Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/uIeYeZznF-O1grN0M5g3SmcN33U.roa
File: uIeYeZznF-O1grN0M5g3SmcN33U.roa (raw, json)
Hash identifier: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=
Subject key identifier: B8:87:98:79:9C:E7:17:E3:B5:82:B3:74:33:98:37:4A:67:0D:DF:75
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 0194266B500237751AEFD75B27981C8D4377
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/uIeYeZznF-O1grN0M5g3SmcN33U.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211547
IP address blocks: 193.3.56.0/24 maxlen: 24
2a10:c5c0::/32 maxlen: 32
2a10:c5c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:50:02:37:75:1a:ef:d7:5b:27:98:1c:8d:43:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b88798799ce717e3b582b3743398374a670ddf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:b9:f2:98:e8:fa:ee:8d:6c:78:34:75:d9:
42:96:1c:f9:3b:a3:f6:ec:d1:63:f3:5d:78:62:1c:
27:f8:17:d8:44:d3:38:51:49:c3:6b:4b:22:8c:6a:
90:d1:58:4d:92:46:3a:26:47:74:12:54:47:d5:b5:
9f:de:3e:e0:49:5e:77:d6:c8:72:a5:f8:b6:92:49:
28:66:88:10:b0:c5:e3:73:0f:42:f9:e7:f0:5f:71:
8f:57:11:4c:a1:7f:95:16:fe:a1:63:df:ea:c7:11:
9e:07:2c:93:98:92:01:cc:19:27:f9:ea:06:9c:81:
5e:8f:3d:21:a7:b2:05:b2:3e:03:ca:c2:e5:d5:de:
a3:75:bc:10:e9:a5:f9:40:4b:d3:a5:b9:06:b5:13:
8a:33:b3:be:54:c3:01:ad:d7:68:07:6f:a1:b1:c7:
69:13:60:3b:89:fd:c0:84:c4:9f:0b:ef:47:a2:97:
a7:69:90:a4:d4:a6:e4:37:c5:eb:3a:b8:a7:8f:62:
9a:25:38:54:17:62:1b:cc:88:df:39:c3:06:d2:1a:
2b:1e:f8:4d:b7:85:7c:2b:18:b9:aa:1d:81:c6:1f:
bd:ae:dc:6d:45:9d:b9:9a:d6:0e:47:b2:8c:f9:04:
89:78:e7:8b:1c:58:6e:cf:30:cc:30:ec:a8:43:d0:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:87:98:79:9C:E7:17:E3:B5:82:B3:74:33:98:37:4A:67:0D:DF:75
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/uIeYeZznF-O1grN0M5g3SmcN33U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.56.0/24
IPv6:
2a10:c5c0::/31
Signature Algorithm: sha256WithRSAEncryption
76:ce:fd:9d:f5:9a:75:0f:53:10:e2:6e:67:4e:f4:e5:ba:95:
e1:d6:8b:19:2b:6c:13:fd:42:88:90:18:78:5e:ac:aa:3a:68:
8c:0e:d1:85:2b:cc:75:b9:99:3f:3d:60:1e:c9:46:7e:41:3f:
89:f8:ed:85:14:80:61:df:56:ab:21:13:dc:df:ee:eb:1d:35:
f3:1c:47:60:54:65:9e:ab:59:82:e1:eb:6c:94:75:e6:12:5e:
23:0e:86:33:33:83:cc:0e:3d:ed:7f:bc:4a:c4:21:1c:d3:f8:
e1:b5:b9:9a:18:63:b2:bc:2d:65:c7:6f:98:d2:2b:75:55:60:
70:64:e8:98:49:05:20:b3:70:ee:d2:ea:6d:2c:ea:56:95:dd:
3c:20:6a:dc:1e:12:a8:44:69:bb:1b:e3:41:1f:dd:28:d6:6f:
05:e3:36:cd:45:6f:54:9e:de:bd:ff:0d:2d:c9:ea:06:81:98:
fb:a9:f8:0c:02:d4:21:e5:f3:34:5a:f4:68:37:ac:2c:4e:5a:
81:5b:af:01:13:19:aa:e1:58:19:05:48:c8:be:80:0a:05:65:
81:17:89:53:da:39:08:68:b1:25:e0:24:b9:07:1f:45:a1:ff:
af:32:c5:05:b2:51:eb:ce:5c:06:40:d4:8b:d0:ba:27:1c:04:
69:f0:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:04:27 2025 by rpki-client