Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UaRhCNCigw76uoI590B9usIckwc.roa
File: UaRhCNCigw76uoI590B9usIckwc.roa (raw, json)
Hash identifier: NFIhcA8ftfcyfQTtOyqSKp2UkQt3gwGCG6kx+uJAPvA=
Subject key identifier: 51:A4:61:08:D0:A2:83:0E:FA:BA:82:39:F7:40:7D:BA:C2:1C:93:07
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451533CFC9A464BB82E15BE630629E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UaRhCNCigw76uoI590B9usIckwc.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42260
IP address blocks: 5.1.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:15:33:cf:c9:a4:64:bb:82:e1:5b:e6:30:62:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a46108d0a2830efaba8239f7407dbac21c9307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:fc:50:2d:9e:92:35:1b:c0:07:0c:5c:be:
fe:fe:1a:63:21:45:3b:b2:7c:b7:6c:95:86:89:1f:
2f:ed:25:76:4f:ce:ac:63:c1:05:22:b7:45:0d:8e:
54:17:49:64:c7:5a:b7:b2:2b:99:32:7f:55:0a:a2:
e6:91:e1:49:10:39:22:4d:24:ef:80:4c:27:6b:cf:
e7:31:d3:da:a5:a6:f2:4b:0e:9a:c2:7d:05:69:00:
e5:b6:0e:a4:52:53:20:84:61:24:d7:09:a4:c2:04:
3c:d1:82:1a:8c:6a:a7:c1:76:5f:9a:18:81:52:4e:
bb:69:a4:2a:92:b3:0f:af:59:80:fb:91:13:11:22:
4c:1c:4f:cf:2d:2f:ed:e9:c2:b6:c7:3e:67:0d:a5:
52:ba:e7:d5:78:6c:65:8f:d9:ec:3a:78:87:14:d4:
30:2e:dd:29:15:6a:75:ca:85:08:ce:b2:9d:51:2e:
cf:9a:3d:ad:a2:6b:c0:46:49:76:02:74:b5:32:d4:
ec:ca:a6:94:d5:41:cd:e3:d3:ec:96:da:c1:45:03:
92:e0:44:f2:c1:3e:bb:7f:b7:0b:ba:e4:3b:7a:44:
04:81:8c:f3:d6:83:76:6a:ab:f7:58:de:ea:20:a6:
75:c9:c1:e7:11:5a:aa:30:44:70:51:72:96:d7:3b:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:61:08:D0:A2:83:0E:FA:BA:82:39:F7:40:7D:BA:C2:1C:93:07
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UaRhCNCigw76uoI590B9usIckwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.47.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9f:30:33:65:11:92:5f:09:bc:29:c7:ef:c4:82:c1:e8:4a:
c4:e3:e3:de:3d:17:49:2d:af:25:ce:da:9e:15:b4:f8:20:dd:
79:8b:0f:3a:d3:d2:36:e9:7a:89:e7:27:06:13:fe:4c:46:4e:
9c:26:23:37:ee:c9:dd:17:a3:ad:2c:2a:00:85:b2:6b:93:03:
77:a7:c6:28:40:20:03:96:f1:02:07:ef:c1:6d:9f:5e:f3:21:
9c:ff:df:8d:56:70:f7:f6:93:14:4d:7f:fc:dd:c8:b8:41:df:
56:bd:44:bb:b1:ec:a2:aa:c8:51:7c:2b:c9:dc:11:b0:e1:24:
09:a5:8e:d4:70:71:fd:37:05:74:a1:6a:77:62:af:ee:28:44:
d5:7c:e1:fd:67:1d:65:9c:ab:e1:c7:d7:95:63:98:fd:0b:d8:
57:73:79:dc:19:cf:d3:50:42:6f:8f:90:ed:b2:d2:6c:da:7c:
13:8b:ba:80:e6:ae:fa:fc:b9:83:b2:71:21:6f:1a:4a:8b:32:
53:95:21:63:7c:b3:89:b3:6f:00:af:13:9e:fb:eb:e9:4a:73:
2c:05:c8:52:f6:43:16:97:ed:5c:eb:98:43:a6:d1:82:a4:f1:
f3:03:ae:ff:76:01:60:59:74:ff:ae:21:b1:a0:c2:74:52:8d:
a2:0a:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:23:52 2025 by rpki-client