Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/tUM5Da4MUfst5wIsOOsmpEfOGwE.roa
File: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (raw, json)
Hash identifier: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=
Subject key identifier: B5:43:39:0D:AE:0C:51:FB:2D:E7:02:2C:38:EB:26:A4:47:CE:1B:01
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 0194252217A4C9157F124185267B7B127ED2
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/tUM5Da4MUfst5wIsOOsmpEfOGwE.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.226.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:17:a4:c9:15:7f:12:41:85:26:7b:7b:12:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b543390dae0c51fb2de7022c38eb26a447ce1b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:36:2b:f5:01:b4:6b:c7:55:68:1f:6c:06:
48:70:0c:92:43:78:cc:57:4b:80:e2:96:11:51:23:
5d:27:d5:a8:b9:3a:48:d4:5e:bd:cc:03:73:7f:8b:
34:5a:3a:0d:ae:45:1e:82:53:91:e6:99:5f:9f:39:
05:8d:67:59:8a:76:8d:92:90:70:bc:86:bb:b9:a5:
d3:ea:d9:e1:50:ea:d0:ee:62:85:09:cc:65:6d:43:
7d:56:b3:98:87:b2:79:15:15:39:aa:32:71:1e:5f:
d3:26:21:dc:cc:c7:e8:a0:fc:e8:39:ba:62:80:3b:
ea:18:dc:17:af:35:e4:38:94:03:3b:e5:f1:c8:50:
70:a3:1b:92:8b:a4:47:8c:73:c7:80:0a:e5:1d:2f:
a9:06:c7:7c:0e:79:30:02:a5:45:09:00:1b:e5:5c:
6f:c8:ec:43:57:e3:ce:e0:c6:1b:63:c9:dc:11:fa:
b4:3a:d0:be:9c:a3:19:7d:5c:cb:16:91:c7:6e:50:
a8:ba:35:4b:12:97:f7:fc:55:8b:1c:0b:28:45:4b:
b9:bb:1d:7a:69:a9:62:96:f8:04:29:47:3f:fd:10:
67:e6:2f:db:e7:db:80:cc:e0:01:3f:d2:c1:ff:75:
1e:4a:f5:59:0b:1d:4a:2c:ed:b6:6b:7f:9a:14:49:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:39:0D:AE:0C:51:FB:2D:E7:02:2C:38:EB:26:A4:47:CE:1B:01
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/tUM5Da4MUfst5wIsOOsmpEfOGwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:40:3f:ec:5b:b8:9b:7f:ab:df:8a:c6:a2:6a:16:55:43:78:
98:17:62:8a:12:b0:6e:ee:6b:92:6e:f9:5a:f1:00:ee:3e:f4:
45:0b:ea:9a:5a:b5:c2:ec:f3:b9:d2:d0:96:cc:ee:0d:8f:85:
e7:92:2f:4c:57:0d:02:cd:b9:d1:66:12:50:56:16:2f:b7:7a:
4d:26:e6:fe:a8:64:37:8d:fe:57:dc:f1:20:67:96:42:f7:3c:
4b:94:9f:5f:7a:5c:46:38:8a:e7:96:5a:30:13:a5:a8:b8:4e:
ce:7e:14:77:a0:90:1f:88:1c:31:6e:0f:73:9a:c0:d4:3e:ab:
b0:d8:33:aa:1c:c1:9e:ad:15:de:cf:f5:7b:5d:21:0a:9e:9f:
43:7e:68:55:ef:92:85:4c:e5:d4:e3:f0:0f:55:3b:ce:b1:c0:
37:41:89:16:4d:02:86:03:a9:b5:12:57:7f:87:06:0f:b7:63:
31:8f:c7:e6:dc:a6:1d:46:e0:6d:70:cb:bc:60:00:d7:cf:d2:
31:4e:28:41:0c:87:1f:65:4a:f5:97:8f:7d:a3:24:c6:ef:d8:
83:b0:8e:a0:a7:94:f9:e8:e6:c9:42:8a:05:19:33:87:f7:40:
37:3f:dc:97:22:1f:97:f5:0b:a6:73:97:bd:dc:e1:52:fb:83:
52:9d:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:16 2025 by rpki-client