Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/UAEVVZJh_F--n89kLYAR_ZrMiAA.roa
File: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (raw, json)
Hash identifier: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=
Subject key identifier: 50:01:15:55:92:61:FC:5F:BE:9F:CF:64:2D:80:11:FD:9A:CC:88:00
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421442C0E69D37258558A0F44FC0E7906
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/UAEVVZJh_F--n89kLYAR_ZrMiAA.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203671
IP address blocks: 147.78.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:0e:69:d3:72:58:55:8a:0f:44:fc:0e:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=500115559261fc5fbe9fcf642d8011fd9acc8800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:85:c7:63:42:0a:11:91:4f:34:d8:f6:3b:
2a:75:ae:f0:b5:01:21:56:07:3e:90:bd:46:73:af:
09:7d:3f:96:d6:93:69:c5:99:d2:09:15:b7:e4:f9:
a0:b7:ed:ba:8f:ea:b4:e4:ad:c0:7d:b4:98:25:f9:
ad:68:6d:ac:98:b2:b4:b8:b9:69:19:4d:a7:84:47:
17:3d:64:db:56:37:19:58:6f:5b:4b:fd:8f:49:81:
0f:23:00:64:17:0b:0d:03:f1:83:08:43:26:fc:b1:
51:a5:cb:c5:f4:44:5e:52:f7:02:b7:3b:ee:7e:89:
02:89:27:7c:73:70:25:b6:59:d5:7e:7a:c9:ed:b4:
08:8b:82:df:9f:d4:ba:a9:da:eb:1b:03:21:62:6c:
ec:9f:2b:cd:aa:2d:14:e3:94:bc:f0:dc:62:60:90:
8d:91:13:ff:8b:2b:be:0b:f5:59:08:c7:60:df:74:
35:38:26:28:94:e0:c8:5f:eb:61:fe:c6:79:8c:01:
fc:dd:a5:04:f9:4e:89:57:f3:73:f8:7d:0c:61:65:
84:75:95:ab:bc:b9:cb:fd:e5:e7:e6:42:11:5b:75:
24:e4:ac:42:b8:2d:22:b6:de:79:ab:5a:d7:21:74:
f1:a8:66:4e:b4:c5:25:6f:98:40:46:b2:ef:fb:ee:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:15:55:92:61:FC:5F:BE:9F:CF:64:2D:80:11:FD:9A:CC:88:00
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/UAEVVZJh_F--n89kLYAR_ZrMiAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.216.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:1a:15:f8:ea:46:76:e9:c0:a7:35:b8:42:88:9a:28:08:
4f:92:9f:b8:40:4c:a5:69:ed:4e:91:ce:87:c8:2c:a1:e2:1f:
7e:0b:1f:c8:20:86:06:da:da:b3:ef:55:43:9b:38:3a:2f:ce:
88:2b:cc:ec:c8:10:68:da:10:aa:50:aa:50:86:fa:38:a3:ea:
b8:1d:be:a8:cf:18:7e:84:f7:b3:2d:21:36:be:d9:c0:a3:10:
9c:c4:43:5a:6e:e8:87:d4:1d:11:83:93:84:e0:10:65:8d:1c:
e0:81:6c:81:c2:ce:27:a8:c4:39:c8:ae:81:f5:a8:7b:f4:14:
0a:66:6b:ac:34:2b:fc:74:70:5e:79:2a:6e:ab:f1:3b:b8:a3:
66:ab:f4:f4:39:86:33:dc:da:66:87:a6:05:63:56:5b:66:21:
6b:77:1b:98:4c:f7:f9:a1:75:e7:8d:2a:c9:2e:93:a6:5e:11:
ca:2e:e3:82:94:e7:71:aa:47:b9:40:05:5d:0a:5e:2f:2b:e8:
17:a8:12:76:33:e1:ee:1f:86:2c:7a:45:4a:e7:2e:2c:72:ec:
df:54:b2:ff:67:c8:97:a9:6a:aa:fe:23:a6:88:37:50:ca:34:
14:ea:44:ef:d2:bc:b8:0c:89:17:9c:b2:58:34:37:d7:06:8d:
65:b2:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:44 2025 by rpki-client