Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/UXzMFsylNOI_YT0FdMMlgIvcB8U.roa
File: UXzMFsylNOI_YT0FdMMlgIvcB8U.roa (raw, json)
Hash identifier: sTwN1iNQy02Trg9mPsrQnfv8l5kinXrqcYtMAUmzLLU=
Subject key identifier: 51:7C:CC:16:CC:A5:34:E2:3F:61:3D:05:74:C3:25:80:8B:DC:07:C5
Certificate issuer: /CN=e7e356fd885796e5d3fe3c4ab51a8c7fd2e8ae5c
Certificate serial: 0195BD66DE4E856B1459C5B6CAB623B26902
Authority key identifier: E7:E3:56:FD:88:57:96:E5:D3:FE:3C:4A:B5:1A:8C:7F:D2:E8:AE:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-NW_YhXluXT_jxKtRqMf9Lorlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/UXzMFsylNOI_YT0FdMMlgIvcB8U.roa
Signing time: Sat 22 Mar 2025 10:29:49 +0000
ROA not before: Sat 22 Mar 2025 10:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207936
IP address blocks: 194.124.235.0/24 maxlen: 24
2a0f:3cc0::/32 maxlen: 32
2a0f:3cc1::/32 maxlen: 32
2a0f:3cc2::/32 maxlen: 32
2a0f:3cc4::/32 maxlen: 32
2a0f:3cc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bd:66:de:4e:85:6b:14:59:c5:b6:ca:b6:23:b2:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e356fd885796e5d3fe3c4ab51a8c7fd2e8ae5c
Validity
Not Before: Mar 22 10:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=517ccc16cca534e23f613d0574c325808bdc07c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:c5:af:a6:58:41:98:da:d6:e6:fe:73:d2:
d6:ee:69:2b:a1:96:31:9e:78:6a:72:75:8d:20:b5:
91:ba:48:4a:da:d6:55:2f:9c:30:5a:f5:94:ec:b4:
5a:f6:20:2c:29:63:fc:2a:54:90:e2:49:1c:ce:0d:
40:a0:62:44:46:3e:fa:19:5f:fb:47:f6:20:e5:82:
b4:a6:6d:05:e8:bf:3a:a2:d6:aa:72:3d:df:ca:54:
b4:3c:6e:5c:fa:6b:fb:78:4f:83:da:8e:6d:c7:5e:
0e:6a:8b:d7:54:6f:35:39:90:a8:77:8d:74:dd:19:
b1:72:59:53:24:22:8c:64:7d:5a:c1:52:b9:1f:19:
6c:9a:3f:9e:52:5b:42:2e:1b:5f:7b:d2:03:72:97:
c8:b8:7a:53:8f:9d:23:ea:25:24:ff:d1:78:e1:f3:
2b:a5:b6:60:9c:96:74:29:88:5a:87:d6:65:62:6d:
af:70:6c:23:41:f8:fb:54:f4:08:12:09:ea:c6:7a:
88:46:0c:53:b7:75:0a:3e:6e:60:f3:ee:65:8c:c7:
26:bc:c0:2e:3e:e2:7f:0f:b7:11:24:2f:00:5b:85:
4c:88:21:2c:9a:e4:5a:ec:58:5e:3f:94:b5:23:b5:
a5:ea:53:dd:93:4c:90:b8:8c:7f:d8:20:2d:4e:e7:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:CC:16:CC:A5:34:E2:3F:61:3D:05:74:C3:25:80:8B:DC:07:C5
X509v3 Authority Key Identifier:
keyid:E7:E3:56:FD:88:57:96:E5:D3:FE:3C:4A:B5:1A:8C:7F:D2:E8:AE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-NW_YhXluXT_jxKtRqMf9Lorlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/UXzMFsylNOI_YT0FdMMlgIvcB8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e2891d-6652-4fc2-b992-1386f490b1bf/1/5-NW_YhXluXT_jxKtRqMf9Lorlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.235.0/24
IPv6:
2a0f:3cc0::-2a0f:3cc2:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3cc4::/31
Signature Algorithm: sha256WithRSAEncryption
14:32:2d:6c:51:f5:c2:5d:48:d0:9e:00:d9:41:6d:a8:29:be:
ee:8c:88:e0:b4:57:28:2d:61:f1:39:87:e5:20:f9:60:38:ab:
b2:1c:27:19:f0:16:98:b0:e4:21:14:e3:0f:32:a6:81:a6:66:
56:e9:8b:7e:54:07:23:a5:8f:c0:67:21:1f:b5:61:15:12:46:
ee:e6:b8:d8:71:d1:d4:fc:2e:63:82:cf:29:57:4e:7a:d7:45:
86:cd:05:2c:f1:6e:c8:9f:fa:1c:b6:fe:15:64:d9:5d:3b:bf:
8f:e1:4c:26:ec:93:bf:20:0a:cc:88:88:f3:21:5d:a4:b8:06:
18:db:11:b4:48:6c:ba:de:bb:09:cf:ad:71:48:3c:35:5d:70:
ff:dd:f0:51:a0:29:32:c7:f3:dd:04:86:5f:03:32:75:b8:7f:
1d:32:ee:af:17:25:54:34:9f:f1:49:e5:0e:07:cc:31:35:b2:
59:6d:64:18:bc:53:95:9e:0b:55:69:3f:f4:b2:54:18:0e:60:
36:03:f6:fd:3a:bc:ee:cb:75:3e:41:fe:a4:58:eb:7f:b7:10:
bf:08:7e:f6:d9:0d:df:5c:35:d4:c3:fc:9b:b6:70:b1:3e:27:
22:5e:d4:bf:94:6a:f9:4f:ca:5c:c8:5f:7a:2d:06:67:7a:a2:
5e:d6:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 14:32:54 2025 by rpki-client