Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UDbRypNOgOcwvK8XFvXDSmDZHmU.roa
File: UDbRypNOgOcwvK8XFvXDSmDZHmU.roa (raw, json)
Hash identifier: jhU1h7QJBrJh+xhr5fqliwF2zzB+GqGDZaPJlZO5TFc=
Subject key identifier: 50:36:D1:CA:93:4E:80:E7:30:BC:AF:17:16:F5:C3:4A:60:D9:1E:65
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B240B3808D65A812DD8CFD566D10D5
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UDbRypNOgOcwvK8XFvXDSmDZHmU.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210073
IP address blocks: 195.7.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:40:b3:80:8d:65:a8:12:dd:8c:fd:56:6d:10:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5036d1ca934e80e730bcaf1716f5c34a60d91e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:4c:5b:17:31:4d:4e:5b:03:56:f0:bb:9a:
4a:4d:3f:b2:1e:53:d0:86:43:c1:92:08:54:85:83:
fa:3e:32:35:b1:e6:40:25:c9:56:a3:46:33:b1:ef:
5c:26:4e:be:ed:4b:02:de:f0:19:d1:aa:71:57:f3:
c6:59:73:18:bf:ae:1e:35:8b:5d:ec:b1:1b:45:a8:
19:93:52:6e:d0:e1:02:c7:46:bf:1f:45:36:e7:1d:
94:68:27:c7:02:eb:7f:c2:e5:75:8e:36:a0:6c:bb:
fb:92:90:0e:df:d1:06:34:a7:32:74:bf:5c:b8:57:
e2:9c:ea:76:ee:4f:bb:ef:d9:33:12:4d:13:8d:83:
9d:40:86:4e:28:2b:58:bd:1d:bc:30:e7:87:9a:55:
d5:5c:ee:ed:13:ea:67:69:00:c6:1e:6d:36:b8:fc:
26:00:9d:af:0c:9c:7b:79:9f:d0:f5:81:e9:a4:ae:
ff:76:d1:8c:65:bd:59:69:84:1d:a9:74:41:b1:af:
ab:e6:cc:c5:bc:a2:16:ff:5c:e2:3b:01:f3:d7:5b:
e8:2b:e4:07:15:66:3c:f1:2c:d0:bc:5a:30:7d:b8:
a8:e5:ec:48:57:37:5f:0a:3b:e6:40:9b:c1:dc:70:
47:79:94:09:d1:3a:5c:35:89:39:4b:55:7f:c3:95:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:D1:CA:93:4E:80:E7:30:BC:AF:17:16:F5:C3:4A:60:D9:1E:65
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/UDbRypNOgOcwvK8XFvXDSmDZHmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.14.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ae:35:eb:db:f3:44:98:48:a0:91:a9:18:1b:39:51:f9:a5:
3c:2d:83:72:a5:d3:cf:1d:d6:e2:91:a6:06:0b:3d:3d:d3:76:
b8:6b:3e:3f:51:be:07:a6:5f:fd:50:7a:8b:01:4e:01:00:9c:
2b:2f:ea:63:71:60:eb:bc:44:a4:59:a0:c6:b9:6e:94:57:86:
87:35:34:d4:a4:15:17:cd:49:07:0f:fb:2e:b3:49:6f:41:d6:
bb:a0:63:c4:97:93:90:3b:03:bb:03:60:84:7d:7c:50:a9:c4:
ee:c4:72:7f:59:ec:16:4e:8c:c8:9c:b4:c0:cf:df:23:63:c8:
17:01:c9:0c:64:de:a0:90:ab:5e:78:89:97:46:6d:fe:3f:16:
00:a0:ba:1b:3e:8f:c4:8e:3a:6d:7e:48:4f:a8:b7:2e:94:d2:
e8:33:eb:9f:c7:a5:54:b4:31:0a:60:8d:7c:13:48:8f:87:c5:
60:7f:f0:6d:32:d2:2d:d1:03:b4:c9:b1:52:3a:a0:ae:8d:88:
23:a4:5f:d8:ee:87:57:83:72:d3:7d:d4:b1:ac:b9:82:11:70:
95:4a:94:8d:b6:63:d5:e6:d0:bf:7f:8c:c0:ca:e1:b0:cc:16:
b0:bf:1d:95:de:95:82:92:02:ea:15:9d:df:ba:38:4e:65:ec:
9a:95:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:29 2025 by rpki-client