Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/uXL2_EcPXdkgjlRyxYG_fLk_2eg.roa
File: uXL2_EcPXdkgjlRyxYG_fLk_2eg.roa (raw, json)
Hash identifier: axX87zYwKWUAPrkKa1GvqPhEg2fu4QetzYn/CKKOSqs=
Subject key identifier: B9:72:F6:FC:47:0F:5D:D9:20:8E:54:72:C5:81:BF:7C:B9:3F:D9:E8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 01945C35B5DB36305B4F2DC2509619CCC5A5
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/uXL2_EcPXdkgjlRyxYG_fLk_2eg.roa
Signing time: Sun 12 Jan 2025 20:30:11 +0000
ROA not before: Sun 12 Jan 2025 20:30:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215238
IP address blocks: 194.187.208.0/24 maxlen: 24
194.187.210.0/24 maxlen: 24
194.187.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5c:35:b5:db:36:30:5b:4f:2d:c2:50:96:19:cc:c5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Jan 12 20:30:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b972f6fc470f5dd9208e5472c581bf7cb93fd9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:a9:97:e9:1c:02:6d:d3:b2:e2:8a:61:11:
f8:7d:93:69:56:5a:fa:3d:37:34:9b:76:1e:5c:3a:
f7:e0:a8:f5:24:c2:e0:8c:35:ea:e7:b5:8f:f3:be:
88:0c:4e:e0:01:2c:9f:52:3c:c0:9e:9a:76:62:0b:
6b:ad:0c:2d:f3:8d:a6:f3:50:ae:af:7b:a8:f0:b2:
c3:88:d8:57:ab:73:9a:25:4e:25:33:5f:75:7f:9f:
96:7e:94:8c:f9:52:4d:f4:2c:bd:68:d7:61:8b:89:
16:63:cd:ac:f7:3e:aa:62:5b:03:db:16:00:15:f3:
fe:42:8b:80:67:e6:e1:e3:a8:e5:e5:fd:c2:6e:67:
c4:57:f5:ae:7e:b7:db:86:a9:d4:c2:e9:2c:28:8c:
95:2f:99:1f:98:ba:ef:1e:6c:40:60:f1:cc:01:2d:
b9:c9:52:ee:6c:a4:5c:48:54:1c:1e:7a:44:d9:75:
51:68:a8:cd:df:f6:1a:e3:8d:93:c9:e1:7f:d2:d8:
ea:23:e8:3b:a9:62:b9:3a:b9:97:93:b7:b2:0d:9a:
67:cf:e0:9a:51:eb:3c:ff:7d:aa:27:82:7a:f8:3a:
83:77:f6:4b:8a:9b:b8:de:4c:24:f6:ce:04:3c:da:
3a:24:08:6c:97:eb:83:86:52:af:9c:0c:48:47:0f:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:72:F6:FC:47:0F:5D:D9:20:8E:54:72:C5:81:BF:7C:B9:3F:D9:E8
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/uXL2_EcPXdkgjlRyxYG_fLk_2eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.208.0/24
194.187.210.0/23
Signature Algorithm: sha256WithRSAEncryption
34:8d:ec:f3:fe:51:b1:05:73:00:2b:81:b0:e9:45:ba:5a:a3:
06:63:9a:85:6e:ae:2c:e4:ca:fe:47:0f:dc:b2:68:fe:56:aa:
52:3c:0e:06:08:ee:85:72:83:7e:60:ba:70:82:d9:fc:c4:50:
6d:93:3a:6e:a9:52:2c:6e:0d:a3:19:39:a1:80:25:d4:79:13:
6c:a0:f2:96:e7:64:ea:c9:43:29:21:ed:59:d3:1f:f9:ab:a5:
98:b4:1d:0d:ef:f7:93:3b:83:70:b6:c4:78:56:7c:a0:d9:ae:
f2:59:f2:bf:79:e8:07:1a:ca:2b:35:bb:a7:8a:01:fa:6e:aa:
2c:a9:41:35:2d:ff:70:14:d2:b8:64:5e:6f:42:07:c9:af:a0:
1d:18:c2:86:24:04:3b:20:e2:0d:5e:58:c3:d5:e1:e6:ca:02:
25:c3:38:d3:5b:fc:ec:90:7e:12:c9:b7:b5:ca:c4:54:3e:2f:
40:9b:6d:9c:84:4d:36:c9:e5:7c:10:ec:48:45:3e:e4:96:bf:
12:9a:33:ba:64:d0:06:57:5b:f4:52:35:68:06:74:4f:74:da:
81:60:d7:ff:c2:d9:b3:e7:67:a7:a7:46:6c:78:a8:c7:bb:6b:
b4:8f:bf:82:ad:52:70:47:cd:5a:01:a6:27:4f:32:db:29:f4:
ba:fa:3c:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRcNbXbNjBbTy3CUJYZzMWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTNiMmMzNjIyZGY5ZTg3OTgyZWE4MzUwOTc4YTZjOTg3
NWE3YzgwHhcNMjUwMTEyMjAzMDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTcyZjZmYzQ3MGY1ZGQ5MjA4ZTU0NzJjNTgxYmY3Y2I5M2ZkOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Wpl+kcAm3TsuKKYRH4fZNpVlr6
PTc0m3YeXDr34Kj1JMLgjDXq57WP876IDE7gASyfUjzAnpp2YgtrrQwt842m81Cu
r3uo8LLDiNhXq3OaJU4lM191f5+WfpSM+VJN9Cy9aNdhi4kWY82s9z6qYlsD2xYA
FfP+QouAZ+bh46jl5f3CbmfEV/WufrfbhqnUwuksKIyVL5kfmLrvHmxAYPHMAS25
yVLubKRcSFQcHnpE2XVRaKjN3/Ya442TyeF/0tjqI+g7qWK5OrmXk7eyDZpnz+Ca
Ues8/32qJ4J6+DqDd/ZLipu43kwk9s4EPNo6JAhsl+uDhlKvnAxIRw+nfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLly9vxHD13ZII5UcsWBv3y5P9noMB8GA1UdIwQY
MBaAFHmjssNiLfnoeYLqg1CXimyYdafIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTkt
YzI0ZmY2ODJmN2FkLzEvdVhMMl9FY1BYZGtnamxSeXhZR19mTGtfMmVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTktYzI0ZmY2ODJmN2Fk
LzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwrvQAwQB
wrvSMA0GCSqGSIb3DQEBCwUAA4IBAQA0jezz/lGxBXMAK4Gw6UW6WqMGY5qFbq4s
5Mr+Rw/csmj+VqpSPA4GCO6FcoN+YLpwgtn8xFBtkzpuqVIsbg2jGTmhgCXUeRNs
oPKW52TqyUMpIe1Z0x/5q6WYtB0N7/eTO4NwtsR4Vnyg2a7yWfK/eegHGsorNbun
igH6bqosqUE1Lf9wFNK4ZF5vQgfJr6AdGMKGJAQ7IOINXljD1eHmygIlwzjTW/zs
kH4Sybe1ysRUPi9Am22chE02yeV8EOxIRT7klr8SmjO6ZNAGV1v0UjVoBnRPdNqB
YNf/wtmz52enp0ZseKjHu2u0j7+CrVJwR81aAaYnTzLbKfS6+jwm
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:41:49 2025 by rpki-client on console.sobornost.net