Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UMMl2u_kv_VedWsjIrXbIpEBgls.roa
File: UMMl2u_kv_VedWsjIrXbIpEBgls.roa (raw, json)
Hash identifier: 5hogaDXQ19xg3F34YwdGdlOVTP1x7q8owwAcdWdrWug=
Subject key identifier: 50:C3:25:DA:EF:E4:BF:F5:5E:75:6B:23:22:B5:DB:22:91:01:82:5B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF3ADAF858DC3F3728073DE1788F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UMMl2u_kv_VedWsjIrXbIpEBgls.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204674
IP address blocks: 95.47.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f3:ad:af:85:8d:c3:f3:72:80:73:de:17:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c325daefe4bff55e756b2322b5db229101825b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:90:1c:0f:b2:4e:a3:06:7a:92:a4:1a:a7:
cc:e4:94:6e:f6:9e:8a:0a:01:67:5f:08:54:09:1f:
e2:b4:45:ad:b4:df:95:76:d6:ac:e8:c3:e8:3d:50:
c4:23:8e:d1:8b:da:83:86:d2:22:bd:a8:af:af:e7:
7e:dd:fd:00:d6:07:9f:fa:da:6c:07:6e:95:7f:d3:
63:04:ba:38:83:93:84:3f:59:35:ea:6a:74:22:43:
82:f3:ae:d9:64:5a:60:42:3e:7b:e7:fe:3a:59:2d:
75:7b:e5:f2:34:52:3c:6f:24:19:2d:44:dd:78:56:
98:b2:e1:89:09:89:a8:b0:76:ee:0c:1e:82:51:a1:
ba:4e:6b:e5:2e:42:b3:8b:c6:1a:63:58:6b:23:05:
d5:44:93:c4:4b:56:06:b3:1a:2e:25:27:24:fe:43:
69:c0:1c:ed:e6:d7:ed:75:30:de:51:c5:35:8f:de:
21:2f:a0:2c:76:c9:0f:b0:e2:a9:e8:e9:14:6a:46:
8d:0f:a9:51:ba:ae:91:15:4f:7b:57:37:89:f3:47:
51:90:7d:04:89:a4:3e:fc:ea:26:2f:d4:95:1b:b9:
cc:d2:35:3d:56:f8:c0:56:e1:3d:d0:52:0f:f7:98:
f3:34:6d:1f:9e:c2:b8:6a:8e:9f:70:c4:e2:a6:5e:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:25:DA:EF:E4:BF:F5:5E:75:6B:23:22:B5:DB:22:91:01:82:5B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UMMl2u_kv_VedWsjIrXbIpEBgls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.154.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4d:40:28:32:d6:4b:fe:a9:fb:56:d6:66:12:cb:8c:91:60:
e0:95:e1:e1:27:a6:c9:4d:bc:8e:82:9a:ef:7f:2e:fb:29:3a:
85:09:dd:ab:f9:cc:6b:cc:23:2f:1f:88:b2:95:5d:9b:17:49:
81:9a:6d:08:d5:c5:58:b0:09:5d:c4:a4:d6:5c:2b:cb:bf:0b:
0a:5b:aa:a6:07:22:12:77:77:bf:a7:f7:70:4e:8e:b8:e2:99:
8f:01:b3:5a:b3:db:3a:cf:ef:7e:02:5f:56:b4:da:c8:32:68:
87:21:9e:34:2b:d1:95:15:d8:fc:de:95:5b:33:e4:06:64:35:
f7:b0:66:86:40:dd:b8:cb:7c:e0:84:ad:cb:8c:25:4b:bc:f4:
3c:d3:51:fb:9a:5e:b2:dd:14:d2:8e:35:69:d8:d6:8a:d8:89:
eb:b2:df:a8:b4:b3:0f:28:75:1a:2c:3a:40:f6:b0:f1:72:91:
9c:ae:9e:72:22:78:ff:be:b7:06:f2:6e:9f:c5:9d:ad:6d:60:
c0:74:21:b9:9f:c6:75:bf:12:4c:fa:aa:0e:6e:48:39:77:9a:
cf:80:2f:bc:ad:40:f8:08:8d:7e:3f:45:56:b1:cb:1c:9e:dc:
ba:ce:3e:bf:98:d4:b9:a3:ef:49:d8:b9:4c:c0:2c:7e:0c:c8:
0c:b2:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:17 2025 by rpki-client