Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/UldmCz27cYerIApemk88ePpUE3c.roa
File: UldmCz27cYerIApemk88ePpUE3c.roa (raw, json)
Hash identifier: T2M8v+69rTsh+wLs/ADWtV0SAe4PIt9HUOJj2qt85Ws=
Subject key identifier: 52:57:66:0B:3D:BB:71:87:AB:20:0A:5E:9A:4F:3C:78:FA:54:13:77
Certificate issuer: /CN=dc639010197155333272e30d31e857e5840f7f07
Certificate serial: 01884E88A1C430147132AA58A96F56EA6B61
Authority key identifier: DC:63:90:10:19:71:55:33:32:72:E3:0D:31:E8:57:E5:84:0F:7F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GOQEBlxVTMycuMNMehX5YQPfwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/UldmCz27cYerIApemk88ePpUE3c.roa
Signing time: Wed 24 May 2023 16:12:37 +0000
ROA not before: Wed 24 May 2023 16:12:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 185.193.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:88:a1:c4:30:14:71:32:aa:58:a9:6f:56:ea:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc639010197155333272e30d31e857e5840f7f07
Validity
Not Before: May 24 16:12:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5257660b3dbb7187ab200a5e9a4f3c78fa541377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:6e:50:96:39:3b:b1:19:95:fb:84:cb:6b:
1f:fe:77:01:06:bb:fd:a1:3f:d3:e2:54:e7:39:7b:
55:f9:6c:10:4b:1d:28:7c:28:c0:cd:6e:61:59:6b:
2b:ee:c3:e0:92:f7:8d:b7:25:9b:4f:dc:0b:6e:ac:
05:ca:dd:e0:4f:47:3b:38:16:dd:24:7a:c3:8d:f2:
e6:31:ae:00:5d:d4:ba:80:86:c1:0c:c5:c8:41:ff:
21:dd:62:6f:95:e8:3e:bf:25:81:dd:7d:c0:8d:70:
71:8a:bc:ec:17:f8:58:10:b4:53:12:a0:bf:08:98:
0a:88:cb:ca:e3:b1:b4:2f:af:15:a0:48:ff:fe:b5:
87:81:54:50:ca:05:25:80:5b:c3:4d:df:2e:3e:f2:
7d:60:d7:20:22:0f:02:0e:92:dc:16:0f:d6:f7:50:
d7:0a:4a:54:95:1d:17:72:ab:4a:fd:e9:61:c2:53:
09:37:a3:e4:23:61:8f:7f:46:b3:ea:01:d5:fc:64:
77:b8:26:20:ba:73:35:1d:dc:44:4e:95:bf:bb:64:
c4:11:54:c4:cf:21:7e:0a:64:ee:eb:82:40:86:c6:
bd:1c:5c:df:18:dc:f3:d8:fa:f1:52:35:4e:17:6b:
86:40:bf:5c:13:e7:54:0b:d1:05:f0:33:70:ea:f9:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:66:0B:3D:BB:71:87:AB:20:0A:5E:9A:4F:3C:78:FA:54:13:77
X509v3 Authority Key Identifier:
keyid:DC:63:90:10:19:71:55:33:32:72:E3:0D:31:E8:57:E5:84:0F:7F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GOQEBlxVTMycuMNMehX5YQPfwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/UldmCz27cYerIApemk88ePpUE3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bb:57:96:3c:bc:03:91:ad:93:d7:0d:7e:fd:0d:45:6b:1f:
d3:01:ab:3f:55:e3:26:e9:6a:5a:76:71:b3:b7:2c:0b:23:04:
c8:e0:a4:6f:b7:99:4c:75:b8:c4:48:a7:cb:93:1f:b9:52:b2:
93:5e:dc:08:0f:8b:af:a8:6a:21:ff:e1:75:53:60:bc:7b:ae:
ce:d5:02:1c:57:31:81:de:7b:e0:a1:d7:47:e8:d8:b0:1a:16:
21:07:1f:91:9f:c1:6a:3f:20:27:db:7a:38:33:0c:8d:65:d8:
38:eb:0c:fe:b9:fc:61:b0:a4:7c:73:e7:eb:87:d5:84:44:55:
e1:7d:79:f8:14:78:53:91:98:0b:d0:5c:32:ff:14:3a:73:4f:
43:d7:5e:5a:c9:35:e3:74:23:43:56:48:eb:f5:1f:88:14:37:
dd:8e:0b:92:84:8d:22:37:bc:66:f8:a5:bd:23:16:1e:59:cc:
f4:e1:7d:e0:61:fa:c7:ea:79:51:53:d3:aa:e7:a2:64:3d:6d:
88:7f:5b:2d:da:74:b5:65:ac:eb:93:15:e8:f9:f6:c0:89:7f:
e6:a4:48:eb:f3:2d:36:fc:6f:3d:d8:31:e9:91:c2:05:67:83:
57:a2:fa:40:0b:f6:e2:7f:9a:d6:54:89:56:df:25:8d:35:fc:
ac:f3:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:11 2025 by rpki-client