Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/ubkR1yGfNr-CUM0CDhrxyA5UQLc.roa
File: ubkR1yGfNr-CUM0CDhrxyA5UQLc.roa (raw, json)
Hash identifier: 4is8sMN4Lc9TI8VMpEB2A0rwH7JVTG7RQaQEnYJ8g5I=
Subject key identifier: B9:B9:11:D7:21:9F:36:BF:82:50:CD:02:0E:1A:F1:C8:0E:54:40:B7
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 01856C6F21DF81A59A33B1BF7FE8C19F66C9
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/ubkR1yGfNr-CUM0CDhrxyA5UQLc.roa
Signing time: Sun 01 Jan 2023 08:25:00 +0000
ROA not before: Sun 01 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31077
IP address blocks: 91.192.184.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:21:df:81:a5:9a:33:b1:bf:7f:e8:c1:9f:66:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b911d7219f36bf8250cd020e1af1c80e5440b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:24:38:ec:86:6c:0b:00:c9:13:a4:3c:cb:
91:66:0f:35:40:21:b6:1e:2a:74:9f:7a:b2:8f:f6:
df:be:2c:80:96:9b:c1:40:b7:83:ad:d6:9b:42:2b:
8d:2f:7b:bb:d1:53:64:44:b0:c1:cf:bc:f9:c3:9b:
e7:39:2d:17:ee:0c:46:7b:8f:b0:a4:c3:c8:bb:06:
ac:b4:08:6f:af:28:f4:91:30:35:ad:53:db:af:15:
40:c1:97:df:0a:19:e2:21:c0:b5:0f:f3:96:09:07:
6c:15:78:5f:60:9a:9c:65:2d:d4:da:26:26:2c:9e:
dc:12:34:96:ae:7e:8a:8f:2f:95:54:06:b4:d3:3c:
70:b5:7d:13:ff:89:ce:38:49:a9:77:2a:7c:a0:dc:
1b:d6:00:c4:b3:bd:ab:20:e6:1a:9f:a6:a7:42:2d:
ee:5b:52:d0:df:c7:54:16:cc:0a:3d:b3:fa:ff:d1:
1b:e7:17:ac:a5:12:7b:93:3b:56:b2:a3:00:90:73:
d4:dd:99:2f:4e:16:e7:d9:b6:ce:93:88:5e:f7:8a:
71:c9:d9:00:84:99:6d:49:e5:93:d2:ed:0c:7f:ae:
f0:60:a4:1b:1b:bc:eb:2f:c2:16:51:87:6a:85:08:
26:1a:6a:71:73:04:72:15:4e:27:e1:d8:45:d0:63:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:11:D7:21:9F:36:BF:82:50:CD:02:0E:1A:F1:C8:0E:54:40:B7
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/ubkR1yGfNr-CUM0CDhrxyA5UQLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
38:fa:11:e7:f6:22:ae:65:ae:79:d9:b5:3b:ad:0a:b7:b8:b3:
de:60:f3:2b:50:d0:1e:64:0e:aa:6d:64:5f:9e:e5:8b:cc:3b:
26:96:7f:5b:50:b9:8f:67:fd:b2:85:c2:2d:1e:5d:8e:d2:de:
b2:62:45:f2:8e:62:1a:03:9b:92:c0:14:96:2e:7c:a7:bc:f1:
50:e1:5f:1f:84:12:14:2e:52:02:d2:a5:01:7b:d9:d9:14:7b:
f9:fb:3c:2f:79:98:d4:5e:f7:ee:08:13:74:41:1f:db:85:52:
29:0c:2d:e0:3a:f9:4c:6c:b8:28:9f:b9:f9:2a:d6:36:8a:fe:
9c:a3:ee:c5:3e:a1:40:fa:bb:8f:45:2c:59:da:57:66:77:77:
e4:20:8e:fa:e5:dc:23:52:42:17:40:ff:5a:c3:d1:a8:aa:d6:
c9:01:65:81:c6:2d:d3:6c:29:e6:30:c9:df:9b:e8:b3:10:78:
5f:62:25:f9:8a:b1:6b:1e:7a:6d:6e:f3:94:13:86:e1:0a:34:
a2:13:0e:d2:c3:03:b5:62:63:69:93:e2:e1:14:74:a2:db:15:
fc:81:29:fc:51:4f:65:ea:5b:ea:0f:5a:a6:a0:16:39:79:12:
84:fc:8e:f6:0a:50:ee:f1:e2:f7:f8:26:e6:fc:06:99:bf:aa:
dd:17:e5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:04 2025 by rpki-client