Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UkUV_UDWhaPShcA0K2XHBSSowz0.roa
File: UkUV_UDWhaPShcA0K2XHBSSowz0.roa (raw, json)
Hash identifier: 8wUN+MBRvuKjACeMlxQoeSlx+skuFldJFI+ejfqMFLs=
Subject key identifier: 52:45:15:FD:40:D6:85:A3:D2:85:C0:34:2B:65:C7:05:24:A8:C3:3D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B2CE52137978E022A3C6ABB0E63BB062D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UkUV_UDWhaPShcA0K2XHBSSowz0.roa
Signing time: Sat 14 Oct 2023 06:34:55 +0000
ROA not before: Sat 14 Oct 2023 06:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 37.128.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2c:e5:21:37:97:8e:02:2a:3c:6a:bb:0e:63:bb:06:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 14 06:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=524515fd40d685a3d285c0342b65c70524a8c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:47:55:17:79:36:5f:56:ea:0b:48:2d:e2:
04:c9:5f:ef:5b:f0:aa:87:12:0f:39:76:48:94:4b:
3f:c0:dc:c5:02:2b:89:4a:f6:cd:19:05:4c:14:6c:
14:e3:da:85:0a:da:2c:c6:09:0d:7d:1b:8a:1d:0f:
2b:43:fa:5c:d4:79:bf:69:51:a2:38:99:61:9e:60:
80:60:5f:e7:21:16:53:a5:72:d7:a8:4e:87:60:c7:
0f:c5:cd:ab:47:b7:15:22:50:a9:87:71:82:85:9b:
48:c1:5f:99:b9:52:6c:33:97:7c:53:5a:97:72:6f:
f7:83:95:08:df:1a:53:2e:d0:30:14:1a:92:22:45:
9e:44:c7:2d:4c:7e:21:37:0e:7e:ef:43:5b:7b:f8:
23:2b:a3:28:b1:32:a5:74:3c:52:05:e2:d2:a9:4b:
a0:b2:2c:55:f5:c0:5a:75:f2:b3:2c:17:ef:be:91:
00:2a:07:e3:f4:d7:32:63:46:c0:23:d2:44:12:71:
68:e6:5d:59:c5:43:c0:33:30:93:00:ad:37:55:a4:
3f:cc:30:7d:3f:22:98:e8:8d:1a:9d:15:7b:3b:a9:
13:5a:30:77:1e:3c:a4:1d:c2:26:bb:b1:88:4e:e3:
74:e8:fd:82:2b:24:83:3b:cf:f2:0e:aa:66:aa:b0:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:15:FD:40:D6:85:A3:D2:85:C0:34:2B:65:C7:05:24:A8:C3:3D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UkUV_UDWhaPShcA0K2XHBSSowz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:96:24:65:ba:5b:96:2b:90:07:d8:db:39:7e:2a:87:eb:6d:
e2:bb:91:9f:4a:10:1d:43:fc:47:bd:72:71:9e:2f:db:8a:69:
e2:6d:48:36:36:f1:e1:43:f2:21:3d:45:8f:28:c1:16:ad:aa:
65:14:87:b4:fb:51:09:e2:bd:fd:b8:b7:b3:cd:60:b7:74:d6:
b5:15:72:4d:28:7e:58:26:e2:15:96:1f:f3:24:a6:b2:67:5e:
e0:1a:d1:32:7a:73:78:90:5a:e7:14:4d:70:89:f8:0f:fd:2c:
99:b9:79:87:98:f1:37:50:2b:46:5c:4a:17:64:47:f1:c6:48:
33:31:62:67:12:b7:82:08:a0:c3:a5:4b:2e:f4:22:56:34:da:
df:03:42:2f:bf:da:65:e9:15:99:83:7c:8d:49:28:70:fb:e2:
3d:a6:b2:c1:b8:cd:d5:4c:9f:45:a9:cc:23:f9:5c:b1:a2:8a:
03:14:93:3a:0b:77:6c:a0:86:15:15:eb:58:a6:09:b2:9f:da:
e7:a0:47:6c:94:a9:16:91:57:3e:5c:8e:e5:36:1e:83:6c:76:
94:01:c1:01:38:e6:f4:03:f1:af:af:a2:54:14:c0:ae:4a:fb:
24:6f:0d:33:14:0b:89:94:1b:03:8f:e3:b9:5c:a7:e2:0a:26:
59:42:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:48 2025 by rpki-client