Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UtHne2n_rWlfpzVjwWGxebo7PWA.roa
File: UtHne2n_rWlfpzVjwWGxebo7PWA.roa (raw, json)
Hash identifier: 7HE/5LZY/Nqr8bNJIvWHrRsZFj2cyfadHFzPxpWQS00=
Subject key identifier: 52:D1:E7:7B:69:FF:AD:69:5F:A7:35:63:C1:61:B1:79:BA:3B:3D:60
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2E55DDE8670FE965EAD7170E39E8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UtHne2n_rWlfpzVjwWGxebo7PWA.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56771
IP address blocks: 194.102.56.0/24 maxlen: 24
217.156.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:55:dd:e8:67:0f:e9:65:ea:d7:17:0e:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52d1e77b69ffad695fa73563c161b179ba3b3d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:62:0f:ca:6e:de:5f:84:2e:61:2b:63:34:
e2:45:a3:67:6f:e0:b7:0b:9a:be:30:b0:28:c5:05:
4c:d5:dc:f5:2a:18:82:31:c0:69:67:d5:62:02:a5:
38:5d:58:23:b6:af:cf:49:20:f8:ed:45:8d:3d:04:
df:cd:d5:5e:03:0f:09:59:ca:77:fa:66:e9:fa:40:
28:cf:67:16:d8:8f:7d:a4:0f:5d:90:d9:98:d5:be:
84:21:77:d7:53:8d:67:1c:3c:2c:f7:53:07:66:84:
21:75:60:c0:35:df:64:1c:9b:a8:e7:a5:6c:4a:54:
9d:cb:83:0e:c8:6a:a9:ec:b8:c9:28:b5:14:a3:e8:
e5:40:99:a6:08:a1:20:aa:c5:95:aa:6a:40:16:49:
e8:89:59:fe:14:d6:41:ae:d6:e4:c3:57:0c:d7:10:
06:0d:35:24:78:c0:5e:df:9a:13:b0:a0:a6:e6:de:
47:8a:a1:47:e2:c5:9b:fe:27:5a:58:14:cb:1d:60:
5e:30:25:7a:f4:35:98:6c:2d:09:74:fc:de:46:5a:
30:cc:73:52:2a:e5:22:64:85:76:0f:bd:67:3d:7e:
78:11:4f:28:db:63:ae:4f:c1:34:16:bf:d8:3a:6c:
94:ca:4b:26:9a:a9:ff:2e:81:ef:4a:f7:82:8e:67:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:E7:7B:69:FF:AD:69:5F:A7:35:63:C1:61:B1:79:BA:3B:3D:60
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UtHne2n_rWlfpzVjwWGxebo7PWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.56.0/24
217.156.33.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a4:02:02:fc:bd:e2:da:20:56:82:6e:20:dc:59:50:51:ed:
7d:07:c0:a0:ed:ae:31:ea:ed:42:5e:c9:35:b6:c8:ba:7a:4a:
13:e0:65:43:c9:af:01:b1:a6:c5:12:b1:03:59:fe:60:84:29:
78:e8:54:aa:af:55:e1:2a:df:84:9c:f9:c0:1a:3f:74:35:63:
74:e9:79:31:7f:47:86:5f:8e:7d:a8:4d:e5:d6:81:81:49:cf:
22:1a:65:0b:c9:d1:db:91:ef:94:9b:6e:37:67:43:eb:a7:67:
62:b9:91:44:41:54:58:3c:8e:b5:92:4e:a6:9b:a3:2e:c5:d3:
d8:08:01:a3:2a:9d:83:dd:98:80:3b:38:83:c8:9c:50:84:24:
f1:62:a7:f3:45:03:06:59:e2:41:71:59:fe:4f:28:3a:0b:79:
aa:56:be:66:8d:c9:35:71:e1:5a:bb:d7:d5:52:9d:a7:cc:69:
3e:a8:28:0a:57:c5:d1:b4:ef:ff:e1:4b:38:2e:14:f3:fb:64:
21:92:34:19:6a:c7:8e:94:9b:43:a3:c8:3d:a8:8a:58:62:94:
f2:15:f1:b1:f4:b2:c3:3d:67:40:ed:8a:16:58:ac:98:7f:7a:
24:c3:d2:3f:29:c4:6e:29:ea:0e:bc:c1:86:e7:cd:e1:24:b9:
d4:29:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:49 2025 by rpki-client