Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ULRHxuv-M24qNhPBKvjephHauaQ.roa
File: ULRHxuv-M24qNhPBKvjephHauaQ.roa (raw, json)
Hash identifier: mPBGztlPKd54x50aqeyxsRvgdKh+gRgl/5KsTcABynw=
Subject key identifier: 50:B4:47:C6:EB:FE:33:6E:2A:36:13:C1:2A:F8:DE:A6:11:DA:B9:A4
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019417E3C23F79197341DB9D677C59C7A762
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ULRHxuv-M24qNhPBKvjephHauaQ.roa
Signing time: Mon 30 Dec 2024 14:06:29 +0000
ROA not before: Mon 30 Dec 2024 14:06:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42962
IP address blocks: 195.180.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:e3:c2:3f:79:19:73:41:db:9d:67:7c:59:c7:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Dec 30 14:06:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50b447c6ebfe336e2a3613c12af8dea611dab9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:40:fa:89:a8:ff:57:e6:3d:42:c8:9a:ef:
81:9c:ef:b5:75:bc:05:11:91:8c:6c:6c:f4:ff:68:
91:4f:6a:78:fa:e0:ff:00:d0:36:9c:62:d3:71:01:
f7:03:45:7a:cb:73:93:c8:b2:87:c2:09:b8:b6:c0:
97:ad:ec:ea:9e:08:13:8b:16:42:96:0b:d7:67:d3:
a3:dd:46:34:bb:ca:bb:89:4d:8a:e0:ab:4f:b6:60:
4e:8d:52:09:1c:de:4b:40:86:b4:b8:d7:0b:64:93:
40:57:f7:e4:24:aa:fd:e0:86:1f:a6:b3:e7:b8:e9:
2e:17:e6:91:1c:f1:02:ff:5c:dc:47:f5:fc:14:a8:
8c:d5:8c:61:7f:da:f2:50:ec:1d:81:7b:9e:59:ee:
03:0c:56:ea:2c:bb:df:f9:6e:4b:2d:ce:f7:ef:36:
00:92:07:a0:e1:2b:96:ce:f3:1c:4e:8d:de:d2:c6:
19:b2:d8:f9:26:b0:57:e7:fa:33:a0:53:98:34:e0:
76:1a:94:07:c0:a1:8f:50:02:24:78:2f:15:eb:b3:
07:db:3d:3f:03:a1:54:14:ae:98:57:8d:5d:88:72:
9e:34:46:3b:73:c9:1a:48:ad:be:92:a0:9d:92:e3:
1e:eb:14:22:77:a5:f7:30:e2:83:66:8d:20:5a:f1:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:47:C6:EB:FE:33:6E:2A:36:13:C1:2A:F8:DE:A6:11:DA:B9:A4
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/ULRHxuv-M24qNhPBKvjephHauaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
57:c7:4a:6a:86:51:f0:e3:02:57:5b:8f:c1:53:1d:90:0e:d3:
e2:3f:8e:6d:3d:de:a9:fc:c8:5b:47:f9:c5:4b:38:b8:d5:39:
e0:56:f1:ae:5d:8f:13:f6:41:94:49:22:83:c6:cc:ea:c7:af:
76:6e:9a:c2:e8:ee:6c:f7:cd:56:1f:d4:5e:41:a4:85:9c:e9:
ba:5f:f4:ea:3f:a0:96:d8:78:18:35:53:c3:ee:13:c3:b1:62:
8b:49:10:78:f3:89:9e:48:0d:9d:b8:89:4c:ef:ca:97:e7:17:
3b:e5:12:49:88:a1:d5:fc:1d:ed:c5:72:97:95:0f:fd:ba:7e:
93:d6:7a:3a:59:be:8d:f1:0c:0e:54:0f:72:be:c5:ca:d6:45:
a6:01:fb:be:b2:76:df:40:d3:be:93:38:ed:67:0b:94:e6:4b:
56:46:e0:1e:08:e6:64:1f:9f:ba:5e:ac:57:6e:66:7c:c1:91:
de:e2:2f:a5:70:b9:b2:5d:b4:c5:56:61:a3:3e:b1:08:b9:05:
b0:92:ec:94:d7:d9:63:ca:bf:57:65:da:5d:4f:a8:66:7a:2d:
b4:6e:e0:e2:00:c5:71:21:f1:52:e5:66:90:9b:78:d7:a4:db:
d6:b5:a3:52:fa:50:47:b4:6a:e8:a5:82:b1:66:10:89:06:a3:
05:6b:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:25 2025 by rpki-client