Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/UpxBSWugieKNTh9apeAkjKNDuVI.roa
File: UpxBSWugieKNTh9apeAkjKNDuVI.roa (raw, json)
Hash identifier: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=
Subject key identifier: 52:9C:41:49:6B:A0:89:E2:8D:4E:1F:5A:A5:E0:24:8C:A3:43:B9:52
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 019420D5CB9EBB26E3FD5816A6AC0AE7C9ED
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/UpxBSWugieKNTh9apeAkjKNDuVI.roa
Signing time: Wed 01 Jan 2025 07:47:49 +0000
ROA not before: Wed 01 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 195.190.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:9e:bb:26:e3:fd:58:16:a6:ac:0a:e7:c9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=529c41496ba089e28d4e1f5aa5e0248ca343b952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:78:1c:ad:be:b4:49:ca:96:f2:6f:af:e3:52:
69:30:96:73:6d:62:c2:da:94:11:69:df:cc:25:bc:
80:a4:2a:2c:d0:15:f6:47:f0:bf:e8:e0:71:53:75:
48:cd:0e:23:e7:e8:13:40:ac:73:37:3f:69:d4:b0:
57:08:5d:ec:33:9b:69:30:26:0f:a2:cb:24:b4:4f:
36:97:ff:9c:ab:8d:d2:0f:8d:1e:18:8e:7b:6d:51:
ed:ce:ce:b9:83:77:f9:01:53:ab:f9:2d:7f:f9:c0:
51:6a:46:70:6e:97:ed:d9:0f:81:e3:e1:2c:77:bf:
4c:32:2f:02:c9:d8:05:d6:a1:26:2b:be:d0:5f:cb:
11:da:f0:7a:0d:36:ba:d2:35:b7:da:35:a2:4e:2d:
f0:91:6d:92:35:0c:f0:69:df:27:46:44:5c:a0:74:
93:59:fd:c2:1e:22:04:71:9f:54:c5:e0:43:d7:da:
40:4a:1c:1c:8a:1b:e8:a9:f2:62:56:85:cf:74:d7:
e2:cd:57:e0:a5:0f:6f:9e:f5:91:f4:01:8f:73:79:
6b:af:97:f7:1f:c2:40:b1:b8:89:2c:7e:e6:0e:3f:
d1:66:08:44:f6:e1:5b:af:af:c3:58:4c:ec:2a:c8:
14:d9:dc:2d:3a:c2:74:31:6f:52:53:f4:4f:27:3f:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:41:49:6B:A0:89:E2:8D:4E:1F:5A:A5:E0:24:8C:A3:43:B9:52
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/UpxBSWugieKNTh9apeAkjKNDuVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.131.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5e:d1:b8:58:8e:7d:bb:d6:48:f0:a7:9a:90:61:b2:3b:e5:
a7:d4:f4:64:4b:e4:03:33:e5:7c:f9:d1:72:88:c8:5b:1d:3e:
36:dd:19:92:2f:c4:6c:2c:d2:8b:b7:c7:45:1c:6d:20:0e:dd:
c3:3c:99:d3:49:22:34:e0:74:43:f8:3a:03:04:07:5c:f7:27:
35:7d:9f:9f:8a:bd:97:b1:f5:8c:29:ec:73:48:f0:4b:47:67:
30:6d:9c:c7:8e:3f:59:11:43:53:c7:5a:c9:06:94:93:74:c6:
0d:96:4c:c6:78:32:9f:67:d0:a9:be:78:22:dd:2c:89:43:16:
4a:65:aa:cc:bc:52:d6:4f:72:a2:d1:d7:03:23:e9:d0:76:c6:
0e:db:08:fc:e0:86:2e:61:30:03:82:57:97:cb:62:85:b8:a7:
33:c9:3c:47:b1:a4:68:d6:a3:fd:57:87:a8:ba:d6:3f:cc:f2:
80:6f:67:b4:32:3f:ad:a9:99:ea:29:08:ab:3c:99:77:13:4f:
57:84:9d:70:9e:49:cf:a1:a2:be:cd:6a:5e:6c:79:28:21:e6:
41:ab:18:7b:48:1e:c3:97:a5:da:cd:85:0d:5d:92:5d:8f:73:
d1:0b:57:c7:90:e5:b9:84:ff:f1:69:79:b2:05:e4:38:58:e3:
3d:f8:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:50 2025 by rpki-client