Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/UfgJkcmjhHuPysdu9UDgnG61U1E.roa
File: UfgJkcmjhHuPysdu9UDgnG61U1E.roa (raw, json)
Hash identifier: jyBZ92VBxTd3w6E6GrV4vU23vTKTO8D4uBc4VtFRjwU=
Subject key identifier: 51:F8:09:91:C9:A3:84:7B:8F:CA:C7:6E:F5:40:E0:9C:6E:B5:53:51
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01946FB16E9997825107C0627E33C5A2A766
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/UfgJkcmjhHuPysdu9UDgnG61U1E.roa
Signing time: Thu 16 Jan 2025 15:18:06 +0000
ROA not before: Thu 16 Jan 2025 15:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 82.206.96.0/20 maxlen: 24
82.206.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:b1:6e:99:97:82:51:07:c0:62:7e:33:c5:a2:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 16 15:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51f80991c9a3847b8fcac76ef540e09c6eb55351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:e4:7d:63:d3:b6:a5:3f:ae:d1:9a:e9:b4:
11:64:14:6c:f2:38:4b:be:77:50:1c:4b:1a:d6:e7:
43:59:f0:e8:97:0b:97:bd:50:d5:64:27:18:96:26:
2a:30:80:f6:52:6e:42:f4:39:75:16:2d:b8:57:16:
dc:29:24:6a:81:b8:32:00:ee:97:76:bf:91:27:f4:
f4:ad:19:98:da:e6:d5:98:ca:29:3f:28:e4:7e:e7:
f2:38:15:13:09:10:67:f7:22:e8:4a:dd:a3:f0:ef:
45:42:90:c6:a9:e3:f0:75:f6:20:d7:f5:84:4b:46:
5b:f7:49:96:a4:45:7d:c3:a6:ba:61:4a:16:8f:fd:
13:09:ef:d5:ce:c0:e3:e5:dd:38:47:52:5d:66:21:
a1:ec:e1:99:92:7c:91:41:18:f5:1f:f9:55:b7:43:
73:9c:04:3c:f2:8d:2c:9d:38:4d:88:e8:41:5d:a1:
c2:b5:fc:5a:ea:83:58:5f:b9:e7:18:5f:d3:18:9c:
83:b6:fa:3b:d2:2e:4c:e0:59:1e:24:2c:cf:c1:94:
cb:16:35:f9:c6:81:71:11:b8:fd:5c:08:0c:87:e2:
2e:12:5d:21:97:4c:ce:81:b3:42:74:4d:6f:51:52:
6b:06:e2:0e:92:19:45:51:a1:01:f7:d9:80:ee:78:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F8:09:91:C9:A3:84:7B:8F:CA:C7:6E:F5:40:E0:9C:6E:B5:53:51
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/UfgJkcmjhHuPysdu9UDgnG61U1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.96.0/19
Signature Algorithm: sha256WithRSAEncryption
67:57:85:7d:dd:41:f0:e5:2a:07:9a:13:68:5c:ec:64:4f:96:
e6:0e:08:b7:81:3a:07:0b:fa:9d:2e:a9:6f:ce:87:5c:4b:d2:
e1:a6:1c:b6:53:a7:12:b4:4e:5a:e5:53:2c:23:8e:c6:f2:42:
00:87:e3:0c:f8:5d:a4:a5:db:2a:8c:ee:07:37:03:07:26:b7:
01:2e:7f:cc:1e:1f:38:2b:ab:94:5c:5a:c9:8e:f3:88:74:3c:
52:b4:72:38:81:8a:ac:9d:25:bf:c0:b4:74:91:cc:26:11:4e:
a8:0a:ff:00:2d:1e:35:fc:e6:20:59:70:22:ef:ef:aa:93:52:
5b:2b:de:47:27:6a:76:44:bd:30:b8:c6:f2:45:54:71:12:87:
82:38:c6:cd:de:f2:ba:d0:c3:64:42:e9:99:63:fe:13:75:5a:
70:40:7d:cf:52:f7:ae:d6:42:b5:2b:24:6f:80:e3:3f:ad:4b:
cf:45:52:da:e6:13:37:9c:73:25:63:f8:3d:66:83:20:35:da:
f0:7f:1d:2c:37:d0:f0:ac:cc:9b:56:75:f2:41:de:58:18:02:
d6:76:91:b3:3f:48:27:25:55:f4:8f:b3:79:72:9f:1e:7c:88:
c4:b6:59:57:15:70:01:3f:e0:c7:e3:66:d0:66:ee:07:6a:82:
79:75:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:23 2025 by rpki-client