Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UPL7qImi1Ys3kJpNeUneyjua3iE.roa
File: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (raw, json)
Hash identifier: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=
Subject key identifier: 50:F2:FB:A8:89:A2:D5:8B:37:90:9A:4D:79:49:DE:CA:3B:9A:DE:21
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0195665150203634435BBC5C5B48C26F021D
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UPL7qImi1Ys3kJpNeUneyjua3iE.roa
Signing time: Wed 05 Mar 2025 12:39:19 +0000
ROA not before: Wed 05 Mar 2025 12:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200918
IP address blocks: 195.22.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:51:50:20:36:34:43:5b:bc:5c:5b:48:c2:6f:02:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Mar 5 12:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50f2fba889a2d58b37909a4d7949deca3b9ade21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:a3:79:09:4a:99:d7:5f:9e:79:58:c4:44:
b9:f7:9f:d1:da:61:52:7f:27:f3:ae:bd:a5:c2:eb:
ae:ac:6f:f1:ca:c9:02:ed:d5:b8:c4:87:e6:75:6f:
39:5b:c5:80:54:03:8a:64:68:bd:c0:a6:20:f8:b8:
6c:1e:4d:44:a4:bf:29:ff:da:16:f2:cc:9f:a1:e5:
8e:57:85:3b:ef:d0:c8:c0:6e:82:97:ce:c7:00:8c:
4d:07:c1:ee:32:a2:49:e4:5e:fb:67:99:98:2e:a3:
e5:f9:a3:28:1d:99:e3:00:34:18:73:e0:6a:e1:e4:
f1:19:0a:9d:fe:1c:73:9c:57:b4:9d:36:ad:dc:00:
ed:34:8c:2b:3c:84:45:8e:39:1e:6b:32:98:70:a6:
2a:2f:92:44:d1:e1:23:bf:f7:48:9b:63:f4:97:f3:
32:48:d6:14:39:21:8d:e0:2e:8a:fc:89:b0:bf:c5:
6d:1b:b8:b1:30:a4:3b:4d:0f:6c:6a:29:ab:74:3a:
d3:d8:78:9f:dd:c8:43:f9:22:48:e9:dc:96:c3:a2:
53:16:83:24:1f:c3:f8:b9:ba:28:48:3b:42:22:17:
51:45:a4:26:4b:5a:27:68:10:ff:9b:fa:ec:5b:da:
d3:36:ce:7b:a2:fc:9a:c0:03:90:83:a6:25:a6:7c:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:FB:A8:89:A2:D5:8B:37:90:9A:4D:79:49:DE:CA:3B:9A:DE:21
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/UPL7qImi1Ys3kJpNeUneyjua3iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.119.0/24
Signature Algorithm: sha256WithRSAEncryption
53:dd:0a:83:9f:b4:df:32:21:3a:55:f9:43:3a:11:39:5f:23:
80:7c:dc:5d:91:34:38:99:10:64:15:e0:cd:75:7c:d4:73:78:
c9:15:e7:08:c0:6e:a7:08:d1:bc:d3:d8:39:d2:20:e1:d4:20:
52:ad:f9:cd:1f:d9:41:59:1a:5b:57:2c:c0:f2:cc:c5:4e:bc:
b3:2c:50:cc:21:9b:ea:82:6a:ed:af:5f:cc:7a:65:c4:6c:5a:
3b:10:36:a6:45:cd:a7:ff:ca:f8:c5:30:e1:04:0a:b4:d2:5e:
75:bb:00:f7:a7:c4:d4:24:b3:ad:e0:72:17:84:c2:12:c4:86:
63:dc:39:f4:cf:f5:39:47:9f:42:11:d9:3d:3e:d8:25:c8:dc:
dc:46:fd:18:18:87:cd:e7:ff:55:67:a9:c0:5c:e6:48:82:dd:
0e:a9:4b:8e:6b:94:1a:29:d0:e4:0c:ff:a9:4d:30:e4:06:3d:
3f:c1:84:65:62:79:bc:bd:9f:9a:32:db:30:e4:96:8a:25:16:
ae:15:f8:9b:f0:fe:53:bb:4a:9f:70:44:96:83:83:9c:eb:92:
a9:6d:f9:24:27:38:16:82:37:f9:2d:82:71:ef:07:df:0e:db:
61:89:f5:ab:5f:bd:08:11:e7:39:48:d8:b4:db:1c:d4:14:44:
8f:9b:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:36 2025 by rpki-client