Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uU6_spyclt-gPGAR_pDEtOEfbeA.roa
File: uU6_spyclt-gPGAR_pDEtOEfbeA.roa (raw, json)
Hash identifier: Y95kJfvuQIsH0NdF8h8bU0HbKTRpmXPqs3JsGqZjBAc=
Subject key identifier: B9:4E:BF:B2:9C:9C:96:DF:A0:3C:60:11:FE:90:C4:B4:E1:1F:6D:E0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50CD4FAB
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uU6_spyclt-gPGAR_pDEtOEfbeA.roa
Signing time: Sat 01 Jan 2022 16:01:45 +0000
ROA not before: Sat 01 Jan 2022 16:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24949
IP address blocks: 194.209.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355632555 (0x50cd4fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b94ebfb29c9c96dfa03c6011fe90c4b4e11f6de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:63:87:66:c8:ce:b7:97:e3:78:76:07:f1:
c2:6f:9f:09:12:6b:a6:12:8c:7a:d6:85:6c:3f:c7:
6a:85:26:a4:db:57:59:02:39:f2:f7:db:59:28:1b:
77:5f:c2:4c:0c:a9:a0:1e:a2:52:8f:6f:be:d7:4d:
f5:af:48:f6:f2:af:64:c4:d4:12:80:95:33:ce:9d:
6d:60:f4:af:95:43:3d:db:55:e6:29:db:e4:cc:67:
e0:51:0b:73:a7:8c:28:70:95:69:c1:80:91:17:85:
6b:51:be:a5:97:bd:3a:b6:6a:8b:f3:48:59:d7:b1:
c6:69:86:82:97:37:2a:e9:e3:3a:91:4f:c4:3d:26:
5f:ed:3e:14:d1:02:08:a2:7e:a2:31:41:74:92:cd:
08:d0:66:2d:ee:eb:9e:9a:08:34:57:c4:ff:0e:0a:
6d:ae:f9:48:02:51:87:85:a6:d1:4d:a8:08:9a:04:
5a:49:74:f1:2f:89:d6:ff:7f:ba:08:6e:be:21:71:
33:ed:3c:33:a5:60:9d:e3:df:f3:79:4b:2d:57:23:
8b:ca:5f:37:30:be:92:15:d6:b1:49:e9:1a:9b:92:
c6:45:b5:b2:0a:a3:15:e6:30:77:33:43:f1:4b:bd:
06:71:c2:60:78:ad:11:f7:41:77:ec:b0:66:ee:6f:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:BF:B2:9C:9C:96:DF:A0:3C:60:11:FE:90:C4:B4:E1:1F:6D:E0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uU6_spyclt-gPGAR_pDEtOEfbeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2f:72:6e:0c:1e:e3:e8:6f:e3:c2:f8:4d:1b:8b:4f:89:1e:
ef:a2:72:8e:d7:4c:11:80:4c:ae:3d:72:bb:e8:a3:99:a2:0a:
f8:b5:3e:3d:71:11:ee:a3:bd:d1:f6:e4:d3:d6:fa:42:1f:72:
2b:ed:09:77:1b:e8:9e:20:88:ee:7d:13:3e:df:6f:1e:68:98:
f7:9e:44:16:6e:27:f9:32:45:6e:b4:b1:82:08:53:4a:63:df:
99:41:cc:59:10:09:4e:32:0c:07:0a:75:7f:95:76:16:4c:8a:
bf:2d:b0:55:c5:d3:0c:8f:bf:a1:2a:1e:14:6a:4e:20:19:51:
7e:64:a7:8a:3d:db:7f:29:87:65:bd:84:51:fe:20:21:f8:fd:
a3:1d:aa:58:28:34:1e:56:66:c5:a4:21:be:1f:08:2d:4c:04:
31:f5:d9:12:db:d0:67:f0:25:49:6c:06:c6:d9:b4:8d:4e:34:
1f:e1:20:91:3c:8a:c7:fb:48:8a:1d:fa:5f:b5:f5:25:ce:dd:
6a:b7:19:e4:63:2a:45:5e:3c:67:93:4c:2f:b8:8a:85:55:69:
1e:00:8d:43:13:e3:40:b0:1a:24:7f:b5:5d:e8:34:de:53:00:
ec:33:b0:9f:a7:93:19:8a:c9:35:45:40:27:e9:22:53:e5:a9:
84:e7:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:06 2025 by rpki-client