Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/UKgpB89XWxDrwt2wvJCexcV0Vro.roa
File: UKgpB89XWxDrwt2wvJCexcV0Vro.roa (raw, json)
Hash identifier: EhxlZRaFnaHWTa4h+4XITRoT+tWzmXi1bhPwvQrMspw=
Subject key identifier: 50:A8:29:07:CF:57:5B:10:EB:C2:DD:B0:BC:90:9E:C5:C5:74:56:BA
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 019427B59868E7092E6ED2ACB3DF929E03F9
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/UKgpB89XWxDrwt2wvJCexcV0Vro.roa
Signing time: Thu 02 Jan 2025 15:49:59 +0000
ROA not before: Thu 02 Jan 2025 15:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50979
IP address blocks: 195.20.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:98:68:e7:09:2e:6e:d2:ac:b3:df:92:9e:03:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Jan 2 15:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50a82907cf575b10ebc2ddb0bc909ec5c57456ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:fe:a0:11:47:3f:44:e9:1f:99:e8:d2:11:
1d:79:50:d1:17:f9:de:77:8b:0f:e0:a3:3f:f2:1b:
c3:b8:76:a6:34:ea:74:b2:27:eb:3d:17:05:37:34:
34:bd:93:a4:8a:f1:a9:75:bd:c6:f5:ce:9a:17:9c:
4c:16:23:c5:71:e9:28:5d:81:fc:fa:96:6c:44:73:
3d:f1:bf:3a:1b:3c:ba:83:b1:74:b3:d4:bc:de:11:
08:dc:70:c0:6f:f4:53:c1:41:a4:c2:7e:6d:3d:35:
fb:3d:b5:a8:67:83:a1:55:72:8a:6a:2b:8a:b2:dc:
cd:cf:71:49:84:0b:d1:62:46:99:90:c9:b9:b6:e8:
06:ce:13:93:48:3d:23:db:62:5c:5c:e4:9e:ae:16:
f4:d4:2d:3d:07:ce:32:aa:a1:fb:2a:0d:84:cb:d7:
b9:2f:ad:10:31:fd:5d:18:c8:be:e1:1e:33:8c:b4:
03:36:10:a7:c8:fa:2a:2d:7d:df:a3:3e:d5:c4:a9:
f7:02:16:2c:e4:f8:57:c7:d1:72:b4:df:97:39:2c:
ba:bf:b4:f8:fa:cf:ff:d7:50:67:53:18:91:8f:86:
94:21:70:43:cd:b6:97:32:db:b9:78:46:59:d0:d7:
8f:a8:a0:b5:91:1c:d8:d7:31:fb:04:71:e5:14:aa:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:29:07:CF:57:5B:10:EB:C2:DD:B0:BC:90:9E:C5:C5:74:56:BA
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/UKgpB89XWxDrwt2wvJCexcV0Vro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.208.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a6:19:8a:31:08:c5:19:62:fb:f7:02:af:28:b2:94:bf:bf:
c2:a0:65:ab:23:bf:24:b1:1c:ee:6c:b5:94:5c:c6:c6:ef:fd:
a0:6a:1f:3a:45:fe:c1:87:c4:d5:28:ac:60:ba:2d:90:3f:00:
f6:a3:49:36:ed:7a:3b:9f:e5:07:40:53:df:a4:ab:89:9f:e9:
d2:74:25:14:b6:76:96:c3:58:68:c8:b9:53:de:e8:4e:9d:fb:
41:7d:4f:5c:21:ab:55:ac:07:ef:cc:9f:ec:86:6a:13:82:a3:
31:70:10:01:7c:06:06:be:15:61:bc:70:16:1d:16:0f:a5:66:
91:73:cb:eb:f7:e9:b0:a6:1e:33:bd:7b:a0:b1:1e:52:4b:39:
27:95:86:7c:69:18:f0:4c:02:76:14:58:8c:63:4c:06:d7:bb:
95:87:01:fe:3b:f5:73:ae:ca:45:a2:c2:d8:38:e8:28:43:12:
81:71:2e:02:01:4b:2c:73:89:a4:f2:02:10:17:15:ce:bf:d3:
de:21:e6:8f:5d:85:1c:47:ea:37:e7:8d:a9:2a:a9:64:b0:27:
2b:78:f8:f9:ef:28:c0:bb:2e:8f:85:3b:e4:12:2a:2e:2e:9e:
b3:60:c4:75:ff:14:4a:6e:f0:8c:7a:86:24:65:a1:d0:22:77:
3e:5c:cf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:43 2025 by rpki-client