Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/UVeVjdVR0XI3JpZohEIlexEDALQ.roa
File: UVeVjdVR0XI3JpZohEIlexEDALQ.roa (raw, json)
Hash identifier: xr5h1FaWdme56ehGLo78acyHR4qeaLWrTOOp4CNqpX4=
Subject key identifier: 51:57:95:8D:D5:51:D1:72:37:26:96:68:84:42:25:7B:11:03:00:B4
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 01889705130F84000312C5459E193E4E0FC5
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/UVeVjdVR0XI3JpZohEIlexEDALQ.roa
Signing time: Wed 07 Jun 2023 18:01:12 +0000
ROA not before: Wed 07 Jun 2023 18:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 185.248.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:05:13:0f:84:00:03:12:c5:45:9e:19:3e:4e:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Jun 7 18:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5157958dd551d172372696688442257b110300b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:36:de:71:42:55:7e:1f:49:5a:a5:0e:bc:
bd:6b:82:d6:8b:e6:05:42:81:22:d2:6e:66:20:c0:
aa:df:14:c5:5a:fb:fb:43:6d:7e:94:16:d0:5c:79:
01:f9:c9:18:08:cb:53:c1:ca:aa:f2:32:ee:a5:2e:
8f:8f:95:84:6a:c5:4f:f5:a6:d1:1d:aa:29:be:86:
bb:79:f8:1a:5e:85:a7:86:b5:9e:97:c2:52:0a:86:
af:5f:91:b8:04:ca:cd:80:f0:f6:04:e7:08:cb:da:
f6:b7:68:c5:a4:a6:4b:a0:a1:28:f9:0d:be:6f:80:
f8:74:c1:f8:3b:0b:e7:04:6e:a5:e6:fc:02:11:9e:
12:f0:af:c7:b8:7e:9b:2e:fb:03:ae:4b:87:d0:9f:
2b:fe:91:33:5a:b8:8f:e9:0e:6c:99:bb:e5:83:fe:
eb:10:ba:15:88:90:74:83:e3:88:a2:4d:97:4e:9d:
b2:f5:f8:56:e4:48:f1:8b:98:0a:8f:36:42:ef:b6:
e9:78:7d:28:30:73:7f:6e:59:f4:fe:a9:e1:44:7f:
20:ff:1c:9f:be:50:49:5a:9d:cf:ea:75:af:ba:2e:
21:56:99:39:55:b0:5f:74:4b:39:20:99:55:82:7e:
96:57:52:04:1b:6d:76:68:e5:04:64:9d:96:0f:e9:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:57:95:8D:D5:51:D1:72:37:26:96:68:84:42:25:7B:11:03:00:B4
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/UVeVjdVR0XI3JpZohEIlexEDALQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.0.0/23
Signature Algorithm: sha256WithRSAEncryption
19:7b:00:25:96:95:32:cc:da:ef:b6:eb:7c:a3:7b:97:1c:bf:
16:28:c5:45:6e:91:01:9b:93:77:e8:db:28:c3:47:b4:62:f7:
ab:fd:18:27:78:4b:73:9a:9b:26:bd:bc:f7:6f:17:23:34:6a:
13:42:09:d5:2d:15:b5:82:76:8b:a3:bf:a5:e7:09:05:15:10:
66:c7:94:dd:73:de:40:a4:50:63:4d:54:10:7e:85:a0:6f:a9:
1f:ed:9e:0b:d3:53:ab:aa:d9:c7:08:0d:f2:cf:5d:ac:c7:f2:
a8:4a:23:a1:eb:5d:6a:44:a5:47:a9:d9:ad:b3:dd:dd:a3:27:
35:14:95:ed:0b:50:44:fd:17:6d:0c:c9:51:b2:4f:94:7e:1a:
cc:10:51:cf:f6:95:29:07:e1:6e:8d:1d:e8:80:1e:e4:90:fb:
9f:60:a6:02:ba:16:14:49:c9:b8:0d:df:fe:93:c7:52:5f:28:
1a:63:be:5d:c2:a8:f5:fb:53:13:52:ff:56:7d:14:be:1a:bc:
1e:aa:9d:32:1c:2a:9b:d0:3d:1b:40:44:51:3e:5b:01:42:88:
dc:13:56:6d:9a:58:ff:65:8b:b2:7e:10:c7:78:60:b0:a1:0b:
8d:12:0e:92:e6:df:68:07:ce:d2:f3:c3:cc:f9:0f:c1:ef:67:
20:02:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:11 2025 by rpki-client