Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/UFJpaqS-5cSmIXiKhFXdyVhQ5mg.roa
File: UFJpaqS-5cSmIXiKhFXdyVhQ5mg.roa (raw, json)
Hash identifier: SqzvOaF9/cF2dVR5mWwZh1/aJ4idxBUPOboc+iF+pNE=
Subject key identifier: 50:52:69:6A:A4:BE:E5:C4:A6:21:78:8A:84:55:DD:C9:58:50:E6:68
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4B9AAB67790F27A5F56508CDD24E2
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/UFJpaqS-5cSmIXiKhFXdyVhQ5mg.roa
Signing time: Sun 01 Jan 2023 19:35:12 +0000
ROA not before: Sun 01 Jan 2023 19:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 194.53.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b9:aa:b6:77:90:f2:7a:5f:56:50:8c:dd:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5052696aa4bee5c4a621788a8455ddc95850e668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:2f:5a:6d:31:e3:24:5b:fd:1c:08:10:e3:
1c:e2:e9:87:4c:c1:08:86:8e:f4:1c:3d:ed:9d:9f:
e2:f7:ef:21:1f:3b:4d:cc:c0:f3:b1:04:fc:5b:c7:
7e:c3:53:00:7c:dc:0a:30:9e:76:23:b1:d8:4f:f7:
aa:61:f9:9c:86:e9:0d:20:06:68:db:72:ca:e4:c9:
30:e7:b4:9e:61:11:df:af:d7:8b:e9:32:03:e8:49:
57:0d:f0:7a:43:7e:5e:80:5d:f2:03:a4:d6:63:f3:
80:bd:ff:29:0d:ae:28:b2:22:ac:cf:6e:45:a3:1b:
d8:e4:15:ee:0e:12:e9:83:9d:49:78:16:4d:24:1d:
ce:cb:67:11:a9:e4:b7:dd:af:5a:fd:71:63:6c:e4:
d9:87:e4:39:f6:e7:25:2f:86:fa:10:61:8e:25:23:
fd:90:ec:f9:e7:54:81:11:f2:7c:9b:0b:c9:d7:dc:
fd:9d:4b:0f:23:4d:ba:e3:ae:33:17:ef:77:36:38:
1b:c8:fc:39:aa:7c:6d:49:0f:e5:20:84:89:8a:80:
44:c9:3b:2d:0e:3b:f7:93:10:11:43:7c:0a:3a:e7:
3e:64:c8:c1:06:00:7e:ee:af:e5:aa:e1:83:67:51:
50:97:ec:e6:c9:5a:0f:63:b1:f3:a5:ba:3a:4e:78:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:52:69:6A:A4:BE:E5:C4:A6:21:78:8A:84:55:DD:C9:58:50:E6:68
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/UFJpaqS-5cSmIXiKhFXdyVhQ5mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.188.0/22
Signature Algorithm: sha256WithRSAEncryption
af:c4:ed:03:a6:bd:81:1f:c2:94:34:1f:c3:9e:b4:56:12:ba:
ad:2e:18:17:d7:9f:56:89:2e:76:d6:30:77:27:0c:9f:1b:f8:
ce:eb:f0:44:ff:ab:f8:d1:ff:fb:ef:e7:48:0d:ae:88:32:c4:
c6:7a:d2:2a:f2:6a:c3:74:e3:da:77:43:a4:7e:3a:23:9f:13:
d4:ec:86:bd:9e:36:92:76:af:73:1e:cf:6e:77:da:50:53:25:
5a:77:f6:8d:4b:ef:d8:47:d7:47:42:58:52:88:f2:6e:e4:2e:
03:57:31:be:26:23:b7:b5:1e:fb:aa:e4:87:92:3e:16:54:24:
f9:57:d1:39:b9:7d:cd:80:ac:50:2d:be:a8:ae:90:51:d0:37:
0b:25:34:87:9c:2b:1f:54:8b:8d:b9:11:b2:35:3c:c1:0c:b1:
03:00:81:58:6c:16:b4:8f:fa:c0:52:34:83:4b:2c:e5:d3:a2:
e9:50:18:f8:4b:c1:e5:27:d7:a8:79:b5:92:a0:2c:c8:a1:35:
91:ab:6f:af:24:a4:a3:ad:21:5f:96:99:aa:59:a7:ae:43:58:
24:5c:94:73:2a:fb:22:2f:27:26:35:3e:ac:16:e8:bf:ef:fc:
46:58:9f:d4:1d:31:99:8d:b2:c6:69:41:e5:79:3b:a7:21:74:
ef:3e:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:51:16 2025 by rpki-client