Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/uw1vWjTogEQRxLFm6OiF4tHPVEw.roa
File: uw1vWjTogEQRxLFm6OiF4tHPVEw.roa (raw, json)
Hash identifier: UQjtZx0kjaj8YIlzUivl2wZTPYSYnIOyJl8/eAgWRxE=
Subject key identifier: BB:0D:6F:5A:34:E8:80:44:11:C4:B1:66:E8:E8:85:E2:D1:CF:54:4C
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0194228DC9325337CF2A50703C5055199702
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/uw1vWjTogEQRxLFm6OiF4tHPVEw.roa
Signing time: Wed 01 Jan 2025 15:48:24 +0000
ROA not before: Wed 01 Jan 2025 15:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 185.36.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c9:32:53:37:cf:2a:50:70:3c:50:55:19:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jan 1 15:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb0d6f5a34e8804411c4b166e8e885e2d1cf544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:35:e9:5d:fc:aa:de:a4:c3:fb:a8:6e:5e:
8f:4d:19:bf:19:0f:8d:e5:7a:2e:af:c8:ec:1f:f9:
4f:45:8d:6a:33:0a:2b:95:d2:0f:ab:96:f4:7f:05:
39:da:29:4d:d5:89:85:21:02:5a:9b:d8:57:2e:a7:
c0:74:cf:bb:6e:d2:5c:1e:36:d6:97:54:ea:4a:2a:
45:4b:8b:0c:d7:96:c9:3e:e5:5f:07:0d:d0:da:1f:
b9:51:e6:e3:69:93:76:0f:1c:82:82:34:4a:ee:d4:
1d:d1:8d:55:d4:67:8f:c9:05:87:14:58:6e:ea:a8:
e7:47:65:a3:8e:6e:2b:4b:a4:94:af:3c:da:cc:0b:
2e:32:02:e0:03:a9:fa:47:04:72:7a:19:04:96:f8:
18:c1:80:f0:93:7f:69:93:3b:a9:63:e7:67:37:d1:
6b:49:a5:0e:9e:fb:4f:d1:65:2e:b2:c2:b1:7c:45:
53:70:e2:0b:45:82:34:7c:ea:83:b2:64:ac:07:b6:
78:b2:26:55:02:9b:af:f5:0b:7b:33:e3:39:6a:e5:
a6:60:0b:60:5c:74:e9:d5:b9:60:86:52:c8:39:c7:
5f:48:1e:a5:b8:a9:27:c6:28:67:a8:e4:c4:d1:4f:
a3:ce:8d:7f:15:a7:07:98:08:b5:8c:07:a5:88:2f:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:6F:5A:34:E8:80:44:11:C4:B1:66:E8:E8:85:E2:D1:CF:54:4C
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/uw1vWjTogEQRxLFm6OiF4tHPVEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6f:a8:55:8e:2b:0b:96:89:e4:44:82:c7:50:20:5c:e8:32:
79:3c:5d:cf:7b:81:f5:d5:e3:92:c3:65:17:51:f9:53:56:33:
58:8c:c2:2f:0f:06:2b:b1:b7:3f:48:94:1d:7b:89:8a:e2:9f:
b4:a5:5d:2f:ba:18:1f:54:bc:9e:f1:d7:f8:bb:b0:e5:2d:65:
b5:67:7d:2a:ee:38:7b:5e:07:77:bc:6e:a5:d9:20:49:30:3e:
b7:a1:98:0a:90:54:56:5a:7b:e8:d2:0e:04:e6:a4:c1:de:76:
e7:cf:a3:66:1c:21:1d:97:1c:69:bf:1a:3f:2c:59:0c:bd:99:
77:4e:58:2b:14:7e:6e:ac:24:7e:ad:7f:9b:28:ab:e6:c6:d9:
4e:02:e3:93:71:65:88:f0:b3:7f:42:d8:dd:79:59:35:11:97:
af:f3:82:ac:d7:54:f3:9d:81:2b:6b:f6:a6:ee:76:ce:6a:cf:
e9:8f:91:54:41:a7:85:cf:a5:98:43:aa:d5:f7:45:f1:44:a8:
7f:7c:db:e6:49:8d:a0:a4:31:50:b7:9d:10:98:c9:33:b3:d8:
bd:f5:a3:d5:9f:a8:70:3a:f6:33:46:05:9c:de:c6:e6:90:af:
7f:81:33:9b:4f:10:d1:d0:65:8f:3a:e7:77:3a:68:55:83:e2:
1c:76:4e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:51:55 2025 by rpki-client