Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UMdq-Zir5QLhODQ2SocqfK_DdqI.roa
File: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (raw, json)
Hash identifier: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=
Subject key identifier: 50:C7:6A:F9:98:AB:E5:02:E1:38:34:36:4A:87:2A:7C:AF:C3:76:A2
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5BDD9785776BF84D265E91644933
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UMdq-Zir5QLhODQ2SocqfK_DdqI.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197168
IP address blocks: 95.158.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5b:dd:97:85:77:6b:f8:4d:26:5e:91:64:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c76af998abe502e13834364a872a7cafc376a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:34:68:72:d2:d3:c7:25:83:3d:49:d4:b8:
cb:12:63:43:a2:2a:1b:e4:a5:0f:29:5e:69:bb:90:
88:9b:43:08:25:ee:5e:79:78:a5:b7:c2:f9:de:04:
6f:6b:3d:cd:f3:78:ff:d6:bc:3e:ff:0e:97:11:71:
11:1a:45:87:21:d0:a3:bf:61:f2:1c:98:12:80:a9:
c0:b4:5f:9d:d6:85:4c:21:27:07:3a:66:f0:fe:1a:
69:af:fc:89:03:3d:5f:7f:9e:4a:26:4e:d5:4c:00:
e9:a0:20:9b:3b:42:c1:30:73:b8:c1:d4:98:33:c5:
eb:f1:76:66:f5:13:ac:5b:e1:6a:43:66:7f:72:5a:
9f:02:b0:64:a2:e9:a7:18:10:f5:28:93:cb:4e:89:
e5:9f:ce:12:87:1a:4e:fe:1b:07:f1:da:4c:85:2e:
ca:4c:65:77:95:c5:df:04:4e:48:a5:96:1e:df:40:
d9:bc:28:b7:cf:ec:85:36:cb:30:d8:31:f3:16:8e:
a1:86:5a:a1:00:22:a2:64:43:54:e3:88:99:af:db:
49:6d:7a:fc:6a:b1:65:64:28:66:4c:32:d4:d2:7c:
64:ce:98:9d:ba:79:87:a9:78:15:ae:fc:03:33:d5:
2d:ed:9b:af:16:49:57:12:2d:78:75:31:d9:c0:b5:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:6A:F9:98:AB:E5:02:E1:38:34:36:4A:87:2A:7C:AF:C3:76:A2
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UMdq-Zir5QLhODQ2SocqfK_DdqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.142.0/23
Signature Algorithm: sha256WithRSAEncryption
63:64:97:74:54:88:1f:5c:47:84:1d:07:e9:61:f2:0b:ae:f7:
88:60:f7:2b:3d:96:1c:89:10:08:e9:48:fd:84:2a:be:1e:52:
55:d7:f7:46:27:64:88:80:f0:37:c3:48:19:40:5d:81:5f:04:
1b:12:86:24:39:50:2a:f4:d9:3d:97:f5:b8:3e:b9:8d:3a:9e:
be:94:74:42:37:4f:44:2f:9e:d7:32:b5:75:60:a2:4b:26:d9:
35:04:b5:d8:eb:f0:2a:83:da:ca:b1:78:55:0e:d3:cf:57:79:
99:5e:f3:92:48:8e:42:02:ba:8b:91:99:41:76:8b:7e:45:38:
ae:30:93:41:00:8b:60:bd:1a:51:61:1b:11:7a:f3:56:2f:bc:
19:04:c9:91:9f:a7:d9:19:84:64:22:1b:64:ba:1a:4f:50:0c:
e9:b4:21:35:c7:2a:9d:d7:6a:50:ae:b9:de:4d:d2:01:f2:a7:
51:e2:9c:40:bb:df:13:58:01:06:25:3d:3d:00:0a:dc:ae:40:
2e:69:3a:61:f9:46:b8:72:72:98:ea:f9:5a:87:3a:bf:b3:db:
e2:ec:06:98:83:81:d3:88:88:9f:57:3b:f7:09:55:01:40:ee:
ac:21:70:b0:82:d9:5e:86:74:ee:12:b4:8b:d5:73:68:b3:b9:
02:d6:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:20 2025 by rpki-client