Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ugr5lOel3nhdLka22lMyHj38zi4.roa
File: ugr5lOel3nhdLka22lMyHj38zi4.roa (raw, json)
Hash identifier: BQQmk3R8Bz7TWmX21Elc4NArOXMuqB+WuLxAHkOUyLk=
Subject key identifier: BA:0A:F9:94:E7:A5:DE:78:5D:2E:46:B6:DA:53:32:1E:3D:FC:CE:2E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369CAA3E7E60A3F548658C6E8A9DE15
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ugr5lOel3nhdLka22lMyHj38zi4.roa
Signing time: Wed 01 Jan 2025 19:48:43 +0000
ROA not before: Wed 01 Jan 2025 19:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47122
IP address blocks: 193.22.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ca:a3:e7:e6:0a:3f:54:86:58:c6:e8:a9:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0af994e7a5de785d2e46b6da53321e3dfcce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:46:3f:89:b0:dc:c6:83:fe:a2:b3:92:00:
fe:6d:60:36:97:1d:2e:1d:98:36:ce:ad:e7:28:bd:
51:ff:9d:8d:3b:87:06:17:13:0f:61:8e:79:ba:d6:
3e:45:5a:ad:af:6d:c2:26:b2:26:d3:9f:7e:4b:fd:
97:7c:1f:81:31:d4:89:2f:40:60:f7:fa:27:c5:c7:
9b:84:bd:9a:9a:65:63:6f:1c:df:27:04:24:96:cf:
94:c5:3d:2b:ff:ce:42:0f:10:1b:22:14:35:a0:3e:
54:14:95:8f:a7:d5:17:a9:a8:bf:95:df:02:04:2c:
a1:ef:e2:46:4e:d0:9d:33:be:d9:73:de:13:cb:ec:
9b:d6:11:42:64:81:5a:c1:53:7c:a9:85:22:9b:f8:
71:c7:71:64:3c:6f:e4:89:0e:4d:16:e3:34:c5:d8:
ed:97:2a:fb:c7:d1:60:fb:10:4f:5d:a3:76:a7:ba:
1e:d8:12:d6:66:56:cf:35:fb:6c:ea:53:57:ca:02:
fe:41:7a:e8:4d:87:df:55:1b:4b:83:69:e0:23:2e:
52:b2:5d:02:d9:31:9b:36:51:ff:ce:28:1e:4b:71:
65:50:37:d8:ec:fd:4f:01:6f:28:b0:e8:49:c3:18:
fb:f3:4d:62:d2:41:43:5f:07:91:35:77:db:eb:8b:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:F9:94:E7:A5:DE:78:5D:2E:46:B6:DA:53:32:1E:3D:FC:CE:2E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ugr5lOel3nhdLka22lMyHj38zi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.228.0/24
Signature Algorithm: sha256WithRSAEncryption
09:18:41:8e:1c:d4:75:b6:97:fd:36:1f:cc:cb:50:d4:8c:f3:
dd:60:57:20:fa:b2:4a:fd:6b:54:cb:29:01:48:91:fc:c3:b8:
f3:6e:35:b3:68:14:05:96:af:3a:c1:06:0c:fb:4e:1b:5f:7c:
9b:1b:9e:b4:07:4f:9c:75:c6:c6:45:d5:eb:53:a8:88:9b:09:
7b:1b:eb:8d:c3:03:a0:79:41:e7:f0:56:0e:1f:e2:8c:fc:4c:
39:dd:7d:6f:cf:91:b3:11:55:1e:9f:e1:4d:ea:97:7a:cc:5f:
c2:24:2e:f3:43:c8:ab:a8:b8:f8:a5:dd:fd:41:db:4c:bc:98:
a9:58:c9:ad:3d:0a:85:5a:20:b2:05:0f:99:07:8e:0c:3b:0e:
bc:cc:3a:82:1d:f6:28:b3:a3:c6:d7:c0:da:20:eb:ed:34:85:
83:ba:e0:e4:13:cb:a0:db:bb:62:3a:43:bf:51:85:88:41:cc:
3e:05:06:e4:cd:b7:f1:b4:77:da:c1:4d:e5:45:af:49:2f:88:
bd:83:e6:5a:a8:98:15:e2:74:59:c8:b8:10:7a:ea:97:43:b8:
25:08:02:9e:f1:71:4e:0c:24:ca:90:16:21:c6:1a:5a:54:56:
bb:60:05:8d:cb:4d:27:eb:36:e9:87:4b:4a:5b:fe:19:ca:2c:
e8:6d:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:52 2025 by rpki-client