Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/ubaYGhsK3un9FzpeOuJImEsVY0k.roa
File: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (raw, json)
Hash identifier: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=
Subject key identifier: B9:B6:98:1A:1B:0A:DE:E9:FD:17:3A:5E:3A:E2:48:98:4B:15:63:49
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 019427B60807D106F7590DDB0F920C9A526A
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/ubaYGhsK3un9FzpeOuJImEsVY0k.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8893
IP address blocks: 193.101.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:08:07:d1:06:f7:59:0d:db:0f:92:0c:9a:52:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b6981a1b0adee9fd173a5e3ae248984b156349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:26:27:b5:14:c1:25:d8:62:a5:9c:e5:dd:
82:ba:2a:5e:63:a1:2b:04:78:5c:ff:ba:a7:31:09:
b6:ad:6c:9e:6d:de:e9:c5:4d:71:ae:6b:93:ff:11:
63:0a:7d:47:80:ca:7a:8b:6b:c6:54:b6:81:f1:68:
86:32:e7:3d:38:03:e3:8f:f4:24:82:7a:74:84:b6:
54:89:a8:10:89:a2:eb:8d:2f:38:9a:57:c5:cc:7e:
12:09:33:75:25:ad:da:4a:4e:4e:01:55:c4:08:42:
e8:81:e0:d3:4e:16:2f:68:c2:a7:b7:0a:41:f7:67:
c1:81:c9:b7:ab:0a:99:7c:89:60:d5:c8:2f:5c:54:
15:09:36:b8:91:3e:4c:9b:71:17:10:c5:d5:b3:c9:
17:40:5a:b3:7f:19:23:72:be:53:e1:b7:47:93:1c:
8a:31:07:c9:ae:7d:a4:45:61:69:5e:07:e7:75:cc:
b4:3f:69:3f:06:06:12:1a:ab:73:d3:2a:6a:43:4c:
42:a7:01:ce:36:3c:b4:e7:a0:84:c1:d3:7c:a2:68:
72:70:25:14:3e:3b:43:f8:61:98:db:98:d8:e9:b9:
d7:70:6d:50:70:02:49:4c:95:ed:00:17:8d:2c:cd:
b3:dd:92:2e:11:4c:8a:88:5f:aa:3c:dc:da:44:91:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:98:1A:1B:0A:DE:E9:FD:17:3A:5E:3A:E2:48:98:4B:15:63:49
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/ubaYGhsK3un9FzpeOuJImEsVY0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.47.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8d:99:0f:bc:f8:54:ad:3e:af:a0:98:a3:25:40:2b:c4:27:
c3:dd:03:de:69:94:6e:e9:d5:ad:7b:cc:db:6d:1c:ee:42:0e:
ab:de:5e:87:9d:a3:7c:90:82:ce:56:07:13:f9:01:ab:16:0d:
8b:e4:53:c9:9b:b5:39:f3:2f:a6:ca:37:08:12:27:a7:ec:cb:
3e:80:0a:db:a2:37:11:13:38:8f:26:5c:df:33:87:1d:4d:9e:
08:d6:4a:3c:f3:65:46:db:d8:fc:20:39:be:45:5c:05:9b:3d:
b8:22:8a:d1:29:d5:cc:d4:ed:66:eb:86:60:cf:a3:b2:3f:d8:
bb:d3:ec:de:aa:e3:7e:ac:d9:1e:17:cc:0e:1a:ff:7a:26:3e:
bf:78:ce:e1:8e:98:61:34:23:2f:ff:f7:3c:66:1f:be:a8:0a:
39:a8:af:6f:d3:22:02:42:ff:10:0a:e4:18:7c:7e:19:02:76:
6d:0a:f6:02:81:1b:64:8d:b3:44:89:87:61:89:fb:ea:70:f0:
1c:94:fb:e2:b5:68:51:f6:0e:1a:8e:89:2a:2e:ad:67:39:96:
f1:b1:2c:ed:bf:37:27:66:47:5e:36:0b:48:78:d7:e2:eb:ac:
35:a0:64:d1:56:5d:37:f7:94:e7:2d:b9:35:ca:f4:03:6b:da:
68:09:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:43 2025 by rpki-client