Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/UdT52qeUwfKz4cUKsNmdkQLdPTw.roa
File: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (raw, json)
Hash identifier: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=
Subject key identifier: 51:D4:F9:DA:A7:94:C1:F2:B3:E1:C5:0A:B0:D9:9D:91:02:DD:3D:3C
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 019426D9DC6C2408E5D3D84491F14A15240D
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/UdT52qeUwfKz4cUKsNmdkQLdPTw.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20857
IP address blocks: 193.111.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dc:6c:24:08:e5:d3:d8:44:91:f1:4a:15:24:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51d4f9daa794c1f2b3e1c50ab0d99d9102dd3d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ff:23:26:72:59:a1:55:c3:a6:c7:1a:99:31:
26:1f:43:4f:74:54:bc:e8:77:bf:ff:5c:40:12:8f:
ce:41:97:ba:65:d1:57:43:06:ee:0d:ae:19:d8:a0:
a7:cd:28:89:79:d3:0a:c7:29:38:a2:b4:f8:e7:94:
56:69:a9:e8:f0:c8:dc:bb:fc:20:f8:7e:d4:82:80:
f3:14:03:39:f5:7f:4a:ea:77:42:04:2a:90:72:e0:
05:f1:41:37:16:30:af:b6:f6:c6:fd:e5:63:72:f0:
b9:99:28:d4:8a:46:97:13:2e:c1:fb:87:f0:75:ad:
7b:e4:d8:e3:13:2b:9b:a5:d4:1d:2c:a6:ef:b9:6d:
f7:3f:d0:b3:1f:0e:e4:6f:3f:09:3f:ad:5d:c3:6a:
9f:ca:3d:28:4c:b5:d4:9c:c0:ac:c1:c3:76:db:cf:
f3:98:5a:78:cf:fc:05:1b:9d:70:b4:13:1a:90:a1:
0e:a9:09:2a:95:a7:01:95:21:0d:17:ce:e6:10:a7:
93:a3:a8:db:3a:b2:90:ee:e9:e5:d1:b6:34:d7:22:
78:a7:ec:34:32:47:09:91:ae:07:fd:67:89:b6:98:
35:55:e4:a8:37:0d:48:83:8f:d1:1e:95:aa:c8:18:
97:77:b9:76:42:ec:32:6e:e0:1f:8d:3c:71:1a:d0:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:F9:DA:A7:94:C1:F2:B3:E1:C5:0A:B0:D9:9D:91:02:DD:3D:3C
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/UdT52qeUwfKz4cUKsNmdkQLdPTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9c:fe:5e:b0:8f:b4:05:aa:03:75:af:a6:92:fa:56:9a:32:
3b:e6:67:7c:a8:80:3a:71:c1:93:85:3c:a4:27:53:8f:fd:ae:
0b:cd:60:81:38:36:21:69:12:ee:9c:ec:85:2e:bb:24:ec:50:
b4:44:ac:93:9e:5d:14:df:78:66:68:8f:7a:02:f9:53:ca:38:
6e:33:6b:ba:bd:e1:c8:3f:5f:d5:59:f0:94:0a:b4:22:da:4d:
a6:f6:a6:55:c8:86:d2:3e:4d:f3:48:4e:45:7a:ce:95:2b:fe:
f7:0f:08:1a:98:48:76:d2:ea:6c:ce:9d:b3:06:3a:7c:02:1d:
5d:b2:6e:ce:6c:e1:3e:40:9c:2d:1c:dc:a6:2d:c6:ff:60:4b:
73:32:74:60:66:27:cc:5a:64:c1:d2:72:8f:ed:2f:dd:06:c3:
f4:41:49:c6:3e:37:b3:f1:91:60:36:b4:f8:09:93:ff:b9:2f:
b1:84:53:83:d8:40:fd:e2:8e:4a:72:2b:21:e4:69:e2:e4:26:
c9:65:29:19:6e:b5:3a:a7:a2:77:01:c9:12:18:fb:db:ff:9b:
60:ea:23:98:6e:c9:df:0c:a8:a2:2e:ea:a6:8c:db:1d:0b:a1:
ee:ca:df:60:91:fd:cc:68:a9:11:2d:72:83:d0:92:75:05:44:
44:41:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:38 2025 by rpki-client