Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa
File: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (raw, json)
Hash identifier: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=
Subject key identifier: 53:10:9C:58:32:29:7D:C9:88:C4:5E:06:11:0A:9B:34:15:81:A9:B5
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B7B8230B6AFE2FBB5DB2F316C07FA
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11426
IP address blocks: 94.103.48.0/22 maxlen: 24
94.103.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7b:82:30:b6:af:e2:fb:b5:db:2f:31:6c:07:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53109c5832297dc988c45e06110a9b341581a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:1e:d8:ce:51:94:53:5f:7a:2d:ec:6a:2f:
1e:4f:4a:e1:e7:6d:45:04:15:5b:67:57:01:c3:45:
f8:45:d8:62:ad:81:b5:4e:80:e7:7f:f4:5e:2c:20:
f6:e7:80:6b:c0:3a:54:a8:44:7a:0a:ac:d0:8a:b1:
a3:a2:00:ff:ca:b7:90:45:f1:38:41:e4:68:98:ff:
f9:23:0b:13:1b:bd:1b:8c:36:df:52:f6:b0:53:79:
2d:55:ca:b3:12:6f:ec:6c:97:87:59:8d:4d:a1:66:
0b:27:84:e2:05:c6:b7:3c:2f:8c:41:70:e6:64:21:
5f:c3:eb:53:64:6a:41:e1:fd:39:58:ab:70:87:b5:
df:4e:b4:d9:d7:80:cd:36:57:d9:f6:7c:56:8d:82:
0b:d2:01:89:16:21:3d:76:48:96:8e:fc:54:e8:f6:
70:4b:87:b0:bd:75:08:ec:ff:24:e0:04:fb:b6:da:
11:20:91:f5:01:08:02:40:da:c3:c1:d0:cf:ec:ef:
67:cf:ab:39:83:9f:7e:7f:99:d0:da:2e:92:c9:04:
7b:e1:ac:dd:d7:19:67:dd:ca:42:a7:c4:8b:e9:1c:
ec:e5:2e:a8:20:1b:22:08:1b:09:1f:22:41:e7:f7:
c8:07:c8:fc:c1:66:64:16:40:bc:32:23:b0:eb:be:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:9C:58:32:29:7D:C9:88:C4:5E:06:11:0A:9B:34:15:81:A9:B5
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.48.0/21
Signature Algorithm: sha256WithRSAEncryption
71:d0:3d:14:f4:33:ab:5e:7c:b8:2a:4c:57:d8:56:88:7e:9a:
96:7c:cc:59:b6:1d:85:d9:c3:6e:02:74:e2:30:8b:26:3c:c5:
7c:19:4f:f7:76:07:89:aa:1e:41:d3:6a:08:bb:9a:3e:24:03:
d3:c4:02:99:a3:4e:07:ea:21:e0:8a:48:dd:25:c9:15:25:3b:
02:ca:34:44:f9:c6:c6:be:41:fa:cb:22:2d:30:cc:7d:da:d4:
9e:1f:d8:d2:c7:7f:65:eb:66:bd:2a:ec:f9:7b:e0:de:4e:1e:
ef:15:25:3c:b4:65:c4:4b:c8:bf:72:11:50:5e:6a:d0:7d:fe:
86:a9:72:fa:ed:73:2d:0b:88:87:67:e0:bd:3b:6e:87:93:4c:
1e:81:13:26:1c:eb:6d:73:c4:86:b5:28:27:2c:cb:f4:4a:aa:
7b:a8:9a:03:99:03:ee:97:8b:df:c1:61:26:53:68:55:99:19:
ff:92:00:4e:64:7e:95:77:0d:14:d9:c2:c6:34:5f:b1:d1:78:
f6:30:1b:94:e7:47:0e:c3:70:f1:18:18:d0:0b:aa:c7:ab:20:
c2:37:38:29:73:2d:5f:f8:4a:9a:e6:82:17:47:d2:b1:39:89:
7f:04:b8:83:3a:0e:d1:23:db:ec:71:38:1b:12:4c:15:30:ba:
e5:14:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:36:51 2025 by rpki-client