Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/uIweupJOqhNaFZ9FFVay5RTc__M.roa
File: uIweupJOqhNaFZ9FFVay5RTc__M.roa (raw, json)
Hash identifier: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=
Subject key identifier: B8:8C:1E:BA:92:4E:AA:13:5A:15:9F:45:15:56:B2:E5:14:DC:FF:F3
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019427B610612A49127B262C5C970833E4D2
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/uIweupJOqhNaFZ9FFVay5RTc__M.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214152
IP address blocks: 82.194.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:10:61:2a:49:12:7b:26:2c:5c:97:08:33:e4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b88c1eba924eaa135a159f451556b2e514dcfff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:0b:3e:d5:e0:8c:50:b6:63:d1:e8:84:4f:
ed:b0:73:1e:49:04:d5:88:80:c0:50:74:3f:c6:49:
7c:cd:fe:3a:f5:32:9d:cf:00:3d:62:52:df:eb:31:
65:a0:e2:b5:0d:c7:ab:1e:6e:c5:ab:67:61:cd:01:
6a:2f:78:78:17:13:2d:70:1b:c6:a2:01:95:c0:53:
3e:67:7c:40:06:b2:56:cd:22:dc:c7:ae:d7:15:86:
4c:df:ac:b3:28:a6:12:6d:57:1b:8c:7b:34:43:14:
0f:8c:31:0b:e3:a3:0e:53:21:03:30:1a:f9:84:ee:
6c:49:53:95:68:b8:5a:1a:ff:0a:f2:b7:55:85:39:
36:a2:47:96:e2:bf:6c:1b:85:95:58:77:18:da:91:
ce:7f:64:43:44:7e:d9:4b:9f:5b:02:a1:5b:18:53:
6a:ce:b6:f6:3f:45:32:a0:0f:f3:9f:bb:a2:73:51:
ac:0b:f0:52:0f:c0:a9:a3:02:ee:9a:04:ac:eb:07:
60:ef:38:dd:56:a8:3e:5b:6d:4b:a5:65:c4:5d:76:
6a:9f:dd:02:53:9a:b4:8e:b6:0b:4b:40:eb:ef:e5:
2e:f4:e7:dc:cc:46:c1:8d:ba:31:e0:03:46:c2:61:
ec:3e:68:bb:5e:3d:bd:2c:62:c0:98:3f:80:bf:62:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:1E:BA:92:4E:AA:13:5A:15:9F:45:15:56:B2:E5:14:DC:FF:F3
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/uIweupJOqhNaFZ9FFVay5RTc__M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.194.249.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5e:eb:23:a4:e2:d3:27:09:b4:26:98:ca:6c:d7:92:74:ea:
75:da:cc:ca:36:23:fe:cf:a0:a0:c5:17:ba:94:18:a4:ee:24:
38:3c:20:d7:e7:ea:94:b9:2e:6c:0e:7a:55:d5:fb:a5:9e:b7:
f9:55:be:d9:7e:bb:08:13:ec:79:4f:a4:f2:94:64:b0:e6:9c:
c8:bd:33:4f:f5:40:76:b3:fe:df:97:d8:4a:39:dd:64:09:a0:
af:c5:a8:2a:fc:a5:e7:6c:14:2b:1a:21:b4:05:7f:af:61:aa:
5d:aa:db:3f:5d:98:47:1a:e9:9e:8d:99:bd:f4:92:82:08:f1:
8f:85:1d:a8:f2:73:d1:5d:8c:ad:f4:7d:1f:5f:7f:e2:5a:34:
07:48:60:6b:62:9d:55:2c:2d:8a:e6:40:f6:49:5a:20:dc:d3:
24:3e:18:b0:cb:12:65:a3:8a:27:3f:d4:66:f8:6a:d6:e1:a8:
21:a2:c0:e7:60:2e:24:17:0a:eb:48:61:9e:53:65:26:2d:54:
79:fe:6b:0e:25:81:81:0b:75:14:a4:66:4b:fc:6a:aa:22:5f:
d6:11:a9:4d:fd:99:5a:7a:66:f7:0a:fb:1e:85:13:bc:21:94:
da:b3:4b:68:5b:6b:c6:aa:4e:96:56:c8:f7:57:24:52:8a:68:
80:bb:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:11:20 2025 by rpki-client