Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa
File: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (raw, json)
Hash identifier: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=
Subject key identifier: 50:62:EF:EE:22:16:43:EE:67:8A:E9:35:AF:95:5E:77:1F:D2:AC:83
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019422FC120BD85505580F1EF2437EEA4CFC
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203897
IP address blocks: 91.229.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:0b:d8:55:05:58:0f:1e:f2:43:7e:ea:4c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5062efee221643ee678ae935af955e771fd2ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:6d:73:ac:58:0e:50:69:e2:76:ca:e4:e2:
bb:c7:b1:c0:db:46:6b:2a:51:fb:b9:04:f5:ef:b1:
da:a7:ce:37:ca:53:1c:a9:99:0b:e0:31:2e:2e:23:
1e:07:12:b4:b9:2d:e9:20:5e:19:87:55:a1:46:28:
48:52:96:10:67:28:3b:15:15:ac:7d:5b:00:a1:ae:
1a:90:f7:62:b3:a8:6b:b9:46:59:4e:11:42:1d:ed:
30:75:6f:09:b6:a3:37:33:1b:64:44:76:07:76:d6:
a7:48:26:9b:f8:75:63:dc:5c:0f:4c:dc:37:a7:c6:
29:b2:13:8a:fa:6f:1e:42:ac:1a:44:90:1c:eb:32:
e6:61:29:f2:2f:8b:17:a0:2b:01:18:86:0c:c8:09:
db:d7:ce:8a:e7:b1:e3:d3:67:8e:ce:85:43:95:8b:
bd:8f:bc:cb:6b:bc:26:c2:89:be:c6:d2:5f:8d:8a:
e7:6f:63:34:97:f8:a1:cf:2d:45:43:c0:6f:3b:ce:
4d:da:dc:14:10:af:fc:5e:42:3f:8b:3b:49:ce:ab:
e3:be:1a:cf:65:41:21:ea:8f:61:43:ac:8e:9b:4b:
b4:50:8d:40:e1:8c:64:71:a5:24:3c:ba:32:a8:22:
d7:85:66:be:c1:11:0f:af:f4:f6:d6:f9:f6:16:ce:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:62:EF:EE:22:16:43:EE:67:8A:E9:35:AF:95:5E:77:1F:D2:AC:83
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c3:c0:50:d4:dd:74:6d:20:33:d6:74:cb:22:25:7c:75:aa:
f5:58:21:3d:86:f3:72:f2:9a:45:5a:42:b6:b2:11:ca:c2:fd:
05:ff:67:c2:e0:5d:f5:86:20:57:66:57:2c:75:43:64:c4:e8:
1a:bd:00:c3:01:8c:3a:fd:d4:a4:a9:80:84:04:48:e9:f8:85:
d3:22:35:3e:8f:84:f7:eb:2a:76:da:6b:80:2f:72:1d:dc:93:
ef:f3:f6:8f:52:88:5d:97:60:77:84:16:b3:db:13:f1:7d:64:
69:2b:e0:c2:dc:17:1c:20:c7:e1:e9:f4:fb:a2:04:b9:80:b6:
3f:b4:96:ce:46:85:49:83:d1:5e:9d:c0:72:01:41:15:59:67:
3e:79:a9:22:ea:b5:fd:d5:d5:de:fe:82:e5:17:c8:3a:17:f0:
98:b7:ce:ca:05:c3:ed:1d:41:05:ed:41:ef:86:07:d4:a7:0e:
37:6e:c0:39:1b:c5:bc:88:db:fd:7e:ea:ca:4a:e3:c3:9d:81:
05:57:61:28:71:ac:47:98:44:c1:64:1e:2a:ed:d5:9d:e2:e9:
ed:50:87:20:e4:50:0a:65:59:29:ed:5e:5a:56:df:36:21:7e:
df:35:17:09:f1:b0:67:38:1d:b2:c4:6c:2c:86:50:5c:e7:a6:
4d:9c:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:20 2025 by rpki-client