Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa
File: ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa (raw, json)
Hash identifier: ft+2DADbVaLgXn5IbVGPEM2UTUtfzZPECsxi5dLpDrA=
Subject key identifier: B9:F8:8D:27:BA:07:E8:E9:CD:40:EA:79:58:26:C3:65:C4:BA:7C:5B
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F139C1C8EA40E012F23F9E64D796
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 91.193.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f1:39:c1:c8:ea:40:e0:12:f2:3f:9e:64:d7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9f88d27ba07e8e9cd40ea795826c365c4ba7c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:03:a5:af:96:c5:db:fc:ca:e3:a8:62:79:
f8:e4:4f:a6:4b:65:57:6a:33:9b:41:84:0d:1c:ab:
e2:69:a3:92:9a:96:d6:83:af:a8:93:dc:c5:28:a2:
cd:fa:a6:61:ef:1c:0d:d0:db:ff:c9:a1:3e:41:f8:
af:95:fd:93:a5:d9:14:d2:53:c7:fc:2a:3c:c2:5a:
e2:a8:0e:09:72:29:48:3f:49:cb:af:d1:0b:7f:ec:
dc:bb:67:c0:80:d6:c5:b7:58:8b:96:fe:e2:98:df:
ef:ae:d7:09:19:9e:44:e9:49:8e:13:9f:e3:a8:7d:
74:56:2d:91:d4:6f:1c:a9:ff:c8:ab:8d:90:12:72:
a3:e5:ad:36:c5:ca:06:17:2f:9d:07:7c:af:af:03:
bf:63:3b:3e:ad:74:78:c3:38:36:ec:41:a6:6d:cf:
fa:7c:a8:ee:0b:48:a4:1e:e9:96:c5:e1:e6:12:cd:
2c:e3:fb:5c:bd:c1:28:b4:0b:61:7b:48:e6:2d:12:
ab:a3:7e:b4:2e:a9:21:39:1d:1b:f1:96:e6:cb:c2:
4c:f2:26:c5:35:ef:cf:db:99:11:0b:44:9d:59:9c:
e0:5d:2c:2d:f0:89:40:66:3f:55:2d:54:11:e2:d7:
78:a1:5f:0f:79:18:18:4c:f4:3b:36:77:47:b8:0a:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F8:8D:27:BA:07:E8:E9:CD:40:EA:79:58:26:C3:65:C4:BA:7C:5B
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ufiNJ7oH6OnNQOp5WCbDZcS6fFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4c:51:88:c3:1d:3a:31:be:8b:23:83:5f:8b:05:f2:9e:17:
77:ff:ee:8e:c0:28:ea:62:97:0f:ba:0f:c7:61:19:43:82:16:
ce:37:1a:44:9c:2f:ac:e2:52:0f:28:4a:00:28:f1:44:65:a1:
36:1b:37:45:e8:e4:98:d0:77:74:77:b5:1b:ef:15:93:fc:03:
0e:27:23:da:eb:1d:68:98:2f:7f:ee:62:9d:50:3c:7e:57:be:
ae:75:fb:77:2a:9b:80:d2:fb:8d:0b:94:d7:41:5e:e9:a5:8d:
fe:f5:66:96:99:cc:26:be:70:2e:74:29:0e:88:21:1c:f3:a5:
2f:a6:2c:3b:68:ce:c4:fc:ef:ec:e2:aa:e1:e0:42:39:34:e6:
d5:99:36:bb:eb:0d:0d:4a:cb:0a:c7:35:72:00:a5:84:6e:86:
c9:da:05:7c:8b:85:ec:c6:a8:a4:b5:a7:eb:30:a9:7a:d6:cb:
3e:50:ab:d8:d5:3b:e9:ae:4f:1b:99:61:46:f5:62:22:b3:f8:
ab:ed:54:e2:7a:f2:53:49:6d:38:7c:d9:8d:ac:07:b8:9a:a6:
83:ea:62:ae:bb:ac:20:32:70:a7:92:c6:fa:f0:b0:e2:6c:b6:
a8:f2:b9:a9:23:b4:ce:d3:3d:3a:08:b3:59:0d:ff:26:03:5d:
09:fb:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:39 2025 by rpki-client