Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/un6D2bT7_BaeApUVRBL0B6Gz3Ug.roa
File: un6D2bT7_BaeApUVRBL0B6Gz3Ug.roa (raw, json)
Hash identifier: qF02RyBMuhKdJZZaDKv5Zgd0uhAL0iM9c98InczLxeo=
Subject key identifier: BA:7E:83:D9:B4:FB:FC:16:9E:02:95:15:44:12:F4:07:A1:B3:DD:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EF0778372791EF124D556FF44B49
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/un6D2bT7_BaeApUVRBL0B6Gz3Ug.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 192.124.178.0/24 maxlen: 24
195.133.54.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ef:07:78:37:27:91:ef:12:4d:55:6f:f4:4b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba7e83d9b4fbfc169e0295154412f407a1b3dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:d3:a7:01:98:65:d5:3c:c2:4b:31:ba:11:
f2:30:24:68:22:8f:53:25:df:a5:11:4e:2b:a1:ff:
d6:ca:1e:9c:b5:cd:8b:e3:88:ce:b4:7b:a3:60:ea:
34:ce:5e:ce:d2:d5:85:31:2c:aa:8a:15:5e:8d:44:
16:59:0f:92:f5:6c:d3:18:cc:be:a1:2b:e4:c8:11:
63:7d:1f:b3:e7:c2:96:bc:93:49:2c:15:18:76:05:
12:d0:e2:b2:91:b9:02:48:bc:6f:74:54:7f:06:e3:
1d:54:27:ff:d5:16:2e:72:07:a7:6c:44:d5:4f:3a:
21:8a:ee:5a:4f:f0:66:0c:6e:4c:5a:de:c3:5b:2b:
5e:87:28:6e:73:b8:86:02:7e:55:2f:9b:51:7a:45:
6e:5d:f1:30:5f:ac:3f:8c:f3:eb:76:8e:58:21:1b:
6e:6b:65:7e:43:61:16:7d:eb:0e:51:5d:5d:fc:15:
73:6d:0f:83:e0:19:27:e1:d1:da:7c:53:88:47:10:
3a:eb:c9:0b:ae:2a:c6:33:9c:66:c2:b0:36:f7:47:
75:ab:ba:ea:18:17:55:d4:c9:66:7b:73:31:de:29:
e7:5d:60:ee:3d:3d:f9:bc:6d:91:a6:75:b2:d9:c7:
26:50:d9:ec:05:6d:d4:70:45:42:90:1e:59:9c:37:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7E:83:D9:B4:FB:FC:16:9E:02:95:15:44:12:F4:07:A1:B3:DD:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/un6D2bT7_BaeApUVRBL0B6Gz3Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
195.133.54.0/24
195.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:04:d9:0b:75:8e:4b:ca:3c:e7:79:aa:dc:84:a2:f9:73:ff:
db:56:07:1e:3e:b7:0e:50:7c:c1:c4:d0:d9:2b:5a:f9:fc:26:
ad:ed:08:83:4d:58:75:b1:ba:d3:bc:8f:e6:be:29:bb:c5:17:
de:a1:a5:0f:70:b7:34:b2:77:3c:64:0e:f4:09:7b:e7:0b:76:
ac:88:d2:ca:f5:c5:e6:5d:1d:a0:ec:6d:fa:ab:86:d5:cd:71:
6a:ed:b5:b9:a0:f9:fa:90:81:35:2c:39:63:dc:82:6d:a0:f0:
f6:e0:11:20:3c:31:ce:7a:0c:8e:04:1b:0e:1e:d7:e2:c1:5a:
ca:e0:64:be:a8:d6:a0:fc:66:82:32:a5:01:a0:9d:7e:1a:8c:
82:17:7d:e4:d7:e5:9b:46:74:04:49:8b:a0:cf:50:0f:bc:57:
b7:df:f8:33:f8:5a:1f:82:49:87:b9:46:ac:61:0f:8f:a7:ed:
03:b3:0d:4b:97:a1:e6:cc:ee:9e:d0:88:5b:1e:c2:ea:3e:74:
8c:04:0e:ed:fa:0f:b6:fe:bb:97:1c:28:f1:16:36:f3:ae:75:
f2:d0:77:b1:e1:64:99:4b:04:be:d0:d0:b0:b7:03:00:e2:dd:
05:ad:6f:e6:ba:82:b7:61:44:d7:1d:d6:f9:b2:ae:4e:d3:de:
01:a9:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:31 2025 by rpki-client