Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/UP5nddVRXKDFwn0rBo0YDADmUWk.roa
File: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (raw, json)
Hash identifier: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=
Subject key identifier: 50:FE:67:75:D5:51:5C:A0:C5:C2:7D:2B:06:8D:18:0C:00:E6:51:69
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019421B238FEAAD806D1A4DB2EE8FB1BC5A9
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/UP5nddVRXKDFwn0rBo0YDADmUWk.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3215
IP address blocks: 194.5.190.0/24 maxlen: 24
194.5.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:38:fe:aa:d8:06:d1:a4:db:2e:e8:fb:1b:c5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50fe6775d5515ca0c5c27d2b068d180c00e65169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:79:ca:1d:be:d2:c4:ad:40:39:33:e1:d5:
0d:03:34:8c:46:77:a9:bd:82:15:1d:3d:b8:a9:72:
61:cb:a2:58:fa:9e:9b:5f:a7:c9:ec:f1:2d:71:5a:
a9:03:79:ff:1b:59:d6:35:59:02:ac:98:55:e7:ce:
7b:a6:a8:7c:86:2f:25:f9:2c:b0:2e:4a:97:74:b1:
22:e0:be:d6:de:7e:ab:17:de:e1:d1:c1:e6:2b:0a:
ba:d0:d4:86:a0:ba:93:55:03:bb:37:61:5f:9c:73:
00:ab:46:12:6b:0d:99:14:94:08:85:0a:0d:03:20:
95:bd:b9:7e:59:dc:64:02:a6:8a:5a:cd:34:f2:dc:
93:d5:b2:85:0e:2f:58:bb:76:56:48:fd:df:92:2f:
03:64:31:7b:84:90:51:1c:5e:ab:85:0d:65:ac:b3:
08:92:5b:75:71:98:5f:ee:86:51:4e:bb:50:de:11:
28:b8:b1:35:ad:22:df:f2:15:1d:ba:8c:e8:5b:e7:
b9:7e:5f:d9:56:a8:47:4f:01:d0:86:4a:2a:f0:9b:
f1:7f:8d:d4:59:49:e9:ca:02:f5:20:eb:f1:ed:ad:
6f:ef:8e:87:51:c1:47:a8:79:da:63:59:6d:15:7f:
5d:c3:2d:87:3a:79:39:7d:b7:f9:2f:9c:64:39:c4:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FE:67:75:D5:51:5C:A0:C5:C2:7D:2B:06:8D:18:0C:00:E6:51:69
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/UP5nddVRXKDFwn0rBo0YDADmUWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:4d:04:a6:7a:97:10:ed:fe:6c:4e:a3:40:1a:1a:b0:85:2b:
ef:b7:b8:8a:9a:f4:7e:94:da:6c:47:0c:60:4c:65:33:29:94:
12:ae:ec:4f:c9:30:64:e7:6f:b0:5f:66:92:4a:60:43:0d:96:
7b:a1:c0:6a:ff:f5:66:a4:e4:74:38:72:c4:28:b5:24:54:21:
6e:54:a7:82:38:e8:de:59:6c:b4:66:a4:41:02:a4:3c:4f:01:
da:69:76:ab:21:f7:a6:a9:14:53:ed:35:78:f7:a0:f2:9d:61:
d2:aa:4c:ef:24:ec:3f:a1:4d:e5:3d:09:22:5d:ba:fc:1e:9f:
9e:5a:18:59:0b:89:c6:69:98:45:66:cc:d4:0f:f0:4a:e1:4a:
44:09:6b:c8:75:7d:d5:b0:ed:7a:76:4d:06:7a:ee:10:e5:99:
f1:a9:7c:fa:b8:02:a5:c6:88:58:72:9d:37:37:ad:ad:f7:93:
a1:4e:6b:e3:ab:38:24:97:5e:d5:a6:b8:6e:ee:ad:93:f3:28:
03:c3:a5:8a:7e:8d:34:04:2a:5f:6e:bc:4b:10:f1:fd:35:0d:
71:35:6a:14:c5:8b:aa:a9:2c:20:58:20:41:f8:d0:a4:ad:41:
e5:a8:00:6a:3c:e1:47:da:a6:b2:eb:f1:0a:a3:35:96:d0:77:
02:c6:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:33 2025 by rpki-client