Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/UyMtn8WX80Gkr9lyw5M99xzcD3Y.roa
File: UyMtn8WX80Gkr9lyw5M99xzcD3Y.roa (raw, json)
Hash identifier: RF9fM11WubO9odGdvWp7YCPEPcHBUJC2boX7EYqbWq0=
Subject key identifier: 53:23:2D:9F:C5:97:F3:41:A4:AF:D9:72:C3:93:3D:F7:1C:DC:0F:76
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0191B28EB584AF859DFEDAB9F726D409C1D7
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/UyMtn8WX80Gkr9lyw5M99xzcD3Y.roa
Signing time: Mon 02 Sep 2024 11:46:22 +0000
ROA not before: Mon 02 Sep 2024 11:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6205
IP address blocks: 5.250.255.0/24 maxlen: 24
185.123.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:8e:b5:84:af:85:9d:fe:da:b9:f7:26:d4:09:c1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Sep 2 11:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53232d9fc597f341a4afd972c3933df71cdc0f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:f1:a4:29:a1:7f:ee:33:6e:da:e7:3b:2c:
f3:ee:8a:0a:49:0e:3d:0f:41:0a:36:8f:f2:c3:78:
7d:16:de:e0:cb:d2:d6:64:ae:74:e6:9d:44:70:64:
b5:48:0c:12:c3:a9:6b:70:74:4b:79:13:49:75:6b:
42:c1:9e:31:7d:e4:7a:f5:4f:08:73:ff:52:42:45:
94:75:c4:d1:99:0c:86:49:78:2b:bc:e3:64:65:e2:
d4:aa:36:01:34:90:33:a4:32:9b:43:20:93:7f:9b:
64:d1:20:aa:b6:5f:c2:26:fc:18:e9:de:2b:ee:5d:
da:bc:87:33:43:06:40:e0:ea:26:bc:f4:e5:d0:76:
a9:63:54:a7:fb:b9:d5:28:aa:ba:f8:c2:fe:9f:89:
78:36:70:49:e5:eb:18:04:8a:17:54:f6:95:56:31:
68:77:16:87:a4:f3:0e:c1:11:7a:5b:30:96:33:03:
f8:41:09:fe:b1:33:62:1f:06:24:90:80:0d:ce:55:
7c:34:64:25:cc:5d:14:d8:b1:88:18:f4:f0:d1:04:
c5:c9:22:fd:7a:6f:a4:72:a8:05:6d:6e:bd:f9:40:
92:ae:fe:0f:83:3e:57:ea:41:b0:a3:9a:60:d8:e3:
53:f0:46:4f:5e:ef:b4:35:a4:c1:34:a8:d0:52:78:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:2D:9F:C5:97:F3:41:A4:AF:D9:72:C3:93:3D:F7:1C:DC:0F:76
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/UyMtn8WX80Gkr9lyw5M99xzcD3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.255.0/24
185.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fd:87:64:f5:7c:69:85:36:de:b7:e1:11:18:2b:cf:bf:af:
5b:80:a3:4e:b6:08:99:62:26:a7:02:c3:b9:72:9d:23:48:1f:
fb:02:19:c4:e4:d5:0c:cf:84:6a:04:14:22:7c:4c:71:5b:47:
23:ee:28:17:41:09:71:00:60:77:7f:6d:29:39:b0:4e:2e:90:
f5:bc:42:f2:09:f2:7a:02:61:87:26:77:14:be:74:f8:6d:4e:
49:f6:36:32:a0:9d:11:7c:37:e8:16:39:ef:7d:77:ed:6f:0d:
45:07:ab:77:4b:f7:2b:19:dc:a9:b0:82:4d:be:38:a9:84:38:
7f:8e:2b:04:05:2d:31:9f:84:29:f5:9d:99:27:88:23:a8:14:
67:f8:cb:19:58:5e:63:51:ad:47:da:42:03:66:a4:22:15:7c:
d8:8a:02:81:bd:4f:f9:fb:77:eb:e5:9a:61:d1:0b:b2:af:4b:
e6:32:50:4f:77:37:76:e1:4e:76:50:66:0d:5f:f8:77:ab:ab:
3c:71:40:66:b0:7e:10:13:20:d8:cd:64:f2:5b:37:7c:81:1d:
4c:3b:67:71:b3:8a:38:9d:57:28:63:df:37:ca:f8:ee:7b:4e:
79:7c:7b:2d:34:b4:52:9f:4e:f6:cf:9c:63:13:76:a7:ec:3e:
39:6c:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:58 2025 by rpki-client