Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/UjPxDMGW7lYqCuTCh7JHOA6hizY.roa
File: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (raw, json)
Hash identifier: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=
Subject key identifier: 52:33:F1:0C:C1:96:EE:56:2A:0A:E4:C2:87:B2:47:38:0E:A1:8B:36
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D598A9C22305487131A5D3C1E13B7C
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/UjPxDMGW7lYqCuTCh7JHOA6hizY.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62220
IP address blocks: 195.244.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:98:a9:c2:23:05:48:71:31:a5:d3:c1:e1:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5233f10cc196ee562a0ae4c287b247380ea18b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b6:fd:b6:b8:ba:77:be:68:22:7c:08:ed:94:
67:ff:b3:c5:d8:20:22:a7:7d:c8:fa:67:65:66:28:
aa:77:25:39:a2:d5:2f:ef:45:dc:b9:65:2e:4b:3c:
9e:e7:09:ae:0d:84:2e:35:7e:c4:ba:46:c0:89:a3:
ab:ba:fd:8a:72:c2:aa:26:3e:6e:23:11:75:ab:68:
7d:87:a7:97:7e:30:07:83:5b:b2:b1:9a:a7:53:71:
99:73:84:bf:44:19:48:1c:02:49:3b:48:d8:c4:17:
1b:f5:85:b2:ef:46:28:25:f3:95:dc:2f:b4:4c:26:
c2:c3:13:85:e3:42:d9:d0:88:65:f9:72:44:0b:ea:
a8:69:17:65:87:fd:d0:30:30:8f:6b:5f:4a:4b:57:
40:e9:bf:cd:75:5e:e5:93:14:0f:1a:7d:19:89:2e:
2f:68:2b:7d:84:e3:92:39:73:67:ab:68:c4:c8:e0:
dd:3e:3f:98:0d:79:10:a1:d4:9f:af:58:c5:ec:22:
1a:45:5e:22:f5:29:d7:4a:cc:d9:0f:97:fb:6f:f4:
c8:65:e3:57:63:3a:4b:7e:be:79:5d:4b:dc:42:ae:
f2:eb:3d:8a:bd:29:db:e1:c8:a8:73:e3:7a:35:1c:
af:6f:25:b4:c7:a6:99:07:a7:ca:90:08:43:f0:bb:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:33:F1:0C:C1:96:EE:56:2A:0A:E4:C2:87:B2:47:38:0E:A1:8B:36
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/UjPxDMGW7lYqCuTCh7JHOA6hizY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.158.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ea:b8:d9:2e:a9:e0:a6:94:b6:08:88:a3:9f:de:c8:c7:2a:
31:df:4a:33:ae:a4:a9:11:c7:9a:6c:c4:70:0c:d6:7e:41:36:
49:c6:e6:ca:e5:c3:ad:10:c2:61:fd:52:e3:2e:5a:81:d6:aa:
d8:9c:6a:ac:dd:2b:99:1d:eb:82:c1:c4:8a:7a:cb:d9:dd:9f:
af:a3:cb:62:2d:31:5d:89:09:bd:e0:c3:f7:cb:47:e9:c3:46:
46:e8:c2:a3:9a:04:f3:c3:3c:e4:76:32:46:f0:f2:dd:20:f5:
10:e6:4b:1a:0a:60:45:b9:e5:9b:88:9b:91:3e:a2:46:e8:6e:
57:d6:77:2d:57:73:2a:71:1a:9c:17:de:c6:f6:d4:b3:ac:3c:
48:91:41:ef:4e:b8:da:cb:3a:b5:32:36:b7:d6:50:b9:75:7e:
5b:6c:e8:4e:bc:af:e6:ee:d1:bd:ba:ee:72:e6:ac:87:43:35:
63:0c:7e:32:66:49:d7:8c:6f:d4:c0:d5:b1:19:8d:99:b2:f8:
b9:f9:90:18:44:d9:ae:9d:2b:bb:4f:7a:24:03:7c:e6:1a:39:
fe:4e:af:89:61:ea:84:cb:d0:09:d0:85:79:66:7f:60:44:3e:
15:bd:51:25:7c:89:1f:51:b1:38:f2:7d:ab:27:a8:04:ce:08:
e4:20:1a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:34 2025 by rpki-client