Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/UfJT_aS19mzoORVdpK24qjeDUjc.roa
File: UfJT_aS19mzoORVdpK24qjeDUjc.roa (raw, json)
Hash identifier: ht0zztqZ/4ozSYqXw5zEW4+5Vd0pl0kroNMfxLASrQU=
Subject key identifier: 51:F2:53:FD:A4:B5:F6:6C:E8:39:15:5D:A4:AD:B8:AA:37:83:52:37
Certificate issuer: /CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Certificate serial: 018573160DB0553137EE17668A1315CB2EC1
Authority key identifier: 83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/UfJT_aS19mzoORVdpK24qjeDUjc.roa
Signing time: Mon 02 Jan 2023 15:25:03 +0000
ROA not before: Mon 02 Jan 2023 15:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42849
IP address blocks: 193.200.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:0d:b0:55:31:37:ee:17:66:8a:13:15:cb:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Validity
Not Before: Jan 2 15:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51f253fda4b5f66ce839155da4adb8aa37835237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:98:88:bd:b6:22:81:b4:7c:8f:6c:2b:1a:
8a:b8:8c:58:bf:a1:b7:4f:fd:69:fa:48:98:cc:79:
4b:4d:2d:89:59:c7:3f:17:76:a4:bc:44:bf:da:5d:
e5:30:ff:fe:96:be:6a:b7:69:bf:dd:0d:82:98:52:
cb:3e:8b:c4:9c:09:5d:ed:97:a1:48:f9:73:9f:d4:
ae:e9:9d:78:bb:fc:84:68:61:c1:3e:69:49:10:c7:
65:c1:09:d1:3a:cc:63:4f:4a:d2:c6:4c:da:81:b3:
3c:7f:68:c3:41:cb:e7:82:70:18:3d:e7:7f:b0:62:
fa:af:75:f3:8a:2b:dc:48:fb:c6:b9:06:f2:ed:5b:
e0:ec:35:0e:8c:36:19:03:dd:a8:88:98:4a:39:04:
f0:ac:88:a1:76:cc:a5:70:60:90:d1:08:27:9b:04:
87:59:58:10:6a:3c:35:50:27:55:cc:ad:c1:af:9a:
f8:f6:d1:8e:3f:74:80:c0:a1:fe:9a:24:12:f8:54:
b3:78:d3:7b:55:db:9b:9b:a0:b8:55:bb:66:4f:e7:
9a:72:72:d3:25:ca:ed:82:04:5b:4c:a2:94:62:00:
cf:ac:d0:59:ce:87:69:01:3b:6b:54:1c:7a:66:7c:
b9:62:3e:1c:3c:d6:d8:05:4e:68:4b:14:1f:da:7a:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F2:53:FD:A4:B5:F6:6C:E8:39:15:5D:A4:AD:B8:AA:37:83:52:37
X509v3 Authority Key Identifier:
keyid:83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/UfJT_aS19mzoORVdpK24qjeDUjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/g6fIC9JvzSm5BV395oM62wUkVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.131.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:73:9b:ae:f9:85:03:f2:ba:21:b9:8c:d2:02:08:9a:7d:4a:
38:56:a0:ba:09:97:32:ca:b9:8f:99:e2:03:c6:82:96:1d:fc:
42:96:e0:ef:0f:57:a4:0c:da:b6:2e:7b:75:fa:f0:6b:df:67:
de:d2:76:3e:db:9a:ee:3d:fc:dc:7a:5f:f3:ea:74:bd:51:2b:
cf:44:c4:89:e9:15:d6:1e:5b:57:7a:a0:c3:52:c1:69:ca:0a:
ad:04:1e:3e:ab:ea:fa:c2:53:b1:75:d1:b4:97:2e:6b:0c:fd:
0f:a6:5d:b2:3a:43:2f:ab:ea:d5:50:f2:68:bc:38:98:db:6f:
bd:ac:01:1a:1e:23:47:51:29:01:c8:a1:f3:74:4d:18:c4:81:
aa:d1:7f:72:8b:f4:e0:16:70:2d:b6:18:27:3b:79:70:86:07:
0b:c9:49:24:6e:62:de:47:ce:87:ee:e9:bf:92:e6:0d:cc:ed:
f7:0b:e4:1a:51:60:a5:64:0e:eb:50:40:3c:b9:12:5e:de:4e:
b9:80:76:94:d4:ca:bc:2d:74:53:ac:ef:49:44:cf:84:f4:25:
cf:18:3e:2a:1a:f9:9f:22:c8:07:61:d7:05:06:75:b4:a2:38:
c3:a0:f7:dc:97:1a:ba:0f:62:08:7b:ff:34:b9:5f:f6:4f:e6:
3b:6d:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:54 2025 by rpki-client