Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/uQEihKiuIl1rl-qFPqFxAyhOwfs.roa
File: uQEihKiuIl1rl-qFPqFxAyhOwfs.roa (raw, json)
Hash identifier: 741H2NNyRCld+680I0F2CoeAI6uDzCv+B0JzFOkmvnU=
Subject key identifier: B9:01:22:84:A8:AE:22:5D:6B:97:EA:85:3E:A1:71:03:28:4E:C1:FB
Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial: 0194274828CDD067B79BD9DEC827E8636FE6
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/uQEihKiuIl1rl-qFPqFxAyhOwfs.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209128
IP address blocks: 185.149.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:28:cd:d0:67:b7:9b:d9:de:c8:27:e8:63:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9012284a8ae225d6b97ea853ea17103284ec1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:3c:d0:1f:61:8a:27:ff:e2:a8:c9:bc:44:
2d:2c:22:9e:a7:54:72:d1:67:09:55:4a:e4:a8:81:
95:40:22:98:38:fc:16:69:88:08:b0:a6:df:6f:78:
2b:60:39:e6:76:09:d3:d6:23:79:d7:94:df:76:67:
f6:c2:30:3d:96:5e:f5:97:3e:28:b4:67:f8:b1:75:
1a:ca:3b:bf:b8:44:24:43:fb:86:61:cb:a5:b4:c1:
46:99:ae:33:57:36:36:9b:c7:bd:12:a2:9f:9f:65:
1a:7d:cb:26:18:6c:5a:bc:c5:ab:a4:07:54:2a:4d:
32:07:30:2d:66:fa:b0:9b:9f:4d:57:2c:47:d4:a7:
f5:6f:f1:d2:0c:ad:e4:b0:7c:9b:52:e7:a2:3d:4b:
c5:37:34:e8:a2:ee:c2:64:fa:41:ba:23:96:f5:92:
6b:bf:d5:ac:db:74:74:94:a1:d5:16:df:1e:9e:8b:
dc:e5:d5:d4:67:91:3c:d4:2d:c0:44:64:ee:d6:5f:
4d:23:01:91:ed:36:6a:94:98:09:e6:e3:26:d2:c9:
c8:c3:18:8b:77:ff:c7:e7:63:e3:c4:b2:2f:2a:bb:
98:a5:b1:a9:55:57:ff:50:2d:26:62:e5:13:12:e7:
47:49:29:ff:b5:38:60:71:c7:b3:50:57:68:f3:29:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:01:22:84:A8:AE:22:5D:6B:97:EA:85:3E:A1:71:03:28:4E:C1:FB
X509v3 Authority Key Identifier:
keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/uQEihKiuIl1rl-qFPqFxAyhOwfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fb:b7:f9:a8:f9:16:94:d0:cf:0e:b4:e1:fa:d5:c0:07:52:
23:f5:56:ca:6d:bd:1b:de:ff:c2:40:f8:16:67:f8:17:b1:b2:
06:da:86:33:e9:61:72:0a:23:ae:59:8d:96:91:c7:16:80:ee:
23:70:2a:aa:24:44:04:2e:e7:7d:7f:71:14:97:c6:98:c4:36:
b9:f8:a4:fe:30:ba:ff:08:19:e7:b3:48:f5:a5:28:04:4a:14:
3a:c7:7f:f4:f9:ca:bd:a6:c0:f6:cd:2d:da:eb:a2:b6:31:57:
7b:3c:0b:3a:21:6b:b0:c1:ff:dc:d1:df:f9:6f:1b:87:80:31:
25:39:4d:22:31:c4:e7:82:cf:99:b3:cb:62:38:fd:f4:d1:3a:
0e:23:fd:5c:6a:7c:86:5d:a6:01:71:c5:bc:af:d2:01:87:5e:
58:1c:4b:89:fd:f8:a4:f2:7e:45:86:71:6b:1e:b2:4c:2f:90:
a8:1b:fc:3e:48:bb:ce:12:75:3f:27:d4:4b:bf:ec:d0:01:ed:
34:64:b5:3d:93:a4:33:41:1a:f7:7b:55:4f:06:6d:90:00:25:
c7:73:19:cd:3c:83:35:7c:cc:dc:04:0b:86:e7:62:28:4b:95:
b4:c6:17:1b:7e:02:39:8a:b5:6f:fd:02:7b:82:10:79:96:7c:
83:a5:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:50 2025 by rpki-client