Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/UQTJpCv9bdrUfH2Saww4hxPMkG8.roa
File: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (raw, json)
Hash identifier: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=
Subject key identifier: 51:04:C9:A4:2B:FD:6D:DA:D4:7C:7D:92:6B:0C:38:87:13:CC:90:6F
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 0194221F9689F6670BB1977D73199CF3AEBF
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/UQTJpCv9bdrUfH2Saww4hxPMkG8.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200357
IP address blocks: 194.104.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:89:f6:67:0b:b1:97:7d:73:19:9c:f3:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5104c9a42bfd6ddad47c7d926b0c388713cc906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:05:23:87:8f:12:12:f0:ed:20:1a:82:e1:
cb:1a:43:a6:15:8b:58:b9:89:3c:94:c2:6f:29:a0:
ef:13:e6:34:46:13:d7:08:c4:33:32:7d:56:e2:62:
87:f4:6c:bf:f7:53:a7:da:6a:af:91:17:0c:14:ad:
c3:7e:77:0d:b7:a9:73:b2:5d:a8:d0:0f:70:e8:91:
d8:b4:c8:35:26:74:f6:0f:d8:39:24:6a:09:79:3d:
d8:54:a6:f3:35:54:84:8c:de:0e:53:b4:0e:45:c9:
fe:2c:27:7f:3e:d4:a2:3d:f4:48:41:f7:43:5b:75:
c6:e1:52:46:1d:e7:94:d1:08:14:92:ba:18:b9:23:
45:82:7b:ef:26:0b:8a:83:70:0c:05:46:66:ee:97:
79:11:53:ff:11:40:94:3e:59:7c:37:e4:31:ca:e6:
85:67:67:30:ce:6c:79:db:90:82:62:01:1e:6f:55:
92:73:61:26:12:7d:38:e0:02:3f:c4:64:7a:d9:11:
3c:22:b5:62:66:17:4a:71:d2:dc:5e:77:5e:41:06:
f2:44:d9:22:98:70:25:3c:23:6d:e0:44:f3:b5:bb:
eb:0e:8f:66:71:2e:46:e3:29:2f:bf:19:18:fb:3c:
25:c6:cd:cd:5b:92:83:01:1f:c4:a8:2d:9d:8a:9a:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:C9:A4:2B:FD:6D:DA:D4:7C:7D:92:6B:0C:38:87:13:CC:90:6F
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/UQTJpCv9bdrUfH2Saww4hxPMkG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.20.0/22
Signature Algorithm: sha256WithRSAEncryption
55:26:bf:22:93:37:d0:cf:4d:2a:cd:c9:26:f2:58:f2:31:19:
93:62:9e:1c:85:a5:ac:3d:7a:fa:91:e6:b5:4b:ef:24:44:fd:
ba:8f:1f:e5:ab:04:f5:cf:16:8f:c5:82:63:de:17:49:11:78:
08:1e:96:0f:c2:f8:23:dc:35:d4:82:f3:96:92:61:e3:e0:c1:
f2:27:2a:82:3c:45:24:76:87:0c:81:d1:3d:2a:91:1b:cd:b6:
0b:9a:68:7e:40:ee:85:de:ae:66:a9:5d:34:ac:fd:e6:89:5c:
4b:1e:aa:f3:fa:c8:74:cd:4a:d4:84:df:e2:69:ed:4d:01:22:
49:71:df:bf:40:b6:83:e5:1c:59:e3:82:73:af:df:b1:a7:d0:
d9:c7:07:2c:b4:92:d9:fa:2a:d4:10:8b:8f:d3:62:63:9b:70:
1e:77:88:15:9b:55:5e:71:5a:e2:98:00:6a:4a:87:71:7e:60:
b5:01:80:d7:20:3a:97:18:ae:5f:dc:6d:c9:09:48:fb:c8:f6:
04:40:97:8e:aa:31:50:59:e7:7c:81:98:ff:d4:9b:1a:24:c6:
38:08:d7:0c:45:62:11:72:a0:95:10:b1:01:49:f0:38:e2:0e:
e6:a1:da:f8:91:2c:f4:cd:bd:01:1e:d3:ea:9b:6c:46:b0:be:
b8:be:fe:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:24 2025 by rpki-client