Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UewwF6FystXjs4c5BNQjtHvsZFk.roa
File: UewwF6FystXjs4c5BNQjtHvsZFk.roa (raw, json)
Hash identifier: /vPUxQLqndWvuwfV3CGXPfDYkuHMXz5rGBsTjbDPP/g=
Subject key identifier: 51:EC:30:17:A1:72:B2:D5:E3:B3:87:39:04:D4:23:B4:7B:EC:64:59
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248BE409F473D821FC657126865EA7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UewwF6FystXjs4c5BNQjtHvsZFk.roa
Signing time: Thu 02 Jan 2025 17:51:11 +0000
ROA not before: Thu 02 Jan 2025 17:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 83.219.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8b:e4:09:f4:73:d8:21:fc:65:71:26:86:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51ec3017a172b2d5e3b3873904d423b47bec6459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:73:5f:6c:4b:dd:7a:71:75:cf:34:3e:91:
25:77:b8:b6:60:87:da:cf:74:d2:aa:d8:bd:5a:4b:
9e:75:3c:3b:09:43:87:b1:d8:2b:ec:e6:45:c1:3d:
3b:85:3d:3f:17:11:cd:82:fb:00:bf:f1:d9:dc:ca:
2e:b9:3f:9f:7e:e3:b0:e2:23:08:5e:f6:b2:e2:54:
d8:5b:29:da:ae:b7:bc:4d:98:47:91:e3:80:63:a0:
b0:d1:2d:8f:96:5c:58:7e:8c:46:bb:a3:3f:ac:35:
26:34:60:9f:b9:79:85:eb:4d:14:00:87:f7:31:cc:
f1:0e:8f:b9:30:c4:4e:ae:8a:cf:1c:90:f4:e0:04:
cf:1f:f8:22:5e:00:14:77:7e:17:b4:0e:2e:e0:23:
03:0f:15:68:a8:18:b6:f3:66:70:90:02:76:9b:d0:
fb:a6:11:a6:b5:22:b4:e2:71:f5:38:c0:ae:a1:7e:
62:29:84:84:f8:3f:bb:64:cc:69:06:df:8f:71:da:
d6:a6:d7:de:93:c2:20:ad:d3:3b:f5:a2:14:f2:0a:
b2:fc:be:94:6a:bd:1f:de:a0:33:c5:34:0f:3c:9a:
0b:fa:8d:3c:1e:c4:03:aa:02:93:d4:91:d0:cf:b3:
53:3c:32:8d:70:5a:33:15:dc:59:df:4a:c4:5c:fc:
8b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:30:17:A1:72:B2:D5:E3:B3:87:39:04:D4:23:B4:7B:EC:64:59
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UewwF6FystXjs4c5BNQjtHvsZFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:11:0a:b4:5f:ce:0f:01:14:83:ac:60:ca:0f:85:53:f9:c8:
c4:ff:ed:98:d8:81:48:a6:9c:a6:06:8a:32:00:89:de:d3:5d:
60:ea:9f:e9:c1:48:1c:06:dd:1d:c3:c1:82:33:36:01:55:27:
9c:8c:34:99:46:2a:e5:6f:e7:4f:4b:97:43:77:d6:20:54:0e:
db:6a:b4:ef:b8:89:14:31:7a:4c:2b:9a:fb:82:8a:af:8d:88:
4e:8d:c6:6a:ab:3c:61:c7:33:9c:5e:14:7f:2a:fd:27:5a:24:
f3:91:2f:ff:e2:08:6a:43:91:92:bf:77:a2:2a:71:98:43:3e:
68:12:ca:ba:42:f1:a7:cb:01:36:d6:a5:62:d4:7f:5e:ab:f6:
d9:e3:14:be:93:1e:8c:a9:41:7a:02:7e:a0:69:d1:b8:c1:90:
d2:cd:65:fe:e4:68:88:d1:e9:8a:3c:19:97:83:f0:64:b6:67:
45:ef:4f:c2:16:36:71:d8:eb:49:ec:c2:94:75:03:19:f2:2b:
47:be:d7:0e:c4:0b:2d:a3:cb:ae:c9:60:69:9f:85:eb:f8:9f:
9f:ca:84:58:ed:68:82:5c:74:55:48:8b:3e:e8:68:43:c5:ac:
33:20:88:0e:26:74:64:67:9e:7b:45:ac:26:8d:a1:6e:d3:03:
32:6f:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:16 2025 by rpki-client