41:22:72:56:88:cb:a2:80:c7:12:32:b9:0e:79:
51:2a:69:2b:5f:1a:df:62:de:8c:b0:1c:8f:db:ce:
3f:f3:b9:8e:03:50:78:f3:71:25:89:e4:18:5e:54:
c4:9e:83:d2:57:ed:9a:09:78:58:30:e7:2c:2a:50:
ae:64:c9:3c:ec:e3:bc:ae:ef:5b:4a:c7:57:cf:e2:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:7E:5C:85:4D:AB:BE:DF:59:7B:0B:98:08:DC:3B:CD:A1:17:47
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/uhJ-XIVNq77fWXsLmAjcO82hF0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.12.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:41:39:05:98:9e:38:7c:a0:c9:bf:21:90:39:1d:1d:36:2b:
da:14:ac:2c:b8:39:b8:a4:f3:18:fb:c5:62:ca:20:2b:7a:28:
7d:7d:15:7f:4b:0e:15:16:7c:17:d4:c2:2f:b4:68:5d:d7:c0:
fd:fd:bd:3a:3b:53:02:34:f4:bb:f1:53:8f:fc:bf:96:c1:3c:
f4:8d:4e:65:c8:b3:b8:aa:b2:07:4e:f1:d0:c7:2f:79:6c:0d:
7f:bf:0d:5d:04:a7:3a:3f:37:fc:f3:29:3e:79:36:64:a3:bb:
b6:5c:0d:41:eb:20:bd:9b:04:b8:da:8e:9c:70:9e:d9:64:bf:
36:87:34:ce:e9:83:97:b8:bd:fb:bd:de:46:ed:39:28:ce:4c:
48:9c:43:65:6d:ed:5f:a4:62:fa:71:14:bc:27:ef:91:38:c7:
aa:2f:8b:61:c2:9e:aa:b0:01:6e:12:55:43:d4:0d:29:6e:22:
ab:8c:4b:eb:52:52:40:44:76:c6:bf:76:86:4e:5b:ac:80:33:
f8:11:3e:5c:4d:bb:38:5e:a3:93:03:63:62:54:2a:15:3d:2e:
1a:6e:9f:3e:60:0b:45:ff:46:da:a1:31:ab:91:bc:9b:87:1c:
d0:36:8b:17:b4:cd:59:06:da:1a:75:de:2f:bd:f5:3e:41:9e:
9e:73:ff:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjajPDo7yMjkLz8NnPyNPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTEyN2U1Yzg1NGRhYmJlZGY1OTdiMGI5ODA4ZGMzYmNkYTExNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOzLdTMFiVQBgtq0kf3QMcyameNR
bfCu1fBSF6od8siZE47axditbQ2HiegQKPn1udGqLosJiMdqrTCmEh5/lU2A0g/j
5skOzpPtNzWzGdmm910udK6rbJx/GolPLW/CYj87Ova470yIv4OzClK2WluMYIS8
t3vc8FZsTdEvdCSblWRJz3WJG4wsNLV0sGqFfvtFIGTV8fdCUckctVexYkjiRnpq
QsEdALDo1dp1vX50GUVNQSJyVojLooDHEjK5DnlRKmkrXxrfYt6MsByP284/87mO
A1B483ElieQYXlTEnoPSV+2aCXhYMOcsKlCuZMk87OO8ru9bSsdXz+JgZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLoSflyFTau+31l7C5gI3DvNoRdHMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvdWhKLVhJVk5xNzdmV1hzTG1BamNPODJoRjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4MMA0G
CSqGSIb3DQEBCwUAA4IBAQDCQTkFmJ44fKDJvyGQOR0dNivaFKwsuDm4pPMY+8Vi
yiAreih9fRV/Sw4VFnwX1MIvtGhd18D9/b06O1MCNPS78VOP/L+WwTz0jU5lyLO4
qrIHTvHQxy95bA1/vw1dBKc6Pzf88yk+eTZko7u2XA1B6yC9mwS42o6ccJ7ZZL82
hzTO6YOXuL37vd5G7TkozkxInENlbe1fpGL6cRS8J++ROMeqL4thwp6qsAFuElVD
1A0pbiKrjEvrUlJARHbGv3aGTlusgDP4ET5cTbs4XqOTA2NiVCoVPS4abp8+YAtF
/0baoTGrkbybhxzQNosXtM1ZBtoadd4vvfU+QZ6ec/+J
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:58 2025 by rpki-client on console.sobornost.net