Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uPnBZV1MIbuUK3xiFYlBb_XZuN4.roa
File: uPnBZV1MIbuUK3xiFYlBb_XZuN4.roa (raw, json)
Hash identifier: XXtksoMNK8oI+n2msLFxu7fhAHkGSKcGSMMOh4e64Ow=
Subject key identifier: B8:F9:C1:65:5D:4C:21:BB:94:2B:7C:62:15:89:41:6F:F5:D9:B8:DE
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BDFA2DF9B90DA703C3BCA84268A85
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uPnBZV1MIbuUK3xiFYlBb_XZuN4.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197790
IP address blocks: 78.9.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:a2:df:9b:90:da:70:3c:3b:ca:84:26:8a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f9c1655d4c21bb942b7c621589416ff5d9b8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:06:8a:1b:79:7c:64:96:68:42:8f:c6:b1:
6d:0e:31:f3:c9:37:dd:f8:66:07:d1:10:8d:84:1f:
31:f7:c6:96:1e:f3:ee:dd:17:fd:96:83:ec:f3:71:
3f:51:b6:bb:5f:0f:71:e8:4e:0f:16:3d:10:e7:86:
da:22:d0:5e:d7:d5:fb:20:83:50:c5:5f:2f:aa:4e:
0c:41:73:53:cf:15:c8:e9:f4:50:10:67:a1:40:32:
5b:1a:15:b3:73:2c:5f:a5:3c:6c:9e:0b:f3:55:a5:
02:61:83:d0:c9:a3:0e:66:af:97:a3:6f:b7:bd:6e:
78:37:93:03:b8:cf:90:50:a2:d9:b6:d1:75:3b:f9:
aa:46:69:a9:e4:e0:66:e3:4a:2c:67:2f:bc:b8:c0:
07:70:20:f5:77:f6:50:db:3d:52:5d:c3:20:7d:4c:
3e:d9:69:9c:9f:e3:0f:f8:71:f0:f9:ce:85:38:59:
57:89:37:8f:3c:9e:ff:28:55:9a:0c:96:97:94:62:
29:65:93:e6:5b:34:09:73:0e:d4:f9:79:bc:35:58:
b6:46:4c:ea:fd:9c:ed:e7:c9:1e:d1:dc:12:b4:66:
6e:65:86:b3:2b:1e:0c:42:a6:2e:03:2b:fd:17:8a:
9e:d2:58:c2:a9:aa:81:20:77:0e:18:a7:df:36:cc:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:C1:65:5D:4C:21:BB:94:2B:7C:62:15:89:41:6F:F5:D9:B8:DE
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uPnBZV1MIbuUK3xiFYlBb_XZuN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.9.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:aa:96:d6:b4:d5:b1:f9:29:94:1c:a2:ab:48:c0:c8:97:a1:
43:24:bb:67:25:8d:05:59:97:98:4d:55:a3:fa:aa:39:67:ee:
d1:13:e7:d0:f0:e0:61:0e:45:bd:9a:a8:3e:21:d1:49:88:ad:
b6:c8:11:4f:50:12:53:21:e7:68:d8:c0:b6:2f:90:9b:25:0e:
6a:03:b7:ed:28:ca:10:f9:ab:76:91:c2:2d:55:77:8f:47:13:
50:33:ab:38:66:5d:05:56:ef:ab:2b:ee:a4:70:a7:61:55:e7:
7e:4d:b5:95:28:83:84:92:f6:cc:a0:c6:b5:bb:b3:83:dd:a2:
8a:e5:1b:cc:73:44:55:d5:73:38:9f:57:6b:46:3d:9f:f0:d6:
b5:f0:a3:af:55:11:a7:97:aa:d2:01:af:f7:5f:1a:58:ff:2b:
ed:20:da:73:6c:a5:55:d0:12:8e:a2:86:c9:1c:9a:9d:40:a7:
b6:7b:9c:fb:05:69:59:73:6d:16:70:5f:10:c7:1e:93:6f:b6:
09:97:00:80:6f:3b:a0:ce:a6:7c:4f:ff:58:6c:d9:05:99:b6:
81:59:7b:0c:e1:8a:2e:ab:25:87:5d:61:8b:14:91:64:c4:e3:
6f:5a:f8:25:42:51:e7:08:4f:94:be:86:0f:dd:77:bc:e0:f6:
a6:de:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:39 2025 by rpki-client