Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/UOeY9dJzy9UavPhYublleTWyopc.roa
File: UOeY9dJzy9UavPhYublleTWyopc.roa (raw, json)
Hash identifier: pVAlfHJ4A9zycnI9TV3bm0yuHFJXl3WBdgFhxo64M7o=
Subject key identifier: 50:E7:98:F5:D2:73:CB:D5:1A:BC:F8:58:B9:B9:65:79:35:B2:A2:97
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0194221F705B9A1CAE92E473B5C5EAC60A5B
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/UOeY9dJzy9UavPhYublleTWyopc.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 37.247.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:70:5b:9a:1c:ae:92:e4:73:b5:c5:ea:c6:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50e798f5d273cbd51abcf858b9b9657935b2a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:94:0c:90:5f:ad:72:8f:a4:67:a9:f2:11:
26:ac:1a:d9:3a:e5:16:cb:10:55:93:09:df:bf:40:
fc:66:e8:c4:f7:8c:9b:6e:ef:d0:ec:99:00:ef:9c:
d4:7c:f8:44:97:be:13:e3:5c:2f:4d:01:82:b6:49:
02:d1:2b:b1:de:e4:b6:02:8f:22:36:81:34:c0:d5:
77:59:31:36:f1:01:bb:21:6a:d7:2e:97:29:8d:3e:
8a:6f:48:ed:d1:b2:3c:c9:ae:6a:3e:ed:74:9a:73:
50:0a:5c:6c:e2:27:3e:ea:42:a3:60:af:d3:84:70:
75:5d:77:0c:e9:e3:64:4a:67:29:26:04:24:b0:f4:
b0:52:a2:75:ab:e5:01:e8:e1:7a:04:a9:f9:e5:60:
59:4a:e0:f8:38:cc:ac:19:0c:58:d6:15:a6:5f:0a:
82:97:c1:cb:bf:6d:7d:00:ae:99:43:de:98:e5:8d:
53:3b:3a:c0:0a:f2:d7:ac:bf:52:6c:30:fe:8d:22:
10:0a:45:3a:89:69:0d:fc:03:5e:f2:77:b0:42:8c:
d8:2f:17:c1:a5:06:82:7a:92:73:8c:1d:2b:d5:ce:
94:59:51:a4:25:44:09:0a:b8:7c:3b:60:85:3d:32:
c5:65:5e:82:a0:54:28:24:75:16:ca:e7:40:92:45:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:98:F5:D2:73:CB:D5:1A:BC:F8:58:B9:B9:65:79:35:B2:A2:97
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/UOeY9dJzy9UavPhYublleTWyopc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.108.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d2:93:07:95:81:14:f1:56:47:eb:a9:95:d5:b1:7e:2a:bf:
93:00:7a:31:da:f8:8c:b4:49:04:7a:ad:ae:36:e7:d6:06:3a:
37:fb:70:dc:cc:64:68:10:55:0e:8b:56:ef:5b:24:a6:68:9a:
f1:b5:52:cb:d5:e1:85:c5:f6:90:97:62:19:fc:33:25:bb:f4:
83:6a:64:b1:92:f1:f1:62:6e:de:41:f6:58:91:f6:ad:b5:49:
e0:08:71:d9:fd:d4:7d:65:10:de:9c:64:8e:ce:ad:81:09:c0:
23:f3:c1:52:b0:49:f0:44:02:20:1c:ef:28:a3:fc:07:b9:d6:
19:c3:53:ed:c8:57:ef:90:ad:95:83:f1:00:d5:af:ea:c8:3c:
ab:c1:0d:fa:e4:6d:4d:4d:6b:f6:b9:96:83:72:52:1c:0a:14:
17:94:82:6f:62:68:2e:d7:94:32:dd:6e:7d:65:71:d7:bc:0a:
aa:0c:07:95:98:5d:77:a9:87:c1:79:a3:db:99:b7:4d:97:be:
60:cc:a2:a2:dd:b9:1b:93:4c:1d:f4:5f:22:98:27:14:15:5c:
b0:a7:6c:6c:8b:ee:d0:ab:80:d5:85:6d:5c:08:ad:71:29:3f:
d1:27:b0:8c:cc:d0:b2:d6:a3:2b:21:13:73:38:10:55:91:d7:
d2:53:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:59 2025 by rpki-client