Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa
File: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (raw, json)
Hash identifier: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=
Subject key identifier: 51:BE:24:E2:D9:AF:B8:1B:B8:CA:D4:CB:89:37:9C:4D:4E:2C:B0:4C
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BC57F101F32180E793242DD085260
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29085
IP address blocks: 212.183.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c5:7f:10:1f:32:18:0e:79:32:42:dd:08:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51be24e2d9afb81bb8cad4cb89379c4d4e2cb04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:64:79:ca:bb:e5:76:ee:ba:7e:59:c1:fc:
69:e0:7e:91:f0:70:34:30:76:09:64:63:ea:e6:bb:
f3:74:6f:76:da:ac:50:d1:07:ba:fe:5d:a9:e2:c6:
95:b9:c8:fd:74:3f:a0:88:2b:5c:09:1f:79:2c:35:
f8:97:ef:94:8a:b8:3e:46:77:61:5b:41:c2:89:16:
6a:dd:4a:3f:a3:62:9d:ae:45:a9:52:03:66:95:c3:
e5:46:33:d5:60:28:27:79:4d:a5:ba:55:5d:58:62:
70:7a:5b:a6:e2:d8:e7:06:37:42:6d:af:db:04:7f:
03:9d:dd:bf:2b:5d:1c:f0:09:6b:2f:71:22:b5:44:
37:f4:92:93:8a:f5:05:54:23:47:be:9a:81:2c:9b:
76:72:89:56:9c:f8:e1:58:26:e4:60:fe:4a:8d:14:
48:c2:93:6c:df:44:93:56:18:d4:c9:eb:61:f2:45:
af:c4:2a:68:f7:af:fd:e7:bb:aa:7c:e0:ec:a2:06:
ea:ec:d4:aa:1f:18:6a:6e:45:c2:b5:1e:4b:a2:9a:
24:21:38:1f:46:c4:43:41:d7:68:d3:51:b6:c8:16:
5a:78:5a:31:5d:dc:74:de:40:c8:a1:f6:02:eb:25:
a9:b0:ea:ff:a7:b8:d0:e1:60:6a:34:4e:9c:c7:44:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:24:E2:D9:AF:B8:1B:B8:CA:D4:CB:89:37:9C:4D:4E:2C:B0:4C
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.88.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e9:c3:93:fc:42:92:51:58:21:1b:67:8a:fb:a0:c5:d9:34:
58:2b:70:3c:ef:ae:e8:63:48:f8:3c:b2:e4:c7:5a:fe:fd:98:
5c:83:47:cb:fc:0b:47:a1:0a:e2:14:f8:8b:b9:f4:ac:9d:6a:
04:9e:87:1f:83:a2:1e:21:9a:b9:5f:d9:02:3e:76:86:8a:d8:
78:ea:9e:4b:ed:42:78:e6:ba:11:1b:0e:53:74:3e:7e:e3:54:
b3:e8:72:19:09:03:02:89:ed:2e:7e:6b:bf:ac:7f:ee:14:7e:
df:27:8a:d2:29:28:85:a0:7f:97:f9:40:4e:8a:f9:1b:3f:75:
3a:03:96:6b:47:a7:e8:50:61:45:ca:d7:8a:2a:97:73:7d:e3:
aa:a3:93:c1:bf:98:bf:f4:51:e4:e5:35:00:a5:c3:2c:bb:d6:
4b:e6:15:69:28:9d:8f:cd:4d:01:65:c9:60:a9:29:f9:b5:5d:
0d:1f:dd:f1:99:d3:c0:93:81:48:1c:4f:84:db:bc:42:b7:09:
a3:28:38:98:8d:31:ff:8c:37:36:e5:20:83:ba:9d:4a:6c:bc:
c0:c3:de:ba:e9:2d:6e:ce:7d:be:6b:33:e0:1d:70:77:00:39:
ac:0a:56:4f:c6:ab:83:5c:d6:46:fe:4f:95:f4:8c:43:bc:32:
ee:13:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:33 2025 by rpki-client