Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/UcmLQoM5c_t5BbWkYH5dZY1AzYY.roa
File: UcmLQoM5c_t5BbWkYH5dZY1AzYY.roa (raw, json)
Hash identifier: VUuugLkJOD4UoClLZw7hrwwbsXjsqWsCH1sgmwKgSxI=
Subject key identifier: 51:C9:8B:42:83:39:73:FB:79:05:B5:A4:60:7E:5D:65:8D:40:CD:86
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 018B80D04A1A4E640105E8CAD770113A03BB
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/UcmLQoM5c_t5BbWkYH5dZY1AzYY.roa
Signing time: Mon 30 Oct 2023 13:40:15 +0000
ROA not before: Mon 30 Oct 2023 13:40:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.233.36.0/24 maxlen: 24
195.225.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:d0:4a:1a:4e:64:01:05:e8:ca:d7:70:11:3a:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Oct 30 13:40:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51c98b42833973fb7905b5a4607e5d658d40cd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:8d:a1:74:84:64:d8:e0:31:29:23:01:97:
ae:fb:7d:73:7c:86:30:77:0a:d1:5a:37:60:85:5a:
7b:62:57:b0:db:d4:9d:8b:27:06:5a:f8:4f:6f:36:
89:ed:53:48:4a:79:d7:aa:62:61:b3:f6:0b:ee:eb:
65:1b:8d:72:15:26:06:24:a9:46:a2:55:9b:22:75:
05:0d:fb:c3:f6:8d:81:66:8c:ef:98:2c:f3:f7:90:
9a:91:da:34:6c:f8:0e:b7:df:e4:2e:a7:81:e3:af:
42:d3:6b:91:f8:fa:97:ff:38:b6:2d:4f:cd:0c:68:
a4:28:ba:8f:f3:c5:cf:be:00:72:da:f4:89:7f:8a:
c5:49:a8:cb:c2:77:e2:35:3a:74:2f:06:92:bd:a0:
3a:6e:ae:b9:8a:1a:1a:6f:1c:55:d4:39:f2:d3:de:
da:3d:54:cb:ca:93:e8:2c:66:94:cb:72:6d:93:a2:
6a:07:83:8c:b4:aa:eb:f0:97:5b:54:77:1f:89:eb:
eb:1a:05:36:89:29:70:7c:38:ae:7f:2b:be:b7:b8:
93:78:a5:d9:6f:27:4d:6a:58:81:b6:02:1f:0e:f6:
1b:47:f0:5a:91:00:a7:b3:a5:3a:b8:a7:06:9a:fd:
34:33:6a:37:83:33:63:d7:17:55:ca:e1:17:27:6a:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:8B:42:83:39:73:FB:79:05:B5:A4:60:7E:5D:65:8D:40:CD:86
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/UcmLQoM5c_t5BbWkYH5dZY1AzYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.36.0/24
195.225.98.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c4:0c:2b:db:64:9c:2c:94:e4:58:12:3e:54:44:9a:fc:07:
0e:d0:a7:3f:1a:be:95:bc:3b:62:7c:d6:57:46:bf:3d:98:32:
a6:88:a9:0c:83:81:4b:d6:dd:0b:85:c3:57:a5:e0:53:47:b1:
db:72:f1:e5:81:95:7a:0d:b6:16:ff:fb:8e:72:db:6b:a2:e8:
65:e2:87:c0:5b:23:e1:38:05:1f:42:f0:f9:6e:10:53:aa:fc:
bd:f3:ee:b8:c6:67:9d:fd:d2:49:f2:dd:0b:27:0b:8c:44:06:
24:41:c1:06:59:d5:0d:a7:0a:10:b5:ed:d3:3a:8a:b5:80:22:
ef:38:0e:2c:f0:e9:dc:6d:94:55:6c:57:e5:86:eb:aa:29:fd:
e7:6b:e1:41:3a:f3:01:d9:90:53:3e:8e:54:00:45:6e:9f:75:
77:ca:a0:6e:3f:5b:92:3b:8b:d3:fc:3a:f1:94:59:40:e2:77:
f5:64:69:0c:7c:32:65:8f:54:97:62:36:c4:04:06:d8:fa:ce:
78:27:f7:e2:ce:73:46:b8:0b:7b:32:03:94:06:5d:47:2f:76:
3d:76:a6:92:84:06:9f:c0:50:f2:ec:f6:5e:5f:a3:0e:ab:c3:
a3:d2:ff:15:f2:1f:e7:66:9c:5a:54:2e:61:b1:f0:08:02:a4:
a5:60:31:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:06 2025 by rpki-client