Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/uFHSzfk_zk3TIp45n5GBEUFKwao.roa
File: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (raw, json)
Hash identifier: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=
Subject key identifier: B8:51:D2:CD:F9:3F:CE:4D:D3:22:9E:39:9F:91:81:11:41:4A:C1:AA
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019425214985F52805208F600E490D0D8ADF
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/uFHSzfk_zk3TIp45n5GBEUFKwao.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 92.39.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:49:85:f5:28:05:20:8f:60:0e:49:0d:0d:8a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b851d2cdf93fce4dd3229e399f918111414ac1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:24:f7:2b:79:b1:3c:c3:ec:ae:b5:52:8e:
59:43:d8:f9:3b:a6:99:4c:c2:2f:5a:3c:84:1e:4a:
3f:08:de:76:74:16:bd:8f:e1:11:3b:27:b1:28:d2:
fd:71:6e:3c:51:d6:76:3a:1d:59:2d:26:da:ef:8e:
09:97:fc:6f:bd:23:d7:9a:44:f1:10:e3:ff:1e:b9:
43:ea:eb:3e:c6:77:ff:5e:11:43:71:4f:90:f0:93:
de:21:95:07:40:24:b6:3f:a2:25:ea:76:19:2a:d8:
18:23:6e:97:4a:14:4b:3a:d4:95:7c:13:7d:52:e7:
40:39:60:cc:74:4e:4d:0f:63:98:5e:ef:54:2d:2d:
f5:2d:af:bf:61:f2:9d:c3:2a:41:df:d7:b0:5e:f0:
45:af:a1:4e:6c:ef:28:ad:50:5c:f2:46:34:a4:80:
41:6f:56:f0:b2:bf:a2:96:a5:57:33:30:16:ab:3b:
42:af:bf:b9:9e:ae:3b:09:e4:35:90:c5:4e:f7:44:
6a:6a:85:d9:86:b5:26:1e:5f:0b:a6:fc:3b:7a:e8:
2a:40:db:59:ed:e1:ec:b2:57:7c:d8:14:ad:7b:c6:
8c:86:a3:dd:01:b9:28:f8:eb:c2:37:8b:5c:cd:95:
38:57:c9:e2:65:08:4b:79:e2:9b:a9:7d:b3:71:b6:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:D2:CD:F9:3F:CE:4D:D3:22:9E:39:9F:91:81:11:41:4A:C1:AA
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/uFHSzfk_zk3TIp45n5GBEUFKwao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.48.0/21
Signature Algorithm: sha256WithRSAEncryption
60:40:6b:cd:50:79:b9:99:bf:d8:15:48:ef:1d:ca:22:5b:64:
91:11:26:b0:f1:15:b9:c5:94:5c:3d:32:d0:d8:69:cd:a2:87:
0f:7d:2b:9f:7e:35:c0:34:2f:cf:44:ad:a0:07:76:07:ab:f9:
4a:05:33:8e:83:f5:3c:53:a9:a5:4c:09:11:31:5d:fa:80:37:
0e:07:6e:b4:aa:35:a4:0f:15:1b:b1:31:5a:b1:f6:34:29:55:
12:6d:eb:8a:06:9a:90:dc:6e:5b:a9:b0:15:fe:d8:6c:f7:b0:
1f:83:13:a2:e9:7d:a9:5a:50:0b:b4:20:a6:db:61:3b:f9:2b:
0e:96:4d:30:b4:6c:93:a5:e6:47:b5:10:b6:7d:64:ff:08:46:
fe:c0:e1:37:4d:fb:97:a0:d4:73:9c:e5:07:fe:55:fe:db:b9:
64:0d:4e:39:5e:48:df:cd:bb:60:23:3c:e4:82:9c:4e:b4:e7:
c0:47:ca:ef:ad:5e:4b:37:c5:34:a0:d3:e1:03:c0:aa:f4:53:
4e:99:54:e7:a7:18:40:ff:a4:7f:f4:06:d6:96:0e:11:95:79:
7f:8b:47:44:e6:a9:19:c2:55:ef:fb:7e:0c:0c:c8:0b:a9:f0:
77:0a:fe:17:e4:91:45:1c:ab:d1:92:91:b1:5b:8a:60:30:0e:
71:d6:53:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:52:54 2025 by rpki-client