Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/_uatClMcwC0uM9W8YXO5Qitmm-A.roa
File: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (raw, json)
Hash identifier: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=
Subject key identifier: FE:E6:AD:0A:53:1C:C0:2D:2E:33:D5:BC:61:73:B9:42:2B:66:9B:E0
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C7769D6207E16BE4F33CAC7966826
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/_uatClMcwC0uM9W8YXO5Qitmm-A.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211406
IP address blocks: 185.62.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:69:d6:20:7e:16:be:4f:33:ca:c7:96:68:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee6ad0a531cc02d2e33d5bc6173b9422b669be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2f:34:0a:b7:af:5e:4c:7c:7b:d9:04:3e:d3:
54:7e:5e:2e:ff:18:00:56:ac:d7:f8:53:b1:a0:47:
21:07:bc:a0:9f:3f:01:66:de:f0:20:e0:c8:47:c7:
db:18:28:fe:6e:38:3a:76:e1:c3:e9:65:fd:e4:3a:
69:06:20:7b:dd:ed:e9:6f:bf:34:54:57:76:9c:b4:
0b:5d:90:70:32:94:91:15:75:0b:44:e9:e5:a6:71:
8d:bf:eb:ae:d2:4f:85:d5:fc:b8:cc:c0:20:61:fa:
65:a4:49:36:a3:b8:9e:e7:16:c7:fb:8b:90:fe:12:
10:4b:40:0d:c3:f5:e4:fe:25:f4:cf:02:83:c1:78:
5b:cd:24:32:34:f2:19:00:d5:33:c4:2d:58:61:aa:
94:11:92:23:7a:32:69:b1:4f:bb:c6:14:bc:53:de:
a5:be:db:45:c2:84:c8:5e:d1:10:f9:66:41:92:25:
3f:df:03:4c:91:c6:d0:eb:5a:11:2f:d2:6a:3a:c1:
0e:71:b6:b2:8b:9f:a4:26:73:24:72:d7:f3:44:be:
0b:37:ba:66:81:be:49:88:b1:f8:3e:fe:53:8e:31:
00:d7:3e:43:9a:81:6c:f0:b8:6f:02:6c:bd:03:fc:
33:7b:2c:a1:81:cf:0b:ea:1f:b2:65:62:98:b0:9b:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:AD:0A:53:1C:C0:2D:2E:33:D5:BC:61:73:B9:42:2B:66:9B:E0
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/_uatClMcwC0uM9W8YXO5Qitmm-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:52:20:59:d6:18:cc:56:fd:02:63:10:8f:b1:19:76:44:6c:
c1:4e:82:dc:e8:5f:e4:9a:83:7c:3e:1f:3d:d8:66:9c:5c:59:
5b:29:20:ff:82:cb:8b:7c:61:86:90:3a:42:a4:e4:05:81:ff:
95:d8:9c:88:c0:19:b7:b1:84:f5:fe:64:69:56:04:83:a9:30:
84:49:66:fd:01:c0:42:5d:5d:70:57:26:9c:47:55:ca:0e:42:
09:85:12:ab:2c:53:d1:c2:9a:c0:28:9a:b4:c4:5f:13:be:27:
08:96:3e:9c:19:51:6f:f2:e8:4d:de:b5:ce:9a:6a:9e:10:29:
03:85:6e:d4:cc:34:bf:3c:17:12:ca:2f:b3:f7:6e:3b:a8:db:
85:d2:9e:ed:e4:ab:f7:18:92:5d:d0:8a:43:42:28:00:e8:77:
12:b3:37:df:7a:17:b8:ac:14:4b:b1:6b:a8:a7:dd:52:9a:a4:
67:dd:0f:07:d9:67:57:35:22:c4:78:40:4d:8b:ef:7c:d5:40:
2e:98:eb:7a:85:5b:13:31:62:66:8c:d8:87:2e:b5:51:f6:a9:
45:a9:32:92:22:2c:19:19:48:4f:ae:9f:43:56:38:ad:c7:e0:
70:3f:ac:44:6a:e5:79:15:c0:d7:d2:89:7e:9b:c7:af:6e:37:
0a:b3:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:16 2025 by rpki-client