Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/UoFhfe1D4fv5504pD16hAMtOHqM.roa
File: UoFhfe1D4fv5504pD16hAMtOHqM.roa (raw, json)
Hash identifier: f5OjLqYpJfmM6P+Sc+etueFJmxpiBV6zei8gZZWeXpE=
Subject key identifier: 52:81:61:7D:ED:43:E1:FB:F9:E7:4E:29:0F:5E:A1:00:CB:4E:1E:A3
Certificate issuer: /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial: 01941F8BFE8AE4FF98AA8971BF106B2676FF
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/UoFhfe1D4fv5504pD16hAMtOHqM.roa
Signing time: Wed 01 Jan 2025 01:47:35 +0000
ROA not before: Wed 01 Jan 2025 01:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39516
IP address blocks: 194.50.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:fe:8a:e4:ff:98:aa:89:71:bf:10:6b:26:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Validity
Not Before: Jan 1 01:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5281617ded43e1fbf9e74e290f5ea100cb4e1ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:2e:84:b2:2a:a0:0d:82:33:7e:65:1b:e2:
65:d2:f9:70:91:28:fa:66:4f:5e:cc:f9:17:85:14:
d2:e1:a4:50:cb:2e:c5:97:bf:10:81:f1:b4:c2:2a:
4e:e1:93:cc:c0:fe:78:b1:63:49:01:c5:e6:53:ec:
78:42:56:9e:b4:4a:62:91:0b:2d:70:d5:54:64:a5:
29:aa:81:bc:d0:77:bd:5a:f6:0d:44:17:c4:f4:97:
e9:44:75:c9:6b:94:8d:09:9a:cd:c0:31:b1:6a:b9:
58:71:96:2e:94:d1:f8:34:bb:3c:5f:49:a5:79:91:
04:0d:4f:3b:7e:11:0f:c1:7a:0a:de:b9:36:26:40:
bf:f7:9c:14:bc:88:89:55:4e:6d:a9:b7:0e:89:5c:
ad:4f:48:61:ef:61:e5:71:38:00:4b:f2:f5:53:1e:
36:d6:36:3b:2e:64:8e:a7:f2:ea:d4:78:2f:61:e5:
ec:58:10:f8:ac:7f:b5:2e:f8:a8:c8:6e:e5:f6:00:
cb:70:90:aa:3c:66:fc:49:2e:5d:7e:d1:ef:6e:aa:
ee:bb:c6:bc:88:c4:d4:85:d8:73:10:6c:e7:6c:f8:
11:06:aa:40:e1:bb:12:87:ec:19:70:10:a2:38:b7:
5d:b5:02:f4:0f:32:7c:c6:3c:b1:e2:02:c4:71:da:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:61:7D:ED:43:E1:FB:F9:E7:4E:29:0F:5E:A1:00:CB:4E:1E:A3
X509v3 Authority Key Identifier:
keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/UoFhfe1D4fv5504pD16hAMtOHqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4b:63:b9:24:ba:f5:ba:26:21:97:73:ce:fe:6f:d1:54:0e:
04:1f:1f:33:ca:5d:3b:65:ec:77:b1:f6:c1:60:26:24:de:7d:
85:c6:3f:98:9a:ff:e4:1a:9b:0f:27:fc:4a:e4:63:9e:53:11:
b9:2d:8c:29:25:d2:5d:db:73:37:45:a7:48:00:a2:f2:8b:47:
83:49:65:a7:d2:83:41:83:9b:9c:04:f7:2a:11:e5:19:ca:ee:
78:97:53:8e:ba:08:33:64:6c:9e:b7:81:ea:12:1a:48:f8:39:
4e:5c:c6:5d:24:b2:2d:14:9a:da:e4:b5:12:1c:c3:5a:51:0f:
47:b4:cc:26:34:d8:16:dc:05:fe:db:80:65:4a:cc:1b:1a:f0:
a0:bb:1e:e8:bb:9f:39:3d:e9:8f:6b:6a:01:2e:44:0f:a9:54:
b3:12:c3:28:45:54:10:15:35:9a:aa:fd:50:68:59:80:c2:f2:
3a:07:f9:5c:02:42:db:96:a2:bf:dd:62:4e:37:c7:86:13:6a:
44:36:4b:a9:b7:49:7d:9e:8b:db:ea:00:98:59:a0:e0:96:54:
35:09:ce:a0:0b:23:0b:53:c7:fb:d0:0f:b5:9f:38:ed:95:4b:
ad:89:86:da:05:ce:0b:e3:bf:ae:b2:01:1c:c8:60:7f:b2:57:
e1:bc:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:41 2025 by rpki-client