Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UGu-SXcuHuKUBAqY00PJXbKDIdk.roa
File: UGu-SXcuHuKUBAqY00PJXbKDIdk.roa (raw, json)
Hash identifier: 91fVuYHjzaLgLaQXxKdKp2j0qn5FW0hnGgA1s9OO6kQ=
Subject key identifier: 50:6B:BE:49:77:2E:1E:E2:94:04:0A:98:D3:43:C9:5D:B2:83:21:D9
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8A095A0CF48F52AC2D59BCA0090A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UGu-SXcuHuKUBAqY00PJXbKDIdk.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208643
IP address blocks: 195.178.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:09:5a:0c:f4:8f:52:ac:2d:59:bc:a0:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=506bbe49772e1ee294040a98d343c95db28321d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:fd:34:5c:8d:55:2c:71:fa:bf:78:95:98:
42:0e:2c:30:71:99:7d:90:28:5f:33:4d:a1:c0:8b:
df:28:7e:50:69:59:96:6c:3e:e7:06:f0:3c:f1:d8:
c3:ac:b1:fb:3b:a4:2f:3c:ec:0c:9f:16:4b:3b:5c:
f0:e1:41:3b:32:c3:04:19:50:ad:7b:55:89:4a:e1:
0e:b1:21:90:99:69:54:ee:f8:8c:39:a3:f3:77:f5:
ee:e1:09:82:86:d1:c6:f6:32:b8:23:f2:d6:65:5c:
db:bd:e9:33:73:99:8c:a7:ee:6b:5c:b5:8d:22:26:
b2:d1:98:dd:ca:71:df:d8:39:28:40:d0:bb:32:24:
bc:53:c8:af:84:25:a1:52:4b:90:d1:ef:17:53:61:
c4:fd:ec:b0:61:f8:16:b5:cb:cb:84:60:58:7f:85:
d7:ba:a8:64:c9:6f:01:a4:e5:e2:f6:21:a8:5e:d4:
ed:3e:1c:49:83:c8:e0:c8:38:93:b4:8e:2c:b8:7a:
bd:fa:68:7c:25:e1:3c:ad:fd:44:6d:3d:21:52:43:
b6:fd:13:81:3e:d2:33:89:94:bc:bd:54:c6:0d:cd:
6b:67:94:a8:be:72:5c:18:50:f4:a8:c4:b3:38:2e:
0d:17:fe:cd:77:53:25:31:e9:49:a0:40:65:98:c9:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:BE:49:77:2E:1E:E2:94:04:0A:98:D3:43:C9:5D:B2:83:21:D9
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/UGu-SXcuHuKUBAqY00PJXbKDIdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:19:bf:59:b8:24:b8:5f:2b:aa:bc:7b:3e:ac:81:64:05:e5:
78:9f:34:37:d9:5d:23:ac:a6:57:4a:a5:39:72:62:fb:d3:8b:
59:5f:95:14:1d:d4:f6:f2:56:ce:51:29:a6:f8:de:70:0a:4a:
dd:67:0d:73:f6:60:53:c0:7f:a8:22:9e:1f:46:ee:86:c9:a6:
fd:6e:2f:57:bf:e7:58:e4:c8:6c:1e:48:58:27:02:4e:67:56:
ad:68:5c:38:aa:bc:09:c7:bf:b6:18:fc:df:09:22:9e:eb:11:
1b:a9:e4:32:71:de:01:86:39:36:13:27:7e:fc:e4:1d:59:f8:
a4:2e:93:40:5c:6b:b4:40:df:06:00:41:28:d1:5c:d3:f5:93:
31:0e:cf:d3:2f:91:1c:c2:ef:45:75:4b:a5:b7:0c:3b:bc:80:
99:c3:f9:cb:d5:9b:e8:f0:cc:04:e9:9b:b3:9b:27:ff:14:e1:
7e:28:ad:36:26:01:01:83:9e:c9:56:47:22:d0:ef:f6:f7:68:
a0:82:2b:70:1c:a7:95:f4:18:78:83:1e:28:d5:ab:c8:8a:0c:
df:a1:63:b3:5c:64:0c:b8:0c:43:db:86:63:6d:69:85:6c:29:
7c:9c:3a:ff:49:42:b3:f5:02:5c:66:f0:b2:1c:a7:ed:24:3c:
2f:f6:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:45 2025 by rpki-client