Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa
File: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (raw, json)
Hash identifier: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=
Subject key identifier: B8:C1:CD:41:19:9F:07:19:5B:BD:92:C6:B6:34:F8:82:9E:24:83:63
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC31D31459AE59EA33C056E02FA146
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 79.143.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:31:d3:14:59:ae:59:ea:33:c0:56:e0:2f:a1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8c1cd41199f07195bbd92c6b634f8829e248363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:aa:18:d3:c0:db:ff:75:8b:92:93:8b:a6:
ec:27:88:75:a8:16:4c:bc:1d:84:7d:80:e3:50:da:
14:b3:e2:db:10:a6:48:b1:51:44:b3:27:cb:81:60:
58:f8:26:4d:b8:e6:40:dc:67:4f:23:55:30:bf:44:
02:f0:8b:7e:65:9e:02:24:d6:b2:6b:94:cf:34:4c:
56:71:df:d7:95:a9:63:5f:dc:d6:fb:7b:71:8e:0c:
53:48:f9:2c:c0:cf:0a:69:0c:ff:67:9b:04:0d:e8:
26:fc:6c:ba:14:ab:67:f1:52:aa:27:de:14:27:1a:
84:34:10:fc:e7:aa:2d:ef:3c:72:b8:d8:92:44:e3:
84:9b:b0:08:04:de:00:d5:8e:68:c7:06:df:d6:b6:
5c:ef:46:a6:39:bc:65:c3:62:eb:99:23:f4:2e:03:
fd:e4:b0:fe:72:2c:d2:de:ae:69:0c:8d:f5:07:49:
b2:6d:2d:ba:36:a9:12:08:bc:15:8a:98:5d:9c:8d:
e7:37:1b:11:87:0f:bf:c2:63:ea:ae:54:43:fb:14:
a1:94:5b:89:e3:29:29:91:d1:20:d3:0a:39:24:36:
f2:7a:44:ce:ec:23:8a:c3:b2:ae:48:63:18:4c:ff:
5e:46:be:7d:2b:90:47:c5:b2:ac:36:82:5a:7a:16:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:CD:41:19:9F:07:19:5B:BD:92:C6:B6:34:F8:82:9E:24:83:63
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:5b:92:2a:27:20:f4:e3:2c:eb:d1:32:9c:37:74:9d:ca:f8:
2c:d0:7d:70:42:65:41:b5:97:8b:d4:b1:9d:dd:a9:bc:8e:2e:
eb:53:a8:1f:fd:5b:6a:e1:22:af:a3:9f:31:52:60:eb:1d:b3:
9c:9c:d3:3c:c0:31:e6:51:1c:04:d9:bb:6b:13:33:6a:39:84:
36:f1:d4:04:6d:b7:e4:89:99:4b:cd:23:05:a2:bf:d7:3b:93:
24:26:bc:f4:bb:88:55:3c:b2:18:74:4e:f1:a0:be:ac:ca:50:
eb:c3:f5:41:c4:c3:c6:28:a8:58:bc:e0:46:c4:84:1d:a9:0e:
73:c3:c7:4b:c1:03:d2:e5:b4:12:86:db:4e:8d:b2:83:b2:8a:
93:bd:2c:d6:67:1d:a2:5d:2b:f8:de:37:3e:c5:0b:fd:cb:13:
c0:ea:86:3f:c8:be:cb:39:b2:05:fb:ed:86:16:34:6a:f8:85:
d2:b8:c8:e0:f9:50:07:86:72:af:ea:b9:78:2e:fa:8d:b3:25:
56:92:f0:c4:0e:b7:f7:2b:51:20:3d:49:b1:a6:a7:93:79:54:
20:5d:92:bf:47:61:ec:44:40:37:6e:b7:b4:dd:ac:a0:e1:86:
f9:15:f1:ec:58:47:6f:23:29:f8:1b:e7:a4:52:39:07:09:1b:
52:e8:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:33 2025 by rpki-client