Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/ucnP1VSEw1kHHuA3QA5_zId7uwM.roa
File: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (raw, json)
Hash identifier: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=
Subject key identifier: B9:C9:CF:D5:54:84:C3:59:07:1E:E0:37:40:0E:7F:CC:87:7B:BB:03
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 01941FFA8357C00CD23014F1823786EDD3FA
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/ucnP1VSEw1kHHuA3QA5_zId7uwM.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3242
IP address blocks: 193.43.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:83:57:c0:0c:d2:30:14:f1:82:37:86:ed:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c9cfd55484c359071ee037400e7fcc877bbb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:36:67:a7:e4:53:39:d7:59:26:f3:1c:cc:d4:
90:3b:b1:7d:2c:c3:0e:70:a0:42:d7:24:dc:05:ff:
31:95:7e:7c:3b:e3:64:96:6c:5f:d8:75:7f:38:2b:
2a:fb:83:9f:f9:e6:29:35:cc:86:80:aa:ee:81:c6:
f0:b6:55:66:2c:59:26:aa:5a:32:2e:fc:67:5f:fa:
ed:fc:2f:bb:82:57:c3:8e:74:a6:53:3b:bd:0c:a8:
a2:98:5b:c8:b2:28:65:6b:85:f3:1b:92:87:67:47:
73:a3:66:e6:4d:f3:5d:31:1f:d8:8d:34:a9:9b:b6:
7a:00:b1:70:18:00:1d:06:d9:aa:e2:fe:ef:ad:e2:
2b:0d:2c:ae:fb:c7:72:ce:a9:2d:d8:eb:11:fe:51:
4e:f0:a2:9f:b0:bd:bf:0c:24:74:54:42:d1:d1:57:
d7:4f:0e:c5:b2:41:c7:8b:52:b5:0d:67:fb:52:81:
ca:60:d9:7a:90:9e:7c:1b:50:25:cd:ca:76:5c:5b:
53:6b:7b:87:2b:79:44:b9:fb:02:73:75:23:ff:2b:
38:b2:be:cb:b6:6b:9f:9a:64:75:7b:e5:36:d9:87:
a2:bd:83:69:b7:ce:73:e8:30:8e:82:66:48:29:3c:
85:69:05:47:a5:b1:e2:57:53:9d:b5:86:cc:5a:21:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C9:CF:D5:54:84:C3:59:07:1E:E0:37:40:0E:7F:CC:87:7B:BB:03
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/ucnP1VSEw1kHHuA3QA5_zId7uwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.132.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:61:95:7e:53:e5:c3:08:71:32:91:1b:b0:a6:60:9a:5b:4c:
ba:48:a3:4f:9e:56:ec:65:64:54:19:50:91:03:bb:de:47:59:
4a:86:3c:56:e3:ea:5f:90:3c:e0:e2:a2:25:d8:62:1c:de:2c:
36:92:30:cb:1e:a8:e7:41:25:fd:b8:4a:ed:74:fa:8b:c4:ea:
24:10:98:b7:84:13:20:ec:54:b0:68:95:5e:4f:69:4e:6d:38:
13:d6:db:61:dc:2c:d2:7e:4c:16:cf:b3:e2:26:ec:24:70:14:
f4:89:42:74:f7:af:14:0e:0d:b3:36:20:a2:a5:74:b3:44:72:
b0:9b:86:80:97:d6:cd:8b:20:cd:10:20:01:43:e5:b1:45:9f:
84:ee:68:37:fc:48:2a:db:6c:91:dc:37:d1:02:cf:c7:22:fb:
26:b6:68:34:05:4c:68:57:00:15:7e:64:89:5f:f6:01:e7:05:
55:12:d2:91:16:fd:16:56:e2:2b:51:c2:2e:35:a3:3a:9f:12:
f6:46:6f:bc:03:8e:25:08:ad:dc:66:2d:b9:66:83:84:88:80:
a0:4d:83:7f:71:5d:12:7b:59:cc:6a:e3:b3:43:b1:de:af:4f:
bb:18:2e:92:06:2b:44:92:74:4f:aa:e5:9c:08:77:e1:15:54:
90:c1:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:56 2025 by rpki-client