Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UJXvhibxw_8TtOKnD--xEYn-Zww.roa
File: UJXvhibxw_8TtOKnD--xEYn-Zww.roa (raw, json)
Hash identifier: OjpDb9p6TT8FBXJ45Y7m0jK/9WUgig2slzPx0C3W9Ns=
Subject key identifier: 50:95:EF:86:26:F1:C3:FF:13:B4:E2:A7:0F:EF:B1:11:89:FE:67:0C
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D9E438507BE63A4E692777DA7E68
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UJXvhibxw_8TtOKnD--xEYn-Zww.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 88.80.134.0/24 maxlen: 24
185.58.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d9:e4:38:50:7b:e6:3a:4e:69:27:77:da:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5095ef8626f1c3ff13b4e2a70fefb11189fe670c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:7b:5f:1b:b8:85:5c:9b:4f:f6:f8:4b:39:
70:38:2c:b9:5d:f1:5f:03:3b:9d:d9:2f:d4:27:6e:
d9:66:c4:46:bd:f5:9e:7e:e2:25:fe:b8:12:20:56:
d1:73:42:63:46:60:a8:54:28:2f:08:e3:1d:8c:70:
4b:34:33:b2:19:d4:55:c2:4d:dd:dd:de:cb:31:d3:
23:b7:32:70:9e:44:39:1c:2e:43:00:8e:c4:d9:5a:
ae:81:67:8b:e3:00:af:26:a6:f4:04:82:41:57:5b:
43:c6:f8:c5:e7:f4:6e:39:dd:ca:74:2d:82:13:a1:
08:14:5a:96:7d:45:f4:f8:a3:9c:e9:5a:17:ea:46:
dc:c6:3e:fd:a9:b9:05:d7:6d:00:06:18:a7:80:ad:
61:d6:1e:29:db:8d:ae:1a:15:38:6a:46:89:4c:08:
19:a6:b9:8f:b0:6c:68:9f:4c:dd:1d:0d:b4:a5:cb:
7a:f5:8b:69:3b:45:0c:0a:d2:da:2f:4b:64:92:ef:
7f:13:92:ff:97:b1:f2:92:ef:27:74:3f:b9:40:02:
d5:15:3e:89:5b:5e:a8:58:a0:7a:01:c6:af:41:c9:
59:c0:fa:86:cc:68:bc:ac:0b:f2:41:17:28:33:ae:
fd:30:b9:4e:a4:4b:99:15:a4:e8:99:1c:c9:53:c6:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:EF:86:26:F1:C3:FF:13:B4:E2:A7:0F:EF:B1:11:89:FE:67:0C
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UJXvhibxw_8TtOKnD--xEYn-Zww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.134.0/24
185.58.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:90:70:88:8c:ba:16:05:61:88:b3:27:4d:ff:ed:f1:82:7a:
78:71:bb:96:e0:27:09:b4:5b:fe:3f:58:02:55:72:6d:6f:d2:
76:ec:ac:f7:a4:31:f4:74:a4:80:75:88:56:41:f4:90:1e:d8:
2f:e9:d3:7c:e2:ab:b7:d3:f8:75:e6:2f:d5:2c:93:23:3f:0d:
9f:05:39:30:f9:39:8e:22:56:60:89:d8:42:e5:30:6d:1a:a7:
1b:e4:fe:4a:6e:91:21:a8:f1:99:70:bb:22:c3:42:47:e7:39:
66:44:5c:bf:cc:61:39:62:6b:3f:f7:0b:2d:f3:df:d4:f6:1a:
e0:15:6a:1e:07:e1:15:d4:56:b2:9c:d1:f3:6c:aa:90:64:85:
dc:d6:5d:09:21:f4:a3:c7:63:03:1a:60:46:39:d9:40:2f:5c:
a4:a8:38:2d:c6:b1:92:dc:3f:c6:4f:02:29:df:61:ab:70:ef:
b2:a8:0e:be:93:03:55:80:56:bd:02:f6:a8:7a:64:c4:98:c4:
87:14:8a:62:d5:4d:c5:1f:96:ac:ec:8f:8b:79:74:2d:e9:2d:
d7:f3:e3:49:0c:71:be:1f:9c:59:d5:37:23:86:66:91:9c:78:
12:ba:73:d8:05:e5:44:e9:7e:67:06:7b:fc:ff:f0:2f:25:20:
8d:b8:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:58 2025 by rpki-client