Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/Ug9yrT70BJhEAdolXeArdqq6xuI.roa
File: Ug9yrT70BJhEAdolXeArdqq6xuI.roa (raw, json)
Hash identifier: CZKTv/CqYID8WzSnVjo35f/pysUF8/BpclCMNWs7yHU=
Subject key identifier: 52:0F:72:AD:3E:F4:04:98:44:01:DA:25:5D:E0:2B:76:AA:BA:C6:E2
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 9F28
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/Ug9yrT70BJhEAdolXeArdqq6xuI.roa
Signing time: Wed 13 Apr 2022 12:50:26 +0000
ROA not before: Wed 13 Apr 2022 12:50:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205876
IP address blocks: 194.5.132.0/24 maxlen: 24
194.5.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40744 (0x9f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Apr 13 12:50:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=520f72ad3ef404984401da255de02b76aabac6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:0a:c2:8c:f6:e8:fb:39:e4:45:56:b0:c2:
06:da:a4:52:72:fe:fc:00:6e:c3:f8:33:19:25:0b:
7b:84:02:90:66:54:89:ed:82:69:88:06:50:57:ae:
bb:39:26:6b:3f:a8:b2:c1:02:90:b0:43:d0:3d:6a:
b4:1f:1d:16:f6:d7:e4:1e:11:a9:82:13:f7:a8:cf:
8d:a7:c6:50:45:6c:0b:69:cf:48:1e:b2:7e:58:a1:
a2:9a:5d:ba:4e:21:73:7a:43:c6:84:05:fe:65:08:
02:25:63:2d:d0:f0:d4:44:8b:30:fa:8b:19:11:6b:
8d:c7:3c:81:b4:07:d1:22:24:16:5f:5c:6c:2a:9b:
89:84:6c:3d:c4:03:bb:78:1a:6f:0b:fd:b5:8e:22:
a2:ef:de:19:7e:ba:8b:f4:d4:ae:d3:09:ee:b2:9d:
38:d2:7a:3a:2c:eb:4c:f6:28:e7:3f:a8:d8:ee:a2:
d5:e9:2f:79:93:4b:91:5c:e8:72:7b:ae:e8:e7:46:
32:10:cb:97:0a:ef:b2:7a:9b:b0:5e:e4:f0:37:b0:
8a:f2:d6:0a:43:9b:7c:62:c4:cb:c9:f9:d3:e5:51:
6f:01:25:67:42:35:9e:9c:e8:20:2d:a6:2c:5d:fa:
16:5b:c7:f6:5b:d4:bb:e3:08:74:c3:54:9f:58:dc:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:72:AD:3E:F4:04:98:44:01:DA:25:5D:E0:2B:76:AA:BA:C6:E2
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/Ug9yrT70BJhEAdolXeArdqq6xuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.132.0/24
194.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:8f:55:3a:b2:ec:79:06:8d:88:82:4f:87:43:72:25:7a:54:
1a:e2:b0:57:06:0b:20:e5:1c:75:6b:aa:4c:2b:df:f0:c5:bb:
cf:61:e8:06:99:9f:3b:27:4a:c3:00:cf:d2:17:3e:13:1d:60:
c4:d5:79:66:dc:a3:1d:6c:3d:ca:3f:42:fc:be:4f:f6:6c:46:
a1:73:91:f2:0e:a8:a1:ef:4f:a6:f8:c7:98:c0:3f:05:29:a3:
2e:da:fd:3e:23:01:93:18:4a:39:f3:ce:d0:83:34:82:d9:e7:
2f:d8:a5:35:fd:47:45:59:8e:04:0c:ad:dd:95:cd:82:3d:80:
d2:fe:bd:02:31:ec:50:c8:e3:e1:49:fa:12:1a:30:59:06:5b:
0b:f0:c6:d8:91:1a:a8:a4:f6:e8:6a:2f:69:f4:84:a5:33:15:
03:e4:3c:d0:fb:89:5f:a3:00:7f:f3:dd:33:82:f5:80:7f:0b:
8f:12:61:2b:c8:66:34:88:9c:28:a8:7b:58:6f:d8:e3:54:24:
5a:39:7b:b0:c5:59:81:cf:d0:6d:02:fb:34:85:0a:af:71:17:
13:4a:44:3f:78:d9:28:c8:e1:5f:31:48:a3:67:cf:23:fb:9a:
48:cb:51:e7:9b:c5:40:28:d3:66:4e:6e:de:71:cf:83:ed:d7:
78:d1:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:52 2025 by rpki-client