Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/uqH7vaJE3PXnQyRjphQi0vNIcTA.roa
File: uqH7vaJE3PXnQyRjphQi0vNIcTA.roa (raw, json)
Hash identifier: 43GuWr72hhzBtb+xvMSJfj29iARrwWk3XD88vNRHObQ=
Subject key identifier: BA:A1:FB:BD:A2:44:DC:F5:E7:43:24:63:A6:14:22:D2:F3:48:71:30
Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Certificate serial: 019424457D0019F26032B7622DDCFABC8D31
Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/uqH7vaJE3PXnQyRjphQi0vNIcTA.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49855
IP address blocks: 91.212.95.0/24 maxlen: 24
202.49.88.0/23 maxlen: 23
2001:67c:18e8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7d:00:19:f2:60:32:b7:62:2d:dc:fa:bc:8d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa1fbbda244dcf5e7432463a61422d2f3487130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:6d:59:58:c9:c0:28:cb:f6:e5:85:1f:7b:
3a:dd:fe:69:af:db:05:a8:77:68:7b:b6:b5:e7:19:
be:2e:36:fb:fe:a9:0d:ad:41:7a:5e:5a:25:0e:52:
52:a3:9a:81:d8:6b:7d:9d:86:3a:e8:74:90:71:a0:
e2:fe:ad:0e:84:c2:82:91:f4:da:a6:42:fe:c8:b1:
bf:41:80:0f:14:21:53:10:a7:dd:5c:dc:49:1b:2f:
00:ed:ac:4d:03:eb:86:36:bf:2d:8d:3e:93:1c:c4:
4e:c7:f0:ef:32:d6:21:71:3b:3e:31:96:8e:29:57:
4d:d8:54:6b:78:07:47:47:1f:03:0d:a1:85:c0:45:
64:7a:84:ac:f2:1b:ed:ab:02:fe:7e:be:07:bf:21:
1f:ec:53:50:dd:97:bf:43:fb:55:93:02:78:df:66:
c6:c7:91:7a:b3:96:01:de:5e:e8:44:18:94:c6:03:
1e:70:3d:8f:c2:03:c1:fa:78:e7:5f:2c:4d:d1:e1:
1e:6f:62:db:4a:0f:b5:7f:87:3a:bf:57:65:6c:81:
2a:f5:36:ea:21:76:bc:f2:95:9f:d7:b1:28:ab:ab:
b2:a0:10:35:f5:e0:93:16:cc:67:ea:6e:63:54:8f:
ec:6a:c4:c2:04:e4:23:09:55:89:1a:76:b3:26:47:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:FB:BD:A2:44:DC:F5:E7:43:24:63:A6:14:22:D2:F3:48:71:30
X509v3 Authority Key Identifier:
keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/uqH7vaJE3PXnQyRjphQi0vNIcTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.95.0/24
202.49.88.0/23
IPv6:
2001:67c:18e8::/48
Signature Algorithm: sha256WithRSAEncryption
9f:4a:ce:e8:a7:0c:99:31:cc:26:d4:9a:a5:56:9d:f6:c2:6f:
6c:d4:92:b6:2b:26:58:63:7a:4f:7d:4b:99:a1:f2:6f:45:13:
4d:77:d2:ca:2f:22:f2:db:1a:9b:4c:a7:3c:ee:7f:3a:ca:ad:
47:82:00:fb:91:14:a4:67:2d:9b:54:b3:67:62:6f:a0:10:1f:
95:1c:b5:b6:e5:5f:29:33:6a:9d:c1:69:3b:6f:c4:23:18:67:
16:45:70:d9:89:27:cb:00:b8:bd:64:89:45:c0:a4:2f:76:08:
34:ee:e9:bf:be:93:41:db:00:70:fe:66:71:d6:42:b4:3d:bb:
41:7f:a1:7f:6f:da:25:4c:be:e5:72:dd:2c:bf:f3:f2:4f:60:
42:05:de:8a:8f:7b:eb:28:7b:49:24:c9:49:15:e0:c5:2f:ce:
93:a2:ff:e5:64:14:3e:2c:1c:d8:09:02:2b:4f:99:d9:dd:42:
74:77:fd:e2:35:70:e1:38:74:87:6f:a1:66:29:d9:36:7e:47:
3b:3d:70:23:e2:6e:87:6c:61:d7:57:e7:2a:f0:00:b8:86:c7:
81:94:ca:57:92:aa:84:7b:0e:93:1b:f7:d5:8c:40:0f:b6:c4:
8c:cc:a3:21:08:57:1d:2f:ec:d7:a0:f8:d3:66:b1:af:54:5f:
11:f9:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:41 2025 by rpki-client