Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/uUYawxOA6vrHqUWhBVl-nCH3F08.roa
File: uUYawxOA6vrHqUWhBVl-nCH3F08.roa (raw, json)
Hash identifier: jYbE7xpIouKTqdHm5gbc5Ae7T7j6ffKh6WG7ZTjR74U=
Subject key identifier: B9:46:1A:C3:13:80:EA:FA:C7:A9:45:A1:05:59:7E:9C:21:F7:17:4F
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01944FB34FEE908C5A5FCD95F0E083E23241
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/uUYawxOA6vrHqUWhBVl-nCH3F08.roa
Signing time: Fri 10 Jan 2025 10:12:18 +0000
ROA not before: Fri 10 Jan 2025 10:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:b3:4f:ee:90:8c:5a:5f:cd:95:f0:e0:83:e2:32:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 10 10:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9461ac31380eafac7a945a105597e9c21f7174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:35:f5:14:ec:00:8a:38:1c:b6:57:94:e5:
ad:f5:54:aa:ee:dc:0a:29:45:67:16:88:d1:0d:52:
de:42:69:1e:95:67:ab:ca:c4:48:51:15:da:20:91:
2d:78:6d:75:9b:d6:3f:b3:c4:06:81:7b:5e:93:04:
ef:2d:af:f5:31:46:10:51:4a:6d:4b:c0:19:27:28:
5a:3b:e2:52:cf:b5:ed:ad:a5:60:a4:fb:a3:45:6b:
91:88:19:eb:f3:ca:ad:b2:57:be:1a:a3:ff:9c:eb:
41:a8:e7:41:71:9d:24:f8:9e:67:a5:21:41:32:97:
ba:cd:95:48:e0:4e:1e:c7:78:53:bc:31:91:b0:a8:
dd:e0:a1:f7:64:4a:8d:d9:47:cc:db:26:ca:91:3f:
ca:6d:8a:35:b5:34:ae:3e:28:f1:af:e8:82:18:4b:
11:0f:0f:c0:0c:7d:6f:5d:9f:8d:d0:42:91:54:b0:
97:74:a1:df:34:e1:8c:3d:2f:37:32:4a:f9:18:c6:
f6:a5:a2:8d:f6:81:7e:56:44:3c:93:6f:82:7b:58:
c8:c8:1a:6b:0f:0a:54:cc:e9:a6:8b:2d:69:6d:80:
59:c4:20:c6:0c:8a:69:72:a7:16:fb:8b:28:3d:17:
2a:ea:72:94:ea:11:ae:60:41:9b:8d:d9:29:4b:ad:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:1A:C3:13:80:EA:FA:C7:A9:45:A1:05:59:7E:9C:21:F7:17:4F
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/uUYawxOA6vrHqUWhBVl-nCH3F08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
69:fc:03:47:99:1a:f0:48:3d:59:78:ac:49:01:a8:72:73:ed:
7e:4d:92:2e:d0:19:af:5c:fe:93:7e:c7:0c:c0:39:ff:8a:c6:
d8:5f:c2:23:8a:20:e8:47:b0:21:36:a2:1e:50:d7:ff:6c:cf:
c1:86:54:97:05:54:aa:c2:4f:dd:a0:7e:72:68:b7:09:b9:0d:
c8:b2:5b:c6:b1:09:7c:3a:5b:d0:4c:39:18:7a:bc:d7:e4:14:
9a:93:bc:cc:bd:88:7c:52:75:76:d8:50:df:1c:e5:da:19:26:
32:d8:1f:23:b1:7f:8e:b4:5f:df:f2:35:fe:2f:eb:4f:54:4a:
fa:5d:ee:9d:48:5f:14:d3:1c:b7:99:76:a7:fc:c1:3b:65:ce:
9f:f6:fd:0e:50:ff:11:ce:37:6a:b6:ec:40:17:a8:7b:49:4f:
6c:89:f3:64:9b:4d:33:f9:6a:ea:71:10:92:56:1c:03:d8:0c:
5f:78:f1:8c:82:10:b0:9a:32:c2:78:f3:17:6d:c2:9c:40:dd:
f0:95:87:70:37:ee:b8:3b:67:5b:bb:69:c2:af:8b:2a:1c:ca:
02:4f:a0:0f:e0:74:a4:48:31:fb:95:07:64:4b:d7:2a:cf:64:
4c:25:9a:02:05:05:68:83:70:ac:af:9a:58:97:7f:61:b7:bf:
1c:ca:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:14:06 2025 by rpki-client