Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UMxscQW5LTyytQL9Caubp1u1g9o.roa
File: UMxscQW5LTyytQL9Caubp1u1g9o.roa (raw, json)
Hash identifier: JKVIgkcinY2AYVAN6rzRv8bLQoHK5Iz42a4taHu5NG8=
Subject key identifier: 50:CC:6C:71:05:B9:2D:3C:B2:B5:02:FD:09:AB:9B:A7:5B:B5:83:DA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282432B5660230FB5807100444CDA627
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UMxscQW5LTyytQL9Caubp1u1g9o.roa
Signing time: Thu 02 Jan 2025 17:50:48 +0000
ROA not before: Thu 02 Jan 2025 17:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272697
IP address blocks: 130.185.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:32:b5:66:02:30:fb:58:07:10:04:44:cd:a6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50cc6c7105b92d3cb2b502fd09ab9ba75bb583da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:7a:5e:b8:8b:d2:84:c3:bf:fb:1f:3b:36:
31:d4:8b:c0:90:44:be:ee:1e:59:9e:17:28:b9:9c:
83:86:d7:6f:fb:33:86:e1:d8:f2:ac:a9:80:d5:f2:
42:a4:7b:f3:79:e2:fd:af:04:56:86:de:3a:2e:6a:
f7:a6:99:b2:25:a7:7f:6b:91:bc:f7:22:5b:11:30:
0c:c4:99:42:f1:c3:c7:d6:07:6c:18:a4:3b:e1:00:
ee:52:cf:ce:c8:88:1b:a1:ce:30:25:4a:53:67:4b:
57:11:01:7c:9f:42:64:c1:af:90:80:0f:20:b1:80:
22:ca:a9:3d:ac:9a:56:a9:7f:ec:e2:ee:fe:d0:a1:
5d:47:17:ad:fd:01:7b:57:f1:4c:b3:c7:0d:f4:37:
4b:e3:76:8f:7d:43:f5:a6:d2:01:74:16:35:54:8f:
e7:5c:fe:00:55:1f:8f:b1:6d:ef:7f:05:e3:b4:2d:
67:eb:de:5f:12:2f:f9:2c:f4:28:6f:73:53:16:d5:
5d:5e:d0:42:9a:70:a8:8c:bd:4c:55:d5:23:71:e9:
6c:a0:32:95:f5:3c:b5:8a:51:69:92:1c:70:8c:58:
29:a0:29:cf:f5:f7:07:2e:e8:e3:df:7f:0a:9e:86:
ac:1b:70:57:4b:a8:57:10:2c:2a:0a:84:aa:50:78:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:6C:71:05:B9:2D:3C:B2:B5:02:FD:09:AB:9B:A7:5B:B5:83:DA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UMxscQW5LTyytQL9Caubp1u1g9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a6:ec:9e:83:3c:37:73:8a:d6:b9:a0:62:3d:89:66:cb:37:
54:0a:b2:8b:83:e2:9c:41:e8:a9:0f:3a:51:e6:ce:2d:a1:7c:
33:33:a8:58:a9:86:eb:80:02:77:95:ef:97:33:ef:3d:12:b1:
30:3e:9a:7b:85:9c:9f:a8:01:19:e1:52:56:a3:59:a5:b3:dc:
a9:51:d1:33:e3:f4:df:de:b8:fa:00:ab:a9:a5:46:2a:8e:8c:
9e:4f:94:c9:fd:51:75:a5:45:8f:35:7c:ad:7f:88:d1:2e:53:
da:23:f5:68:bd:09:f1:51:59:ae:d6:f0:7d:0c:05:a4:63:ec:
f3:35:a9:ff:4e:9e:1b:48:1e:09:83:ae:2e:49:30:81:9e:92:
16:f4:66:de:9e:1b:26:32:6d:b3:20:a9:0c:3e:07:08:09:93:
65:90:f0:e8:5e:41:1a:55:84:6c:96:7a:ba:a3:34:59:1a:df:
6a:f2:27:0d:82:19:e7:e2:2a:2f:31:35:5b:06:9b:99:08:f6:
06:50:3b:df:e7:96:1f:ca:b2:bc:69:06:43:79:48:40:50:f0:
9f:f2:c7:0a:38:49:33:32:c1:26:19:cd:d6:cb:15:4e:c6:4c:
b1:a4:f1:07:85:84:5b:a7:e6:f3:02:36:b0:2d:37:2d:81:12:
ca:05:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:18 2025 by rpki-client