Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/UKpd1Cb-_HoULcSPxdnbGGQoNLE.roa
File: UKpd1Cb-_HoULcSPxdnbGGQoNLE.roa (raw, json)
Hash identifier: kPH2ASW/BBTgyw0w5MgJ4Xy3rX3PXUYScgLla/blv80=
Subject key identifier: 50:AA:5D:D4:26:FE:FC:7A:14:2D:C4:8F:C5:D9:DB:18:64:28:34:B1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71B5E9FFF9FC173945ABBDD94F344
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/UKpd1Cb-_HoULcSPxdnbGGQoNLE.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200784
IP address blocks: 45.132.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1b:5e:9f:ff:9f:c1:73:94:5a:bb:dd:94:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50aa5dd426fefc7a142dc48fc5d9db18642834b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:b0:dc:03:de:13:af:5f:0c:81:83:b6:5b:
93:b2:2c:2c:3f:5e:54:2c:ad:96:fa:c4:98:d9:1f:
6c:b1:71:e3:31:6f:dd:95:af:c8:53:9c:4f:cc:f6:
53:05:55:d7:fc:3b:e5:8e:7a:60:dd:cc:ad:87:41:
11:85:8d:d4:62:b5:a1:7b:1d:2a:51:8e:07:71:b6:
5c:62:19:80:2e:e6:25:ae:8b:8d:55:74:f2:f8:e9:
b8:85:f7:27:50:50:28:83:a4:f7:a6:03:5f:df:b6:
3b:82:b8:55:dc:7c:ca:3a:f2:b3:d6:5b:7e:b5:1e:
4d:bb:c6:b3:d2:ae:ce:e9:f1:62:0b:86:ae:64:03:
05:ff:37:6e:ae:db:09:f2:22:53:cc:0f:20:d7:43:
22:74:d5:1a:c7:e8:09:55:88:9c:1f:dc:58:fa:67:
1a:13:1a:20:05:0b:21:48:17:c8:f5:62:f9:57:c6:
5d:c6:e2:b3:74:8b:98:5d:d4:9c:8d:e0:52:43:63:
8c:36:04:a8:d8:c3:46:bb:5b:69:82:a4:0f:40:6e:
86:45:4d:66:b7:c6:8d:46:3f:4d:2f:03:d6:62:ad:
d2:f8:f7:dd:e3:62:f5:57:29:78:ed:e3:65:0d:b0:
33:9e:bc:77:78:99:c3:f0:2b:9a:cb:6a:50:17:97:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:5D:D4:26:FE:FC:7A:14:2D:C4:8F:C5:D9:DB:18:64:28:34:B1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/UKpd1Cb-_HoULcSPxdnbGGQoNLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.255.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a8:c4:63:37:ae:69:5d:a6:b4:a2:05:2d:3b:1b:9a:04:40:
e4:a4:e3:0d:22:9f:a4:7f:44:dc:4a:01:32:87:86:d9:62:c4:
9b:c2:bc:cf:1c:83:04:7f:97:e1:1d:dc:23:35:0b:c4:9e:2d:
4b:00:75:ba:e7:8d:6d:26:fc:31:ce:00:99:55:6b:4b:96:e8:
94:59:d4:78:8a:ef:9d:13:25:66:c2:a3:c8:6a:e1:a2:65:b5:
53:c2:40:b7:2e:5e:79:c4:a7:8d:29:60:e4:a7:6c:c9:cb:32:
4c:d5:c5:1e:c7:81:6c:36:ca:2b:35:af:c8:4d:24:97:b4:a1:
09:91:d0:4b:4a:9f:0a:24:37:03:b1:8d:f1:17:dd:8a:70:47:
ed:6d:c5:88:c5:05:e4:ae:b3:16:4b:b3:d3:d3:a1:09:62:cf:
de:72:a6:25:65:13:3b:d1:6f:05:fb:e3:6d:64:e5:04:f1:32:
61:61:ab:cd:ad:20:f2:6b:00:b0:51:7b:2b:b8:79:ba:e9:d4:
d7:be:b8:12:e7:11:12:7c:3c:c3:5c:78:f3:39:cd:03:04:34:
00:80:1b:43:db:bb:6b:de:74:1e:ad:b2:38:85:22:8d:b1:9f:
60:e3:0d:4b:a2:06:14:b5:fe:43:a6:33:a4:55:b4:fd:f5:6a:
8d:71:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:04 2025 by rpki-client