Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UL_XqoqGTTWGEVhImq5X-9zOVrE.roa
File: UL_XqoqGTTWGEVhImq5X-9zOVrE.roa (raw, json)
Hash identifier: g+ulsD4HEDP8q2GNuKa/nIFiaIn0ZbF6fYEGT+Sdri0=
Subject key identifier: 50:BF:D7:AA:8A:86:4D:35:86:11:58:48:9A:AE:57:FB:DC:CE:56:B1
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FEEE93599CA03D7559B72EE359951
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UL_XqoqGTTWGEVhImq5X-9zOVrE.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 43.240.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ee:e9:35:99:ca:03:d7:55:9b:72:ee:35:99:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50bfd7aa8a864d35861158489aae57fbdcce56b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:8a:89:86:95:f2:cf:97:52:99:1d:35:83:
17:a9:1c:a2:1e:c2:1c:4d:b7:21:48:1a:6f:68:a8:
ca:f7:6e:b6:53:13:59:01:b6:f2:cf:09:01:1e:6e:
54:4b:76:de:a6:ed:56:47:f1:90:84:02:08:15:7a:
d1:2f:2f:b8:99:b3:0e:0b:86:5f:88:3b:55:1f:7c:
e3:27:29:8d:a6:98:c6:8e:2f:0f:fa:76:ae:e2:bc:
ae:19:97:a9:da:ff:b2:66:56:ee:ca:74:70:97:ab:
e0:9e:3a:71:c5:d8:28:da:52:9f:92:3d:86:bd:e6:
cc:ee:39:d9:fe:87:88:88:e9:e6:a0:dd:ed:32:17:
d0:af:1e:fc:83:95:da:cf:d0:82:fd:67:19:8b:f1:
59:82:e2:87:b9:df:41:e6:b0:f7:68:64:69:62:9f:
cd:6f:cc:5a:cd:b5:d4:ad:72:64:6d:1c:ca:78:d6:
dc:bb:3f:76:ba:81:f9:cf:9a:6c:a3:39:ac:94:eb:
8d:e9:a2:74:14:85:ef:98:41:90:cd:d6:4b:50:97:
11:eb:36:96:95:87:4f:e2:bc:bc:eb:dc:1c:da:01:
0f:25:e7:c0:b9:bd:85:a6:70:2b:a4:fd:72:0d:a0:
31:04:e2:28:99:97:28:0c:75:56:9d:73:c3:30:a0:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BF:D7:AA:8A:86:4D:35:86:11:58:48:9A:AE:57:FB:DC:CE:56:B1
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UL_XqoqGTTWGEVhImq5X-9zOVrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
94:93:9d:23:e2:84:25:28:c7:b3:f1:af:9f:ba:3d:3d:35:ae:
8c:fe:e9:9a:c3:cc:ee:e0:6b:f0:61:c2:3b:cb:0a:af:27:5a:
dd:f8:99:6d:15:94:40:15:2f:cd:9a:59:96:cb:b9:f1:ca:8d:
c2:32:96:49:77:2f:fb:22:d2:0a:28:ac:46:88:2c:80:b6:f2:
6e:72:b4:0a:44:ea:6a:c6:cb:30:d9:96:da:f6:14:07:c2:be:
68:5d:9e:60:8d:04:af:a6:37:cd:44:88:64:68:9c:30:83:6e:
15:e4:b0:09:52:c7:ef:f2:f4:89:a6:74:4c:81:fa:91:2a:8d:
35:8a:7e:a4:74:82:0b:12:e1:2e:b4:97:aa:da:72:28:fd:c1:
d2:14:60:d4:62:f3:88:39:78:08:ad:32:96:1d:1a:82:9d:76:
8d:b2:65:df:6c:96:3b:5a:54:b3:3d:1a:a9:6f:14:42:cf:bf:
91:f8:b2:d2:54:78:95:04:ba:ce:ca:80:15:34:b2:8f:22:e8:
14:12:76:67:55:6a:2c:0a:9e:fb:4c:ad:09:af:07:36:41:28:
aa:cb:6e:f3:ca:70:7b:01:9b:9f:fe:3f:8e:ff:cb:a0:ea:68:
93:48:a7:b0:f1:36:60:e0:e3:a9:07:cc:ce:84:ce:fd:36:3f:
04:bc:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:37 2025 by rpki-client