Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/UAFcUuKvgonvhSs4MdOglxDeP9A.roa
File: UAFcUuKvgonvhSs4MdOglxDeP9A.roa (raw, json)
Hash identifier: cBXXRFGKUV+6kMfUTrzWb6w7ZuBP1z44qOPAvbDDmRo=
Subject key identifier: 50:01:5C:52:E2:AF:82:89:EF:85:2B:38:31:D3:A0:97:10:DE:3F:D0
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019423D71E4C132B4F717ADF2A0153719CE1
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/UAFcUuKvgonvhSs4MdOglxDeP9A.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142111
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:4c:13:2b:4f:71:7a:df:2a:01:53:71:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50015c52e2af8289ef852b3831d3a09710de3fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:d3:a9:9c:2b:e3:ba:74:c6:4e:a0:86:4e:
6e:e1:ea:1f:c7:d6:5f:ba:0d:92:a6:43:c0:a8:41:
b4:ea:fd:a7:d4:9f:4a:f4:1a:fd:8d:dd:da:7e:ce:
fe:65:99:db:c4:c9:96:54:f4:17:a6:cd:f1:c0:22:
98:d7:d6:7d:ac:bc:ea:62:6d:9e:25:b2:bb:d1:35:
79:30:e5:65:f5:98:f0:05:2b:b6:80:89:46:08:01:
7e:a3:e6:0b:45:77:45:17:8a:5b:c8:bd:3e:4d:e5:
72:07:27:eb:27:32:0f:22:43:7f:95:b9:d0:c9:a8:
7d:f5:88:a8:3a:94:36:39:3a:a8:6e:7b:dc:31:f6:
4d:2a:66:63:e8:38:e2:75:58:a7:67:1e:c7:e4:83:
28:ba:66:ba:7c:73:35:b8:3d:35:3e:54:cf:30:63:
95:aa:77:97:ff:f1:2a:11:c3:42:a2:35:68:cd:46:
c4:5c:e5:66:63:00:fa:03:c9:4f:a9:7f:fd:e2:c9:
20:19:72:d3:53:ac:70:60:c8:2e:dd:78:57:1f:1a:
7e:0c:13:7e:09:89:d6:b2:8b:94:a2:77:c9:47:f7:
e3:ce:c5:6c:01:2b:a6:58:f1:85:6e:c0:67:9d:34:
4d:cc:ee:88:68:d1:76:1e:4b:af:a2:b5:36:4f:10:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:5C:52:E2:AF:82:89:EF:85:2B:38:31:D3:A0:97:10:DE:3F:D0
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/UAFcUuKvgonvhSs4MdOglxDeP9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:59:ba:c0:0f:47:70:36:b7:66:78:d6:27:09:01:65:67:18:
31:07:08:73:47:35:5b:77:35:1b:b9:2f:a9:0e:09:0e:7f:c5:
45:59:6a:a5:ad:91:44:76:fb:70:56:60:d9:4a:70:f4:21:b4:
30:d0:f5:69:a0:a3:e5:f5:d0:76:8b:20:e0:6f:ea:2d:2d:b6:
07:b8:b6:7c:de:1d:88:a9:1e:5b:7a:78:04:49:e2:43:96:77:
1b:c0:18:42:36:fb:cc:38:9f:09:27:6f:f4:e8:8d:3c:a8:99:
e6:c5:d0:80:78:24:07:bc:69:d1:12:73:c6:e8:9b:7a:d4:1b:
7b:5f:25:4f:ae:2d:49:b9:d0:d6:55:e9:5c:91:0c:be:ff:33:
07:2b:42:e3:82:2d:43:df:8b:41:5a:49:c1:74:5d:a3:41:9d:
d0:c7:5e:a7:87:e6:bb:cc:5d:af:9e:d6:c8:73:ef:39:bc:38:
cd:56:0b:e3:46:88:02:20:38:ea:80:43:fe:10:04:19:38:9a:
45:3d:72:45:ed:93:b5:b2:1a:f5:03:20:ad:28:c0:65:9f:28:
97:23:52:07:f5:1e:7c:31:af:0f:56:20:8f:76:48:7f:4b:d8:
2b:4c:40:d9:e3:7b:3b:2f:23:af:17:d6:9c:d3:c7:be:e0:8e:
c6:0b:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:33:27 2025 by rpki-client