Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/UELJaiMVSRwrvUCFtrZ9GXV7epU.roa
File: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (raw, json)
Hash identifier: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=
Subject key identifier: 50:42:C9:6A:23:15:49:1C:2B:BD:40:85:B6:B6:7D:19:75:7B:7A:95
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 0194274694F49E36E916B4B513BDBD7ABE57
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/UELJaiMVSRwrvUCFtrZ9GXV7epU.roa
Signing time: Thu 02 Jan 2025 13:48:44 +0000
ROA not before: Thu 02 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60056
IP address blocks: 185.57.244.0/24 maxlen: 24
185.57.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:94:f4:9e:36:e9:16:b4:b5:13:bd:bd:7a:be:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Jan 2 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5042c96a2315491c2bbd4085b6b67d19757b7a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:df:07:e6:1d:35:ad:62:bd:d6:10:28:45:
6d:47:b7:e6:4c:2c:49:4b:11:67:e5:90:4e:be:8d:
59:e0:6a:f0:80:71:11:3d:eb:92:58:1d:7c:75:6f:
68:fd:ed:4f:b9:8e:75:6d:c9:19:2c:a6:74:ea:2e:
c0:f8:ad:47:32:58:fe:c1:9d:84:b9:61:fa:01:37:
05:c2:b4:72:ee:f0:e3:23:e2:77:81:6e:33:ed:13:
0f:30:77:96:3b:f9:6e:95:7d:df:be:66:38:96:af:
b0:cd:43:ff:f8:54:af:dd:9f:0c:31:7d:5d:c1:59:
e2:d9:63:52:92:d2:5b:c7:dc:b3:b3:7b:31:ce:2f:
26:87:d5:ee:d5:5d:40:62:09:da:12:1e:be:4f:15:
53:cf:35:21:be:bb:2b:c2:e8:ab:4d:73:ea:b3:b7:
55:a1:66:2d:a2:15:08:d6:2a:c8:be:69:91:98:22:
ef:f7:65:f2:ad:fa:c6:61:bd:53:65:be:82:51:b7:
a0:02:6b:99:90:ce:e8:73:45:0f:c0:27:97:e0:f0:
0f:98:90:35:15:0a:d7:f7:97:61:b7:1c:16:44:2a:
2c:3f:e9:67:de:f2:e1:d3:7a:3e:19:94:25:97:f6:
f2:c9:de:3c:b1:9d:ca:08:36:88:86:1f:00:98:4e:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:C9:6A:23:15:49:1C:2B:BD:40:85:B6:B6:7D:19:75:7B:7A:95
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/UELJaiMVSRwrvUCFtrZ9GXV7epU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.244.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:9b:3d:48:2f:13:26:a0:b8:6f:91:48:73:a9:2e:d6:4d:66:
cc:84:0d:44:e6:68:a2:17:e1:8e:60:7a:34:b2:1f:20:a0:0d:
b8:4f:ed:bd:48:65:ce:2c:60:fe:47:e9:d5:33:ae:9e:7b:d8:
fb:57:44:de:cc:e4:b3:9f:b8:be:d0:d8:65:6e:9b:c0:fb:30:
66:ca:da:a4:bf:66:22:48:c1:d7:06:c2:4a:dc:12:cd:ce:82:
37:d0:38:77:bb:58:18:1e:29:66:53:fa:ca:0c:25:ec:a6:c3:
76:cc:52:ad:cd:ce:79:87:75:76:b2:42:a4:50:f9:51:e5:f1:
bc:33:c3:e4:c7:a0:e9:39:99:29:03:be:1e:35:10:44:c7:80:
6e:e7:a0:03:a2:8d:30:a3:c4:c0:e4:9a:f0:3b:83:ba:ce:1f:
b1:39:69:78:16:da:51:e0:77:2a:eb:8e:24:3a:22:c7:89:3d:
63:7d:60:56:9f:c4:a2:ff:c3:b6:9d:95:96:49:98:33:67:1b:
af:25:61:06:d9:72:0b:5b:4e:f3:da:39:c9:4b:88:4a:b3:94:
b7:33:65:b9:cd:e6:1f:9b:cf:e5:0f:53:4d:72:28:88:cb:39:
f6:90:5a:91:08:ad:26:66:82:c6:c0:be:2e:89:3b:6b:4f:e2:
cb:df:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:10 2025 by rpki-client