Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa
File: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (raw, json)
Hash identifier: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=
Subject key identifier: 51:3E:5A:57:79:49:E8:58:03:2F:95:C7:79:3C:89:B9:51:BA:99:21
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 019420D59A9D57224ECA86ACADBC85F18083
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 195.234.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9a:9d:57:22:4e:ca:86:ac:ad:bc:85:f1:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=513e5a577949e858032f95c7793c89b951ba9921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:9a:75:8e:cc:5a:ac:07:0c:02:a2:79:a9:
9e:13:47:4c:6b:85:04:ac:95:f5:2c:3c:35:a1:e2:
d3:10:18:5c:c6:32:0b:e4:ee:98:52:34:51:2c:7f:
9f:a3:50:32:ae:53:98:67:3e:92:eb:29:bf:f2:ae:
22:69:86:df:a9:84:47:7c:c7:6a:a5:42:20:24:01:
a7:8b:f6:b1:8c:a1:39:1b:a9:5f:5d:b9:02:6a:da:
ca:79:04:98:ca:88:86:9b:ad:0c:ca:bb:5e:78:f6:
e4:06:63:68:b3:07:bc:fa:71:29:77:37:8e:e4:fe:
1a:d1:65:11:6c:0c:05:90:da:bd:7c:41:07:86:ca:
35:d7:d9:4e:04:e8:1b:f3:4b:8e:9e:e1:0a:bd:e4:
e4:68:f9:2a:16:90:98:9c:b0:b7:fa:d2:ea:dc:38:
30:55:12:99:cb:2a:2b:f5:17:a6:95:48:91:0d:7f:
ed:41:58:a1:8d:88:70:73:d5:eb:45:63:ff:21:de:
30:e4:76:a4:78:6f:98:45:8f:b6:d0:d0:0d:db:67:
7e:9e:b5:7c:f9:8c:d1:23:6a:e4:d4:79:66:4c:a8:
e9:0d:17:71:3f:79:57:05:bd:43:ae:de:1f:45:9d:
62:6c:0a:94:be:77:f3:b4:d9:0c:3b:66:4f:50:4a:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:5A:57:79:49:E8:58:03:2F:95:C7:79:3C:89:B9:51:BA:99:21
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a0:4c:d4:aa:2e:be:f6:90:0a:dc:81:39:6f:b3:0c:d4:88:
dd:6c:a3:f7:8c:50:8f:5c:b7:e1:94:e8:4b:ec:e9:5b:7e:5d:
0c:b5:97:e3:d0:6e:4f:a0:cc:bb:2c:3d:43:22:c1:e0:b5:36:
0b:62:ff:4a:74:0e:e9:76:cb:0c:3f:db:ab:6c:db:36:ce:f5:
30:b2:ab:d8:b3:2f:c7:7c:02:9b:94:bd:67:e5:ed:66:01:98:
06:e7:18:bd:df:91:ae:bc:59:85:eb:7c:39:69:12:fa:31:7b:
62:7e:5d:9a:d7:dc:cf:16:41:b3:52:4a:31:6f:f8:a0:27:53:
b2:4d:c9:cb:70:d0:b8:dd:96:c8:74:94:79:77:7b:6f:98:b7:
14:e5:a0:5a:83:82:04:22:3e:68:29:f4:a3:a8:a1:62:08:94:
20:55:6b:99:25:86:2d:d5:5d:12:0d:0d:c6:9e:01:34:90:d9:
7c:5d:a5:52:de:de:c6:fd:73:bb:9e:34:06:ee:ca:56:74:13:
70:68:92:50:bd:0d:3b:09:5b:ee:79:fc:e4:76:e2:7b:0d:fb:
5e:0c:6e:88:83:e5:62:4b:be:d3:ae:ab:a0:94:da:d6:18:05:
52:b9:6f:76:bb:0c:10:1a:68:66:5d:fa:23:38:8e:0e:46:c4:
85:bb:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:22 2025 by rpki-client