Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UtsKYaswyHuE02j4W0pIwBksKks.roa
File: UtsKYaswyHuE02j4W0pIwBksKks.roa (raw, json)
Hash identifier: lnWCCnMCWE2GH801EFlDSMJ7rs6Gz0jAkG4Ic8Ylwvk=
Subject key identifier: 52:DB:0A:61:AB:30:C8:7B:84:D3:68:F8:5B:4A:48:C0:19:2C:2A:4B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D152F4AED388E7951E764B2BCC8D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UtsKYaswyHuE02j4W0pIwBksKks.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 80.71.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d1:52:f4:ae:d3:88:e7:95:1e:76:4b:2b:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52db0a61ab30c87b84d368f85b4a48c0192c2a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:29:4f:ec:81:d8:0a:65:77:b9:9e:5d:64:90:
22:5d:35:2b:fa:f3:32:a0:5a:6e:19:f9:7b:97:15:
da:41:d9:03:87:7c:c5:22:27:74:67:7b:74:4b:68:
38:aa:24:63:f5:ca:39:0e:96:96:08:93:cb:27:3b:
5d:99:e2:08:f8:e0:a3:3e:1e:2a:ab:9d:24:74:3d:
7d:d2:b7:21:c9:c8:53:de:80:8e:b1:e9:9b:91:58:
27:ea:63:47:e1:5c:48:0e:5a:02:e9:aa:07:a0:f5:
fa:4a:6b:18:6b:6f:07:7d:40:5e:dd:93:2e:24:ca:
32:00:9b:df:87:92:5b:0b:fb:23:da:26:e1:b0:d0:
e4:d4:ca:48:de:74:a8:cb:fd:71:ce:77:4f:00:40:
f1:1e:17:7a:05:eb:6d:b0:33:d7:f4:5a:1d:a4:ac:
c3:0a:83:51:0c:79:8d:8b:28:bf:41:f5:65:3f:c7:
25:4d:a8:66:71:e0:55:86:17:9d:66:f4:c0:ca:89:
a2:61:ba:fb:2a:36:37:62:8a:f7:27:ed:57:48:74:
9f:2b:e7:de:07:cd:2c:db:c8:13:36:48:aa:38:34:
bd:56:e7:a7:83:c0:bb:1c:00:de:c5:33:c1:7b:42:
ed:85:59:5b:d5:6d:9c:d1:52:49:91:37:56:28:15:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DB:0A:61:AB:30:C8:7B:84:D3:68:F8:5B:4A:48:C0:19:2C:2A:4B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UtsKYaswyHuE02j4W0pIwBksKks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.226.0/24
Signature Algorithm: sha256WithRSAEncryption
79:30:a9:a6:b7:40:65:43:26:81:c1:76:81:a5:98:38:34:70:
49:2d:2b:03:ba:c2:c4:d6:85:ff:3a:b6:f1:7e:9e:6b:d9:3a:
c7:dd:b5:63:e1:56:0f:24:bc:62:86:9c:c7:6f:e7:16:b7:b0:
91:58:8d:d4:31:c3:69:56:7c:30:57:70:f8:2e:ed:ee:dc:26:
cd:8c:7f:73:3e:3c:10:a5:69:2e:cc:d5:40:2d:80:74:5c:ae:
91:f5:43:1c:59:10:7d:79:ae:e9:4c:73:3b:b9:f5:83:9a:44:
eb:9b:ac:55:92:bf:6d:aa:fb:92:b5:9f:1e:6c:35:43:40:aa:
ee:90:44:bc:7b:11:0d:40:29:1f:5e:7a:a8:de:b3:63:ef:ea:
2b:b7:bf:c4:2b:27:0b:3e:57:21:ae:b1:66:a9:7e:2d:7f:02:
67:26:33:dd:8d:98:58:63:29:9d:29:98:66:bb:a4:c2:87:76:
7e:d1:6e:4c:35:8e:aa:fc:aa:95:fe:6a:91:6d:34:d4:47:76:
23:1a:40:d9:83:1f:84:4f:ba:d7:95:86:60:e1:85:8d:5a:10:
46:e1:e6:b8:c5:05:31:f6:ac:01:fd:09:5a:fb:08:6a:7e:cf:
bd:ce:b4:bc:ef:cb:53:d5:35:91:58:34:29:bf:65:18:b2:a3:
77:78:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:17 2025 by rpki-client