Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/uDM7F8LY5WouCO7a0kMUmT3QPVg.roa
File: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (raw, json)
Hash identifier: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=
Subject key identifier: B8:33:3B:17:C2:D8:E5:6A:2E:08:EE:DA:D2:43:14:99:3D:D0:3D:58
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 01942444F744B4129A6F1F4436F70FC5E327
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/uDM7F8LY5WouCO7a0kMUmT3QPVg.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199116
IP address blocks: 195.14.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f7:44:b4:12:9a:6f:1f:44:36:f7:0f:c5:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8333b17c2d8e56a2e08eedad24314993dd03d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:ba:14:f3:bf:59:62:c6:fa:15:49:d3:49:
75:dd:21:87:67:43:29:a2:c4:3f:f5:65:ff:51:5d:
13:da:74:82:27:5d:ac:c0:4c:3b:91:c6:4b:35:df:
66:66:a2:19:5e:b6:0f:d0:8d:c4:3a:21:cb:df:24:
47:2a:6a:54:18:89:72:f9:92:0e:96:e0:1d:00:14:
e0:36:43:fb:5c:68:26:ee:a6:28:f1:bd:3f:05:14:
1a:1b:80:0f:ca:72:12:59:23:2e:e3:69:e3:e3:43:
42:b5:bd:7c:92:85:2b:6b:7d:12:5f:e5:96:a0:f8:
ce:66:d2:a3:b8:66:c0:ca:f8:68:a9:f9:d0:6e:6d:
5b:05:95:2f:4c:80:51:8c:a2:af:85:91:f3:c0:a0:
6b:e3:a7:95:60:8a:65:ac:f0:61:5d:cd:67:c6:29:
28:a4:d0:34:7a:c1:f8:94:f0:df:dd:67:83:dc:6f:
97:e6:49:52:f9:e5:b1:8d:ee:70:04:44:a4:71:86:
dc:16:5c:dd:6b:f5:97:48:5a:eb:a3:f4:ae:d6:7a:
10:c9:92:26:4f:41:27:18:37:86:ee:09:5f:57:f6:
15:a7:08:0f:f7:15:f0:2a:86:3a:4a:2d:67:92:2d:
b6:5e:5b:2a:bc:83:6c:7b:33:2e:2e:28:48:7a:e3:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:33:3B:17:C2:D8:E5:6A:2E:08:EE:DA:D2:43:14:99:3D:D0:3D:58
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/uDM7F8LY5WouCO7a0kMUmT3QPVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.28.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6a:20:b1:58:a2:a8:92:9a:5d:59:30:ae:02:31:03:0f:21:
53:81:95:ab:8f:c6:85:95:69:8c:5e:0d:3d:15:dc:08:53:f4:
1a:9e:52:f3:a7:f4:97:d1:45:58:4d:6f:3d:56:00:0c:e0:6a:
b7:60:1f:d9:94:17:70:6c:83:79:ef:2e:34:9b:b2:4c:56:84:
7f:cd:ff:f3:de:0f:12:46:55:87:dc:7c:da:b7:b9:11:c8:2d:
7a:28:e5:4e:e7:54:e3:07:8d:e8:8d:a9:55:fa:6b:e0:a1:b0:
ce:eb:bc:1e:b0:eb:ab:07:c4:a1:16:50:71:cf:b6:4b:2a:56:
f7:2e:6e:77:a4:7f:76:9f:13:e7:84:01:d0:b1:21:9d:34:9a:
dd:94:d0:1e:bd:59:15:bb:bc:4e:2b:ea:3c:d3:0a:09:2e:8f:
13:7b:eb:8c:96:ce:eb:64:3f:23:98:e8:f3:ad:fd:9b:f6:65:
8c:64:3a:a7:93:0e:14:dd:f8:43:dd:5a:56:df:cb:af:b6:36:
56:69:58:be:2d:77:ee:3d:22:03:90:95:19:ac:bc:2d:bc:4f:
23:aa:2b:dc:84:e0:e9:0e:1d:c4:77:de:68:fe:3a:3b:78:3c:
05:25:40:c5:a3:51:5c:c5:0a:53:4a:f1:f4:91:e7:34:6f:6e:
86:b0:8a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:19 2025 by rpki-client