Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/UJ_XpDmmIDl8LNm-we0fMHDUKHo.roa
File: UJ_XpDmmIDl8LNm-we0fMHDUKHo.roa (raw, json)
Hash identifier: HUV+zXa5m96O5QiGf90TomYx4xutIIrNWiXFbD6WTuA=
Subject key identifier: 50:9F:D7:A4:39:A6:20:39:7C:2C:D9:BE:C1:ED:1F:30:70:D4:28:7A
Certificate issuer: /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial: 01948CA933B49FF551D536F3535AD6D36147
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/UJ_XpDmmIDl8LNm-we0fMHDUKHo.roa
Signing time: Wed 22 Jan 2025 06:18:06 +0000
ROA not before: Wed 22 Jan 2025 06:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197911
IP address blocks: 188.120.252.0/24 maxlen: 24
2a01:230::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:a9:33:b4:9f:f5:51:d5:36:f3:53:5a:d6:d3:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb500c9002321f03964583710b7baa4597341213
Validity
Not Before: Jan 22 06:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=509fd7a439a620397c2cd9bec1ed1f3070d4287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d1:e9:3e:48:e4:eb:73:10:f2:92:66:29:d4:
2a:26:c7:e1:82:f3:44:8d:71:7a:40:c2:1f:c6:85:
b9:b2:35:6d:a5:8b:6d:95:ed:9c:19:aa:c7:8e:cc:
5d:a5:ce:ae:49:af:61:3f:98:a1:c3:27:2a:23:6f:
eb:8b:a7:49:1e:8e:79:de:00:a6:09:d5:e1:85:46:
63:40:2d:ef:ec:93:f0:b4:aa:27:a2:eb:7c:e7:6c:
67:a5:71:9a:63:85:c0:8e:88:ee:2d:78:14:04:c2:
22:c7:13:87:ec:11:f7:19:f4:e0:37:22:16:11:c2:
b0:d1:50:b1:1a:c0:d2:b9:08:e3:98:c1:0a:45:59:
71:89:e5:b0:f5:cb:3b:20:b0:75:5e:90:a6:94:fe:
c6:b5:46:e5:18:db:14:33:eb:11:4f:5a:ea:bb:f2:
4f:a9:5a:fa:da:55:0c:d1:fc:58:ee:8f:a3:36:ea:
9c:11:5a:90:cf:8e:fe:01:c1:7b:c6:f6:2a:21:c9:
df:6f:be:b2:de:f6:2e:95:e0:92:6d:24:bf:b6:8a:
07:78:70:ef:e6:5c:1e:26:95:a1:98:1c:97:e3:34:
a3:fa:fd:c1:ad:9f:80:6c:35:57:00:c1:2c:eb:b3:
5c:20:0a:4c:6d:4e:02:15:67:69:e1:19:3c:b3:d5:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:D7:A4:39:A6:20:39:7C:2C:D9:BE:C1:ED:1F:30:70:D4:28:7A
X509v3 Authority Key Identifier:
keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/UJ_XpDmmIDl8LNm-we0fMHDUKHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.120.252.0/24
IPv6:
2a01:230::/48
Signature Algorithm: sha256WithRSAEncryption
4c:3e:cb:3f:2a:7a:24:36:cc:0d:02:e0:f9:a2:3c:fb:5b:c4:
00:d3:c7:f4:e3:78:65:af:48:64:5d:5b:c3:85:69:91:5f:0b:
a7:39:e1:29:87:d8:e8:ae:0d:0b:39:89:cd:1a:fa:df:2c:f0:
08:1a:62:39:01:1e:f3:d5:2c:99:6c:15:17:24:12:cd:95:04:
8b:55:ff:89:d0:da:99:52:aa:08:ff:b5:0c:dd:81:25:20:a7:
58:51:f0:55:95:2d:5f:ed:4d:43:27:01:c6:a9:f5:76:64:b2:
8a:5e:e8:9b:f6:77:df:9e:b1:b8:e3:11:02:5c:5a:27:01:51:
59:33:b7:56:01:fc:df:b1:9e:29:29:f2:55:b1:51:da:38:d4:
07:a7:d5:6d:74:6e:6e:77:25:8a:33:71:b3:4f:67:2e:21:62:
24:91:16:a7:91:e7:c4:30:09:57:37:f4:52:88:c8:85:df:4c:
4a:e9:b8:6e:ed:09:c0:5a:91:20:34:ec:24:18:73:3a:cd:86:
af:c9:fa:d5:41:ce:43:31:54:82:76:b1:23:88:c5:35:b2:9a:
b7:d1:bd:d4:58:bd:c2:c8:6e:cf:23:c1:bd:f1:bd:f3:ed:48:
8e:ee:7b:69:92:44:76:87:f3:e9:c9:be:2e:bf:6c:d3:2a:ba:
40:a1:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:15 2025 by rpki-client