Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa
File: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (raw, json)
Hash identifier: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=
Subject key identifier: B9:C2:96:4E:53:CD:F8:5B:8C:F4:1F:6B:A4:86:87:9A:32:41:D2:E5
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 0194228E43C8E2948A6F9FEC2E717A7A8B7C
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8253
IP address blocks: 192.108.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:c8:e2:94:8a:6f:9f:ec:2e:71:7a:7a:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c2964e53cdf85b8cf41f6ba486879a3241d2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:fa:26:5d:b1:37:c8:05:3d:e4:7f:77:f3:
02:1f:63:7b:c2:56:a4:51:9b:61:2d:fe:45:e8:06:
1b:12:82:90:6c:18:47:6d:e6:c6:c3:65:5c:d8:3d:
f0:23:c6:7b:23:e6:d8:4a:5f:0c:89:95:f2:80:f7:
d9:65:84:dc:47:9b:72:22:e4:8a:ae:7b:2f:14:e8:
ec:7c:28:da:e8:79:06:62:07:52:01:ce:1d:de:62:
53:20:9f:ce:73:b8:c5:b2:da:d2:38:8c:9e:ff:0d:
27:0a:1d:79:cd:66:79:7c:49:1a:be:34:11:5a:1f:
8f:43:3b:dd:db:1b:c8:ba:f1:f1:0d:40:d8:be:7e:
92:2a:c4:b9:9c:c4:71:0d:d9:0b:10:38:b9:7f:1b:
ec:8c:34:9b:50:1e:4b:7e:8d:b2:04:de:a5:33:b1:
2c:fd:33:ac:05:55:aa:87:37:64:9c:c8:6b:83:8a:
aa:0c:c6:a9:bf:ba:9d:6a:af:f4:63:80:a8:7a:66:
fd:67:e5:27:2b:e5:10:05:35:3f:5a:cd:1e:06:22:
8d:de:e1:e2:ba:2f:a0:aa:a3:59:16:77:bf:9d:02:
3f:58:d9:70:1e:67:8a:f0:6b:99:56:c1:57:09:0c:
4d:1d:b2:a6:b9:f2:7d:91:07:ae:42:76:e8:93:7a:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:96:4E:53:CD:F8:5B:8C:F4:1F:6B:A4:86:87:9A:32:41:D2:E5
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:01:e4:f1:5a:e3:11:4a:8c:77:21:28:43:4d:c9:d2:dc:d1:
e5:f3:00:86:c4:d9:79:75:08:90:fa:8b:2b:dd:be:14:16:e6:
ec:57:62:f2:d8:45:11:9a:49:27:70:8a:50:e9:24:83:b9:a0:
a6:e1:c7:f6:76:96:2a:79:34:e2:d1:06:42:c2:2b:b3:33:b3:
10:7a:f4:10:d5:c4:c8:17:d1:ff:12:03:ce:df:18:aa:18:29:
38:71:2d:cf:d8:57:b0:e8:09:75:25:1e:13:a8:60:5a:b2:9d:
a9:01:98:34:f0:4a:f2:1d:4b:07:c2:8f:83:96:6a:ed:c9:ff:
52:f9:5d:7a:ad:1a:6c:68:52:11:cd:ab:25:6d:c2:a6:03:1c:
b5:66:ee:74:fb:9a:de:a5:2b:4b:32:c7:9e:43:90:7c:75:37:
88:02:a5:59:2b:16:80:af:6b:57:16:33:25:a6:b8:42:b6:33:
2f:b8:25:8d:96:8b:a9:12:11:a6:f5:36:4a:95:66:68:a8:3a:
45:70:18:40:ae:6a:ec:ab:14:50:ba:0a:a1:f9:9b:d1:c2:b7:
87:23:c7:40:7f:55:cd:65:22:77:dd:ad:eb:75:8b:5c:69:79:
20:1f:cc:03:98:b8:23:3c:47:c9:65:cc:90:9b:ba:35:d3:b7:
b8:6e:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:11 2025 by rpki-client