Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa
File: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (raw, json)
Hash identifier: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=
Subject key identifier: 52:4B:C4:F1:DA:99:AF:3C:6D:00:7F:DB:D4:36:71:82:A1:7A:BD:33
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 0194266BDF8AAE2F0837A0114CF8CF95A249
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212202
IP address blocks: 193.163.73.0/24 maxlen: 24
2a10:9080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:8a:ae:2f:08:37:a0:11:4c:f8:cf:95:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=524bc4f1da99af3c6d007fdbd4367182a17abd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:29:fb:08:4f:6e:94:e4:f3:76:d5:37:38:
c5:59:0f:52:3e:88:2f:72:9d:a0:7b:60:ed:09:2c:
fc:b0:b7:c9:44:0f:7b:89:ef:77:a2:78:77:94:b1:
bb:02:72:4c:e6:a6:b2:ae:2f:11:5f:9f:98:67:55:
f2:66:cb:ad:7f:c6:b1:a9:42:59:38:2b:67:ba:77:
e2:9f:75:88:2b:fd:80:9a:7b:3f:60:f1:e9:b6:5c:
0e:54:a6:85:9e:0d:7c:cc:7a:22:1f:74:d1:8c:b4:
4f:49:02:b7:09:fb:e2:a9:0c:e1:f6:9a:15:26:e4:
14:e5:b3:aa:e9:da:fd:9c:3e:cd:db:4d:f4:21:ac:
f1:b7:a6:fa:da:f7:10:4e:c2:95:54:27:4c:11:28:
47:67:56:bd:8c:cd:be:50:49:d0:7a:9f:6c:37:97:
6a:c6:f3:6d:92:fd:d1:12:ca:3e:f1:0a:87:1f:a4:
d7:f7:44:ea:2f:6c:eb:33:2d:f5:f0:15:ed:c9:74:
9c:c0:fb:3d:ec:40:db:b3:84:df:97:cf:42:21:2f:
8e:6d:7e:70:3c:a8:ae:39:7d:b1:33:3c:d9:1c:a5:
d8:5b:22:d4:ba:33:15:3f:71:75:42:b8:66:4a:b8:
53:29:fe:9f:4f:51:db:19:a2:52:b1:99:96:d7:c0:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:C4:F1:DA:99:AF:3C:6D:00:7F:DB:D4:36:71:82:A1:7A:BD:33
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.73.0/24
IPv6:
2a10:9080::/29
Signature Algorithm: sha256WithRSAEncryption
b7:dd:46:76:90:4f:5b:1d:76:8f:fd:e6:fa:95:d0:9d:7c:74:
a7:cf:83:04:5b:3b:50:83:b5:ed:57:bb:31:d5:b6:2f:ec:18:
96:dc:2c:06:bf:39:58:c2:64:90:25:25:90:aa:86:27:bc:56:
49:45:f9:7b:58:93:8c:31:75:65:b9:90:34:1f:88:7d:e3:5f:
e5:f0:a3:1a:5f:85:36:67:4b:5e:ab:50:8c:f3:51:5c:31:ca:
9d:44:39:b8:21:52:e2:42:2d:ab:38:00:69:41:70:2b:9f:fb:
75:57:d0:91:33:fb:02:05:02:4a:be:4c:ea:bd:66:7f:06:f3:
16:f8:e5:80:84:1c:13:80:26:45:8a:91:d9:1a:a0:94:80:9a:
3a:cb:25:e6:a8:53:d7:70:98:9c:e6:85:5e:11:81:b5:d4:e7:
8f:76:fd:2b:2f:88:3d:8a:d7:4a:4f:15:b1:d1:c7:84:67:e1:
97:5a:b0:85:d6:3b:54:f7:aa:23:c6:a2:c0:8f:34:05:cd:82:
63:6d:95:d3:d6:44:4a:6c:49:63:0b:b6:21:bf:ea:f4:ae:17:
7b:d3:eb:e4:0e:d2:73:15:05:c7:f5:b8:e9:e0:be:d7:5c:fc:
02:bb:a0:11:bc:07:74:ba:40:6b:de:e1:84:0e:75:20:19:69:
1f:6c:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:00 2025 by rpki-client