Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/A1UUEmWN8hJvE_QDz6Phuppzgos.roa
File: A1UUEmWN8hJvE_QDz6Phuppzgos.roa (raw, json)
Hash identifier: 71wzKo8KkCCIqHry8cTGiYr86Ds73uxSzDKBszKZYsI=
Subject key identifier: 03:55:14:12:65:8D:F2:12:6F:13:F4:03:CF:A3:E1:BA:9A:73:82:8B
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 0194221FA66C6F8B59B9E67773F5037D354B
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/A1UUEmWN8hJvE_QDz6Phuppzgos.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 193.105.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a6:6c:6f:8b:59:b9:e6:77:73:f5:03:7d:35:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03551412658df2126f13f403cfa3e1ba9a73828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:65:ba:cb:54:55:36:1c:20:11:52:11:75:
2a:d0:12:a2:1a:b0:10:df:77:d7:b2:25:0f:3e:21:
21:d8:44:8c:ed:b4:f7:31:6e:bf:e8:29:a8:a2:d4:
c9:44:ca:8d:b7:be:a9:d2:0d:58:3a:6d:b6:fd:a9:
18:ba:1a:28:f4:34:93:9c:00:6b:61:2a:8f:95:24:
d1:96:40:d3:e3:99:46:b8:70:ea:9e:00:50:7f:10:
54:09:59:61:bb:22:2c:01:c6:88:19:d1:a0:b5:39:
29:58:fd:d4:fa:a8:22:f1:96:a9:d4:69:bf:8f:5a:
06:8a:6b:af:e8:29:c0:3d:d1:a2:d5:b2:28:f7:54:
41:04:44:00:c3:e6:9f:4f:4d:b9:d1:98:47:09:1e:
81:1f:64:4a:0e:de:98:19:10:1c:58:63:b9:62:09:
34:69:5f:9e:96:86:78:b7:0f:8c:8f:1a:e1:ed:bd:
2c:ac:c1:f6:ef:b7:ec:f3:6a:74:1c:ea:5a:29:8a:
16:8b:76:c0:6f:64:33:5b:d2:89:ec:bb:63:65:8b:
1a:e3:64:82:62:a0:55:03:f3:cb:92:52:5e:3d:98:
41:08:82:d7:94:fe:f3:f8:6c:c3:23:e1:62:c8:84:
f9:91:c3:74:19:12:e5:86:72:2b:60:90:e6:0f:07:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:14:12:65:8D:F2:12:6F:13:F4:03:CF:A3:E1:BA:9A:73:82:8B
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/A1UUEmWN8hJvE_QDz6Phuppzgos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5c:b6:4e:e4:b4:2f:5d:f2:5c:7f:01:55:df:02:e6:a4:79:
66:7e:a0:e0:10:7d:ad:9e:38:af:b2:78:18:3e:63:12:66:b3:
ad:9d:ff:f2:03:97:c8:7e:d4:ac:01:a3:d4:2f:d0:77:60:57:
bd:2c:69:a7:86:c1:34:00:fb:62:da:36:a4:48:f8:34:83:ea:
7d:50:09:30:18:6b:44:c9:c7:30:ae:04:12:f7:5d:5c:77:c6:
4b:d7:bd:6f:b8:e3:07:98:6f:51:07:4f:ff:2c:8e:11:f3:d9:
41:e5:fe:72:e2:14:de:bc:ce:19:25:38:e9:0a:d4:ee:05:af:
15:cc:59:5e:10:1e:be:f2:7d:a0:79:58:ef:c9:d1:bc:37:2c:
8b:ab:18:87:1b:f6:c2:2e:b8:a5:d6:33:c8:f0:39:19:40:dc:
59:81:ef:8a:8c:af:a3:fe:9d:e7:42:21:40:88:8b:ff:e4:80:
73:bd:c1:f5:cf:75:a0:ea:46:3c:82:02:12:ba:d5:92:15:34:
0e:0a:35:9e:e1:25:f2:41:93:75:15:5a:b4:03:71:c3:79:2e:
bb:fa:2d:a9:6d:dc:c6:0b:28:41:d9:8c:f7:82:5b:51:04:fd:
7c:f8:ce:a2:73:20:60:80:0a:06:8b:5e:e3:bc:ff:8e:0a:fc:
55:9f:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:21:36 2025 by rpki-client