Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/UGrR__PyRipPzdjGAZBG7BppT8M.roa
File: UGrR__PyRipPzdjGAZBG7BppT8M.roa (raw, json)
Hash identifier: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=
Subject key identifier: 50:6A:D1:FF:F3:F2:46:2A:4F:CD:D8:C6:01:90:46:EC:1A:69:4F:C3
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 0194252222140B7618E7C7F03F3BD95C7F12
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/UGrR__PyRipPzdjGAZBG7BppT8M.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39620
IP address blocks: 81.29.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:22:14:0b:76:18:e7:c7:f0:3f:3b:d9:5c:7f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506ad1fff3f2462a4fcdd8c6019046ec1a694fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c5:24:45:f5:d8:72:02:b0:8c:27:fa:c9:c9:
1d:58:c5:cf:26:06:bb:20:58:02:9c:c9:f6:4d:b1:
2f:41:47:17:f2:d3:93:dd:e0:9c:d7:46:68:67:c7:
61:4d:85:bc:3b:24:ef:10:5c:c6:cf:ba:c7:17:4b:
61:90:ce:4d:63:2b:aa:18:d0:1a:78:1e:12:8b:b8:
58:cc:d9:1a:0c:a5:1d:f2:22:0f:c7:32:1f:a5:f8:
e6:d5:4c:88:3d:91:66:d0:29:cc:34:71:5c:04:b4:
c8:b4:26:87:bf:c6:e7:29:15:d1:a8:0c:c1:27:80:
23:66:3e:21:0e:b8:cc:28:df:28:1c:36:9b:e5:06:
b0:09:8a:ea:95:0d:12:bb:17:56:cc:39:61:93:3d:
3d:ad:45:2a:11:e8:19:0d:77:5a:18:b1:7e:54:34:
a4:06:32:2e:f0:f0:13:e5:f2:8e:6d:75:62:ae:6f:
c2:be:57:56:27:4f:b4:c8:46:17:b2:e4:f7:b0:20:
9e:37:4b:3f:ee:76:9d:eb:d1:58:b9:1d:98:1c:ec:
49:4d:11:91:5e:e6:eb:56:3d:bb:98:d3:01:04:11:
f3:ee:a9:9a:61:4d:ef:bf:f4:38:11:9b:bd:e7:7e:
78:2a:2e:49:f6:43:dc:77:c4:38:f1:e5:a8:9e:ec:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6A:D1:FF:F3:F2:46:2A:4F:CD:D8:C6:01:90:46:EC:1A:69:4F:C3
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/UGrR__PyRipPzdjGAZBG7BppT8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.48.0/20
Signature Algorithm: sha256WithRSAEncryption
13:17:fa:c6:18:73:78:fb:e7:2a:41:1d:38:0a:d7:98:97:ac:
be:fc:fb:ff:75:2f:e2:82:b1:6f:6f:42:ad:48:3a:36:13:1d:
c5:49:4b:27:e5:13:e9:e9:6f:23:1b:42:61:df:60:b4:a6:49:
66:7f:7e:20:98:8e:f3:c4:2b:bd:e9:6a:36:6d:e3:b1:3a:70:
4e:7b:ce:b9:7a:7b:fa:6b:67:1e:77:a9:08:73:03:2f:7e:25:
f7:95:ef:14:41:5e:a3:12:ac:da:30:fb:81:67:83:23:23:0c:
4a:a7:8f:47:af:96:ad:0f:f3:17:45:6a:15:26:45:15:d1:e9:
ec:da:46:fc:dd:4b:b7:5f:bd:8d:09:06:eb:9b:30:d2:89:85:
8a:95:01:52:27:f8:07:ea:22:9d:a7:4b:f5:46:5f:ad:21:6a:
6c:24:a7:d6:37:7b:43:a4:16:9e:ec:09:93:fb:7e:e4:76:3f:
53:1e:90:2c:e6:9f:d3:e7:fa:5d:1f:44:28:45:fa:fa:dd:b1:
12:cb:e1:38:aa:ac:3b:96:92:ec:0e:5b:5f:22:9f:cc:c4:8f:
99:bf:f6:b9:cd:65:93:ee:e6:b3:9e:8a:36:97:62:c3:ce:65:
ee:65:51:49:85:c5:37:0e:2b:81:30:d5:31:22:0a:75:38:36:
02:a5:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:43:53 2025 by rpki-client