Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/UPg3vbNeBa0K3r83hVpRQlJtNtA.roa
File: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (raw, json)
Hash identifier: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=
Subject key identifier: 50:F8:37:BD:B3:5E:05:AD:0A:DE:BF:37:85:5A:51:42:52:6D:36:D0
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0194266AFD0E5B716F534299D9DC52E6D266
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/UPg3vbNeBa0K3r83hVpRQlJtNtA.roa
Signing time: Thu 02 Jan 2025 09:48:53 +0000
ROA not before: Thu 02 Jan 2025 09:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 91.195.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:fd:0e:5b:71:6f:53:42:99:d9:dc:52:e6:d2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jan 2 09:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50f837bdb35e05ad0adebf37855a5142526d36d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:da:d0:aa:b0:19:ea:ef:c7:29:20:55:c8:
92:59:0e:82:71:05:d1:b5:38:fd:50:11:ed:e0:09:
f7:f1:7b:ae:31:73:81:bd:8c:3c:25:7e:65:52:02:
72:6b:70:aa:c0:95:d0:78:22:ed:81:80:d5:94:56:
ee:0a:20:a9:84:18:96:4f:99:e6:ba:8a:f1:b0:7d:
25:5d:70:56:26:0a:20:31:ec:4f:04:8a:2c:ba:4d:
5e:d3:fe:68:79:1d:f8:8d:c2:65:dd:87:b0:51:57:
00:43:ba:f6:34:13:69:5e:75:38:4f:b1:ba:bf:7e:
b3:b6:f6:aa:4c:33:23:89:cf:a6:26:4f:1a:d5:3a:
be:fb:dd:94:38:88:4b:79:c9:c7:52:47:d5:d6:ee:
80:31:45:94:dd:85:ea:c3:34:53:a7:34:95:85:e4:
cc:f3:d4:fc:b3:76:4e:72:7f:1b:bb:23:6d:0b:c3:
c1:33:d4:93:ba:c4:31:17:1f:de:81:6f:d5:b1:35:
09:34:8e:0d:96:f2:35:71:8e:b2:51:62:27:66:15:
75:1f:a9:51:4e:b8:f1:0f:99:a5:6c:c5:0b:ad:3b:
7e:f1:eb:0b:27:e4:b4:c8:f7:d4:db:26:eb:8f:40:
55:34:e8:cf:44:46:4a:11:29:49:b9:bd:ff:68:ce:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:37:BD:B3:5E:05:AD:0A:DE:BF:37:85:5A:51:42:52:6D:36:D0
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/UPg3vbNeBa0K3r83hVpRQlJtNtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5b:87:61:e6:32:f5:42:0c:4d:f3:62:67:e7:2c:de:46:b7:
69:0d:90:08:6a:2c:68:73:52:89:67:c4:4b:ad:6b:c5:92:ad:
ed:38:46:9e:ca:d1:d6:b6:f3:c6:b9:51:63:80:3a:d8:80:65:
b5:a1:65:6e:0b:b0:5e:69:47:ad:43:10:f8:54:19:ad:dd:39:
72:11:35:95:bb:96:dd:2c:2e:89:c0:f1:0a:09:81:f6:07:f2:
73:c9:e9:2c:10:99:24:d0:ee:10:d6:34:0a:f8:c9:90:49:41:
cd:d5:c8:1d:27:3f:38:24:24:5c:dd:f0:dc:de:2a:1a:ff:a8:
73:0b:b1:fd:a6:8a:9a:7f:af:4b:00:a8:fe:36:e5:ab:43:ea:
d5:de:dd:d4:02:04:00:35:ba:0b:93:01:79:8b:df:4a:7f:a7:
0d:42:62:84:e9:64:bd:f3:c2:b1:12:23:4e:3a:e7:16:0b:75:
45:1b:5d:07:13:50:5c:df:8a:de:ff:a9:a9:a5:f1:fa:27:a8:
22:3d:e9:16:fd:26:b5:a5:37:63:c1:30:4b:4a:bc:20:3f:5c:
0d:b7:59:12:f6:22:40:08:de:93:dc:2a:6c:c2:4d:93:01:70:
a5:d4:ea:44:3a:44:4b:db:3d:84:9c:0b:c2:f1:ae:83:c1:9f:
32:25:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:37 2025 by rpki-client