Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ue_OmBB3WLAaQEqFXwEy3INuo7M.roa
File: Ue_OmBB3WLAaQEqFXwEy3INuo7M.roa (raw, json)
Hash identifier: G7g8tw4Qd6Vza+JzclGbWPZaFH5x5cq+5RgPTJ/xeno=
Subject key identifier: 51:EF:CE:98:10:77:58:B0:1A:40:4A:85:5F:01:32:DC:83:6E:A3:B3
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F863EA944E822F64A853A771E3EAAEB63
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ue_OmBB3WLAaQEqFXwEy3INuo7M.roa
Signing time: Fri 17 May 2024 11:10:04 +0000
ROA not before: Fri 17 May 2024 11:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:3e:a9:44:e8:22:f6:4a:85:3a:77:1e:3e:aa:eb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 17 11:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51efce98107758b01a404a855f0132dc836ea3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:93:a1:d5:02:6a:67:f5:12:28:1f:79:4b:
d6:15:e4:f0:6d:f9:aa:5f:c0:b7:66:9e:1c:84:46:
76:79:64:f3:8c:12:d8:80:e5:8e:9c:26:76:31:e2:
18:6c:c6:1c:91:a4:28:3b:23:e5:a3:94:91:f0:76:
ed:31:e5:06:de:5f:cb:62:6c:75:29:d7:e5:32:9d:
fa:7a:4d:6d:69:6d:7f:72:fe:64:b7:2c:f0:fd:b6:
dc:8b:51:40:6f:82:fc:30:9d:b0:09:41:28:7f:0f:
58:ca:de:7e:b3:fe:d1:0e:e0:e7:21:9d:06:b3:71:
79:57:dd:2a:15:4d:61:ca:b5:06:b7:52:eb:4b:47:
40:6c:18:d1:8c:95:ad:67:a3:f9:96:38:ad:31:c5:
c2:29:e1:73:79:6f:19:fb:ce:8e:4e:2a:fc:05:eb:
3e:1c:8b:1b:47:8e:06:f7:b7:ba:36:65:89:97:17:
7f:c5:bb:cf:19:0f:92:08:8c:28:6c:5f:8f:a9:60:
9f:18:b7:67:00:3e:96:e6:2f:4e:cc:c9:16:23:ab:
37:29:42:66:95:67:80:b9:b5:19:ff:7a:76:84:9e:
f9:9f:bf:c8:c9:b8:54:bc:52:b6:d1:32:29:06:d8:
ee:cb:0b:dc:d9:9c:72:33:39:1a:d4:b1:ee:c9:2e:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EF:CE:98:10:77:58:B0:1A:40:4A:85:5F:01:32:DC:83:6E:A3:B3
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/Ue_OmBB3WLAaQEqFXwEy3INuo7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:55:20:79:50:f6:77:67:c9:2c:cf:b2:f6:19:37:3b:92:f5:
a8:2c:0c:4b:56:0e:7a:28:80:f9:8c:18:15:3c:c5:82:ca:b1:
a7:8c:99:76:d0:93:47:1d:d0:c7:5a:04:14:00:6b:c3:97:f4:
74:04:d8:af:c4:0d:88:0f:60:76:ad:fb:dc:1e:82:43:ab:28:
78:31:6b:cc:d2:6d:ac:ce:5f:3e:76:82:16:a7:b9:33:d1:73:
34:ec:f2:06:9f:ea:4c:1a:38:d0:b2:bc:c5:66:1a:7e:29:a5:
c4:20:3f:92:94:cf:d3:b3:a6:6e:13:37:57:ca:c2:ef:21:f4:
44:03:67:d4:72:1a:dd:53:01:f9:c2:82:f9:ce:5b:26:d2:6c:
80:cf:97:06:b9:11:6f:d9:0d:69:ee:80:1c:6d:6d:d6:f3:5a:
22:ab:9d:15:b5:7b:19:06:36:3e:4b:e8:45:ce:b3:c4:32:7a:
38:94:da:da:f2:5e:83:f1:ae:27:f1:49:3d:5a:52:49:f2:5b:
03:c9:79:2d:75:4f:5b:0b:54:dc:fa:17:a5:e3:cf:7b:b6:31:
e1:5e:54:04:ae:60:ab:24:e5:01:e7:da:cc:8e:10:cf:48:a5:
39:d1:28:e8:42:e5:c6:cf:6a:fa:e2:a3:cb:ba:76:cb:0b:b1:
6c:45:fc:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+GPqlE6CL2SoU6dx4+qutjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE3MTExMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWVmY2U5ODEwNzc1OGIwMWE0MDRhODU1ZjAxMzJkYzgzNmVhM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFuTodUCamf1EigfeUvWFeTwbfmq
X8C3Zp4chEZ2eWTzjBLYgOWOnCZ2MeIYbMYckaQoOyPlo5SR8HbtMeUG3l/LYmx1
KdflMp36ek1taW1/cv5ktyzw/bbci1FAb4L8MJ2wCUEofw9Yyt5+s/7RDuDnIZ0G
s3F5V90qFU1hyrUGt1LrS0dAbBjRjJWtZ6P5ljitMcXCKeFzeW8Z+86OTir8Bes+
HIsbR44G97e6NmWJlxd/xbvPGQ+SCIwobF+PqWCfGLdnAD6W5i9OzMkWI6s3KUJm
lWeAubUZ/3p2hJ75n7/IybhUvFK20TIpBtjuywvc2ZxyMzka1LHuyS4jbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFHvzpgQd1iwGkBKhV8BMtyDbqOzMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVWVfT21CQjNXTEFhUUVxRlh3RXkzSU51bzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKdVIHlQ9ndnySzPsvYZ
NzuS9agsDEtWDnoogPmMGBU8xYLKsaeMmXbQk0cd0MdaBBQAa8OX9HQE2K/EDYgP
YHat+9wegkOrKHgxa8zSbazOXz52ghanuTPRczTs8gaf6kwaONCyvMVmGn4ppcQg
P5KUz9Ozpm4TN1fKwu8h9EQDZ9RyGt1TAfnCgvnOWybSbIDPlwa5EW/ZDWnugBxt
bdbzWiKrnRW1exkGNj5L6EXOs8QyejiU2tryXoPxrifxST1aUknyWwPJeS11T1sL
VNz6F6Xjz3u2MeFeVASuYKsk5QHn2syOEM9IpTnRKOhC5cbPavrio8u6dssLsWxF
/MQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:49 2025 by rpki-client