Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UWV4l3kE-brWJX9uRkRZO53lO9o.roa
File: UWV4l3kE-brWJX9uRkRZO53lO9o.roa (raw, json)
Hash identifier: cAU+zNWLTTRLrd7RdQn+sxXYtefOYpWRpuIgwXau7iA=
Subject key identifier: 51:65:78:97:79:04:F9:BA:D6:25:7F:6E:46:44:59:3B:9D:E5:3B:DA
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019427B693C159D6047F8AF732DDB7792B89
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UWV4l3kE-brWJX9uRkRZO53lO9o.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:93:c1:59:d6:04:7f:8a:f7:32:dd:b7:79:2b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516578977904f9bad6257f6e4644593b9de53bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:c0:e6:ba:dd:c2:aa:68:93:43:09:67:83:
d9:0c:51:d2:01:a4:d4:16:a5:1e:cb:4a:3a:b5:89:
d4:0d:1a:90:8f:db:49:18:43:0e:25:30:3f:e9:cb:
0e:65:8c:c3:d7:81:6d:eb:20:20:ea:f4:ff:f4:fc:
81:3e:e8:b1:e5:5c:1f:13:56:48:77:d0:b6:50:92:
22:53:3c:c4:4b:d7:71:e2:c8:4e:25:34:48:4b:a9:
50:3d:10:27:c3:b9:07:48:97:ca:31:dd:99:4b:38:
ce:4d:37:c3:26:38:22:8f:d0:22:0f:0b:00:b1:d5:
1e:ca:db:df:fc:68:a6:47:47:fb:ea:a4:8b:63:9e:
86:4f:a3:33:00:79:53:69:1d:5e:79:1c:2b:97:4d:
90:47:3f:c8:db:71:7e:ca:ec:8e:60:86:d4:34:25:
00:5b:76:ec:5f:f4:11:df:fc:6b:bc:2b:31:ea:ed:
9c:b9:0d:1a:33:01:f7:81:04:f8:f1:d0:39:9a:60:
55:ff:0d:de:c7:da:bd:ba:62:fa:48:62:d7:10:f1:
69:ee:39:ae:c9:66:59:95:44:b2:e7:6a:f2:33:45:
96:32:ee:49:90:83:22:50:33:de:f7:5e:c6:c2:85:
7f:d6:31:a7:16:18:4f:08:c4:0f:19:f3:6d:b8:a1:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:78:97:79:04:F9:BA:D6:25:7F:6E:46:44:59:3B:9D:E5:3B:DA
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/UWV4l3kE-brWJX9uRkRZO53lO9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
24:59:a9:2a:5b:4d:b8:0d:c5:37:44:94:91:91:8a:79:aa:4d:
80:99:d6:fc:9b:b3:10:39:f6:44:2f:c2:ee:c2:5d:e2:ac:ed:
ba:93:ee:ad:56:20:29:2a:21:c9:ab:46:a8:20:03:fa:f4:d2:
f3:ff:bd:89:30:97:ee:42:68:06:0f:db:cc:5b:86:69:6d:e9:
8f:8b:b8:ba:0c:1d:5c:ed:65:8e:ff:0f:49:9f:06:66:d1:f8:
67:3f:52:6c:39:30:63:6a:33:5a:8a:cc:73:21:b5:a0:bf:67:
79:81:ff:ec:1a:7b:71:9f:8d:52:41:d8:68:b3:9a:80:38:65:
a6:20:fa:d7:fc:d7:cb:ac:64:bd:4c:98:92:3e:a8:d0:1b:9b:
e7:21:cf:c5:6f:fe:36:c8:a5:5e:13:0a:47:e8:77:e6:87:a6:
f7:5d:fb:5e:6c:d4:fb:8a:4b:5b:bd:64:df:6a:a1:54:84:db:
ac:7f:bc:9e:bf:f8:87:77:ac:2f:bb:e0:35:ae:04:e8:ce:75:
8f:03:92:9d:5f:5a:85:77:b0:15:8b:23:8b:b5:79:95:38:a6:
b9:9c:fc:7c:33:52:ab:b8:b7:79:8e:69:ac:d2:fb:8b:70:dd:
30:ab:89:34:b4:85:c9:91:e2:de:35:67:e2:52:91:d0:44:43:
2d:28:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:03:48 2025 by rpki-client