Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Uc7M85cq3LlYmefoDfcx3raTPz8.roa
File: Uc7M85cq3LlYmefoDfcx3raTPz8.roa (raw, json)
Hash identifier: c6ekGNEqSbSnT0N/6IbuZCq7ic/L7+6rTQgUabbsUTE=
Subject key identifier: 51:CE:CC:F3:97:2A:DC:B9:58:99:E7:E8:0D:F7:31:DE:B6:93:3F:3F
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01831637DD9CC643275793F993ACE040D485
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Uc7M85cq3LlYmefoDfcx3raTPz8.roa
Signing time: Wed 07 Sep 2022 04:31:43 +0000
ROA not before: Wed 07 Sep 2022 04:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 194.31.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:37:dd:9c:c6:43:27:57:93:f9:93:ac:e0:40:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 7 04:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ceccf3972adcb95899e7e80df731deb6933f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:aa:1c:0c:31:4f:d0:7a:fe:bd:85:55:cc:
e3:36:49:0f:43:d8:b0:99:6b:e0:20:60:2c:5b:a5:
d7:1e:61:2a:6f:d6:a1:fa:fa:e5:71:ba:1d:78:11:
dd:57:78:b4:c8:95:6b:47:4a:27:d5:f1:04:a4:a8:
cb:3f:48:a7:1a:a5:c3:dc:28:b9:d5:a6:cd:fe:fc:
38:b2:3b:69:e4:0e:cb:e7:18:98:f5:e6:d5:25:2f:
70:47:3f:e2:5b:b7:ea:46:69:06:fb:eb:a6:24:a8:
01:f3:54:02:b9:65:9a:ba:c2:96:68:9d:f0:42:26:
38:99:10:b4:dc:ed:f8:2c:8b:3c:d8:3d:3c:1f:f7:
35:72:20:2b:5a:65:22:d8:14:4c:12:05:f2:58:38:
a1:a2:db:be:7e:f7:f3:ea:be:22:cd:c7:79:74:97:
e5:11:76:74:57:ca:49:29:33:70:06:e6:76:09:c1:
be:7f:95:23:7f:2f:7f:85:3a:d9:7c:be:99:53:69:
5e:f1:41:db:49:d0:83:0c:13:b8:0f:7a:74:eb:00:
0b:06:35:df:02:e9:73:8d:e0:37:62:35:a0:ba:d6:
72:80:29:36:36:0a:75:f8:e1:19:eb:b0:cb:d0:6c:
01:d4:a4:3e:67:f2:5f:e3:9e:01:90:8a:df:bb:b8:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:CC:F3:97:2A:DC:B9:58:99:E7:E8:0D:F7:31:DE:B6:93:3F:3F
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Uc7M85cq3LlYmefoDfcx3raTPz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:7e:83:dd:fc:3c:a7:5c:68:c5:d8:ab:03:15:c6:13:bd:
c2:9a:bd:27:e1:02:57:60:58:0f:f9:69:c0:53:1a:8b:b0:4a:
43:be:7a:66:97:c5:7b:6b:18:5e:e0:9b:59:14:f1:90:10:8e:
80:a5:6d:6a:1f:ea:89:51:9d:ae:99:10:cb:db:ad:e6:fc:1b:
8b:8e:c4:3b:25:2c:10:0b:77:15:0a:49:a4:16:32:20:32:d6:
d8:38:63:24:a3:4e:a4:a8:6b:69:6a:07:95:c2:9a:81:ec:43:
c9:2d:3c:4e:d4:8a:3b:64:b3:ad:68:42:a6:e9:03:96:0a:69:
60:cf:b3:8c:37:bd:a8:20:36:09:b3:18:3e:36:c4:0d:b2:6c:
4c:6d:db:16:00:72:e5:56:8b:c9:3f:bf:e7:02:38:7f:48:17:
6f:66:af:a8:27:dc:86:6a:2c:cd:bd:b4:99:9a:e0:6a:fb:d4:
e7:6a:e6:17:45:fb:8f:1d:38:88:1b:13:46:62:84:b3:f3:07:
fb:e5:e2:be:2c:6e:cd:5d:a8:61:41:59:8b:ca:eb:a4:fb:e1:
c4:66:62:94:bc:04:c9:66:df:cd:4e:6c:1e:8c:f9:78:5f:c6:
1d:ff:91:e3:44:85:22:e0:64:76:77:cc:d2:46:88:23:7c:b8:
be:d9:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:00 2025 by rpki-client