Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/UShqGyi6RZRV0Ph4_yVYYleIO40.roa
File: UShqGyi6RZRV0Ph4_yVYYleIO40.roa (raw, json)
Hash identifier: ugrz3hjzhhiYzWWbWxwCGvT2Anh3/HoqFXI/J0yrilg=
Subject key identifier: 51:28:6A:1B:28:BA:45:94:55:D0:F8:78:FF:25:58:62:57:88:3B:8D
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019423D6F17AE193F5153E673B7E8332DB80
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/UShqGyi6RZRV0Ph4_yVYYleIO40.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212346
IP address blocks: 194.147.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f1:7a:e1:93:f5:15:3e:67:3b:7e:83:32:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51286a1b28ba459455d0f878ff25586257883b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:66:26:0d:c9:49:6d:6c:e9:77:a7:31:bc:
ea:ba:e4:ed:5b:42:5d:82:7b:9e:04:11:e2:3f:eb:
58:28:0a:46:77:e1:de:b9:5a:2e:e9:7d:73:2c:ff:
48:38:2e:69:bd:dc:6a:3b:48:a4:a7:c6:69:56:a3:
35:04:0e:8f:1f:21:0e:5d:50:7d:60:ac:6f:cd:ad:
31:2c:d3:05:b2:cc:97:af:14:a6:e8:08:7b:48:ae:
d0:5d:bd:6e:a8:ff:18:1e:80:b9:a7:98:a4:4e:3c:
38:64:78:49:80:53:d7:df:23:ad:0c:5e:36:2f:e8:
6e:67:ae:95:e2:30:97:e3:49:67:f0:ce:00:f3:9b:
d3:a2:a3:4b:03:27:b7:76:7f:59:fb:07:63:89:d7:
38:f6:15:c5:51:64:36:cc:94:e5:a1:9a:fc:54:14:
b7:ae:57:29:5e:7f:b4:d7:ba:6b:86:1d:ce:1f:51:
6b:ca:c4:13:37:92:64:9c:fe:7c:8e:23:f4:7a:d8:
53:f9:a6:65:4e:2b:31:0c:e8:84:b7:8f:65:c6:ed:
78:ff:1b:eb:2b:f6:83:a1:45:1d:80:2d:97:fa:55:
b5:85:fb:c7:93:90:90:92:d5:f3:b2:18:04:d0:2e:
04:df:cc:2c:0b:47:ac:44:51:cc:ce:8f:6f:a5:aa:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:6A:1B:28:BA:45:94:55:D0:F8:78:FF:25:58:62:57:88:3B:8D
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/UShqGyi6RZRV0Ph4_yVYYleIO40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:24:c9:57:fc:da:a7:db:08:34:d8:ec:2d:d2:fa:59:16:b7:
f8:30:5c:c4:36:c1:af:a7:c6:3b:7e:9a:9a:c3:70:ab:37:45:
7a:18:c3:4c:05:31:df:b1:00:b5:25:b9:b4:3f:04:93:98:8d:
3f:33:df:0c:1d:06:76:13:b9:af:78:86:50:c4:d6:76:d9:0f:
fc:fe:73:be:ce:21:4c:e3:9d:25:2a:bc:42:19:b6:fb:60:87:
dc:01:68:72:08:b4:bf:a1:cb:3c:d5:44:c7:f9:55:39:81:24:
15:c4:17:20:81:5b:9e:5b:2a:bf:84:5d:9b:a0:64:23:44:ff:
91:fa:a9:be:46:98:88:c8:31:9b:bf:42:3e:e2:ce:8b:d3:29:
74:54:66:58:69:5a:07:db:b3:20:31:4c:14:7b:dc:5c:34:81:
81:1a:6a:df:a4:29:b5:f6:61:23:c6:73:df:7d:0e:ff:bb:e8:
c3:8b:30:09:6e:87:15:58:0c:97:d0:07:08:a8:53:95:16:7a:
04:37:f8:1d:e7:bf:4d:b2:88:c2:a7:ba:23:e1:33:69:54:2f:
67:64:9d:27:5b:e5:45:98:ee:1b:3c:d8:22:88:15:0c:cf:b7:
cc:87:77:e4:8f:8a:b7:82:b0:cb:da:83:a7:c1:ce:00:f1:88:
59:19:3a:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vF64ZP1FT5nO36DMtuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjUwMTAxMjE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTI4NmExYjI4YmE0NTk0NTVkMGY4NzhmZjI1NTg2MjU3ODgzYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk19mJg3JSW1s6XenMbzquuTtW0Jd
gnueBBHiP+tYKApGd+HeuVou6X1zLP9IOC5pvdxqO0ikp8ZpVqM1BA6PHyEOXVB9
YKxvza0xLNMFssyXrxSm6Ah7SK7QXb1uqP8YHoC5p5ikTjw4ZHhJgFPX3yOtDF42
L+huZ66V4jCX40ln8M4A85vToqNLAye3dn9Z+wdjidc49hXFUWQ2zJTloZr8VBS3
rlcpXn+017prhh3OH1FrysQTN5JknP58jiP0ethT+aZlTisxDOiEt49lxu14/xvr
K/aDoUUdgC2X+lW1hfvHk5CQktXzshgE0C4E38wsC0esRFHMzo9vpap7PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEoahsoukWUVdD4eP8lWGJXiDuNMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvVVNocUd5aTZSWlJWMFBoNF95VllZbGVJTzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpPmMA0G
CSqGSIb3DQEBCwUAA4IBAQBsJMlX/Nqn2wg02Owt0vpZFrf4MFzENsGvp8Y7fpqa
w3CrN0V6GMNMBTHfsQC1Jbm0PwSTmI0/M98MHQZ2E7mveIZQxNZ22Q/8/nO+ziFM
450lKrxCGbb7YIfcAWhyCLS/ocs81UTH+VU5gSQVxBcggVueWyq/hF2boGQjRP+R
+qm+RpiIyDGbv0I+4s6L0yl0VGZYaVoH27MgMUwUe9xcNIGBGmrfpCm19mEjxnPf
fQ7/u+jDizAJbocVWAyX0AcIqFOVFnoEN/gd579NsojCp7oj4TNpVC9nZJ0nW+VF
mO4bPNgiiBUMz7fMh3fkj4q3grDL2oOnwc4A8YhZGTqr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net