Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ufB1VtYNkzT-0-xHX2uT0LrMt1M.roa
File: ufB1VtYNkzT-0-xHX2uT0LrMt1M.roa (raw, json)
Hash identifier: jafWeeBsmaDNc7YUsc2uWUY1AyuQRlnCqgbtql9Mmvc=
Subject key identifier: B9:F0:75:56:D6:0D:93:34:FE:D3:EC:47:5F:6B:93:D0:BA:CC:B7:53
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 019426D9E23DF281C0121DABC325EA1DE314
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ufB1VtYNkzT-0-xHX2uT0LrMt1M.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e2:3d:f2:81:c0:12:1d:ab:c3:25:ea:1d:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9f07556d60d9334fed3ec475f6b93d0baccb753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:b3:e2:93:74:d2:41:e1:94:16:eb:ec:ce:
27:1c:b3:35:d1:96:ae:52:a3:9d:98:5c:8b:6e:c9:
b8:70:11:bf:5f:5e:5c:5c:eb:ec:b6:69:9f:bf:f7:
ff:1e:0f:1b:cd:f4:5b:9f:da:57:a5:c6:7a:31:e5:
ea:a1:bc:3a:d2:b5:01:f6:fb:9c:a6:31:20:35:f8:
2d:75:37:8a:99:c1:a2:c4:5a:d7:94:bf:75:93:61:
13:49:8b:59:93:06:2d:2f:38:81:50:f6:d5:c2:9d:
ea:e1:16:cc:93:7e:97:76:cc:69:42:79:a2:bd:1e:
d4:1f:41:79:a0:d8:06:1b:8a:75:7a:e3:b0:e2:76:
1a:3b:16:fd:2b:7f:8b:72:01:f1:16:b8:4d:07:4e:
74:da:43:ec:51:d1:40:2b:52:59:ec:b7:45:f4:ff:
9d:53:0c:07:34:5e:ee:66:62:bf:25:3e:2c:fd:56:
5e:e5:44:1b:7c:df:bd:a8:3e:fc:89:2e:74:15:9c:
b0:85:2d:ef:a4:dc:7f:e4:1d:68:ef:69:f4:80:20:
17:77:f1:d2:e8:d1:8e:d7:ab:6d:7a:49:4b:fc:01:
86:66:9f:b1:db:85:6b:1f:dc:88:c9:16:71:c8:49:
cc:cb:60:0e:2b:a8:45:e8:03:38:3a:34:ba:5b:30:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:75:56:D6:0D:93:34:FE:D3:EC:47:5F:6B:93:D0:BA:CC:B7:53
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ufB1VtYNkzT-0-xHX2uT0LrMt1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
Signature Algorithm: sha256WithRSAEncryption
69:dc:45:e4:84:f7:db:9c:3e:10:cd:4a:35:80:3c:b1:ca:2e:
26:86:b2:f2:19:55:d1:b1:3a:1b:be:f6:2d:36:7a:cf:6f:b2:
5c:4c:a8:94:37:4c:af:ad:a8:01:ab:e5:30:33:c2:31:62:f0:
73:ee:ce:8a:26:74:23:47:2f:74:94:35:ce:12:70:97:d6:e3:
93:46:4b:91:81:2d:48:63:f9:d2:a5:3a:35:a7:5e:4e:29:97:
19:63:26:ae:63:61:4a:49:06:0f:4a:9d:e7:ba:d1:67:bb:cd:
3f:be:c0:fe:b2:58:01:aa:80:6c:b4:c1:70:bf:fe:4a:dc:c6:
94:1f:9b:4f:39:d2:83:f7:51:44:5f:e5:b2:f6:ae:1f:66:73:
44:76:eb:61:1a:ac:27:1d:cf:f0:4d:1f:07:d2:ab:10:11:81:
91:b9:f3:61:19:d3:93:f4:6e:f7:7f:83:67:c1:98:19:bb:6d:
ab:e2:f4:98:ab:77:55:69:13:02:ff:09:f3:bd:c9:59:33:08:
e8:53:2c:ff:39:64:3c:04:eb:ee:16:7d:87:26:cc:4a:f3:c5:
25:16:9a:70:92:c9:bf:65:57:48:3a:10:76:d2:f7:b8:6f:98:
57:b2:e1:c1:6a:84:29:77:67:f0:48:1d:ab:5f:16:d1:3c:dd:
92:63:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:33:44 2025 by rpki-client