Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa
File: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (raw, json)
Hash identifier: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=
Subject key identifier: BA:03:1C:0E:FD:60:72:0B:17:85:44:DA:DA:F0:71:43:3A:42:2D:A2
Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial: 01941FFA87CF83FC36BF8F402D3EC5C09422
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28889
IP address blocks: 193.46.100.0/22 maxlen: 22
193.46.101.0/24 maxlen: 24
193.46.102.0/23 maxlen: 23
193.187.252.0/23 maxlen: 23
193.187.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:87:cf:83:fc:36:bf:8f:40:2d:3e:c5:c0:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba031c0efd60720b178544dadaf071433a422da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:70:d4:bb:b9:1f:1c:e6:52:10:1f:3a:55:
b8:3b:fd:d4:3b:88:93:cc:bc:56:5f:50:be:39:87:
91:77:47:5f:4a:5e:ea:25:3c:d2:c2:df:2f:cc:74:
c0:83:a2:99:46:30:d0:84:b6:17:60:4a:f5:b2:47:
77:93:1a:19:f1:35:c6:50:38:30:7f:cd:56:74:90:
90:a4:21:00:6e:b6:af:27:d3:bc:4b:d7:7a:c0:29:
92:47:04:7e:e7:ef:eb:8f:28:41:ef:9a:71:4a:fa:
5b:c8:7c:9d:c4:81:6e:76:4e:1d:37:ed:f1:0d:cf:
a3:f3:11:a3:3c:90:10:1a:75:44:18:24:7f:a2:0e:
38:6d:ee:b1:84:3a:67:a7:fd:f1:29:bc:67:95:16:
61:67:53:83:d7:49:eb:25:92:31:e8:54:bd:a9:fe:
03:9f:8e:93:87:29:5f:04:df:c3:f1:03:e7:0c:70:
70:93:90:ec:18:52:f9:31:de:a7:29:e6:ad:94:b9:
d6:80:da:6b:84:57:f9:24:f2:97:a0:6d:65:d0:cb:
8b:47:ad:43:ca:94:6d:6a:f2:f6:e7:d5:ca:24:d6:
de:59:a0:f4:0c:8e:b7:ed:f6:0f:04:1e:1e:f1:7d:
1c:9a:1f:15:a8:d0:1f:5a:70:dd:3a:08:16:dc:84:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:03:1C:0E:FD:60:72:0B:17:85:44:DA:DA:F0:71:43:3A:42:2D:A2
X509v3 Authority Key Identifier:
keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.100.0/22
193.187.252.0-193.187.254.255
Signature Algorithm: sha256WithRSAEncryption
21:8b:3c:f4:79:0b:de:21:9f:d3:7b:a7:bf:1b:fd:5c:54:e9:
18:de:34:32:37:b8:b1:07:0d:14:c8:a3:56:ea:e4:b2:1f:ef:
b9:f5:6a:f3:7a:75:ff:86:66:98:93:55:68:5a:4a:20:2c:5a:
68:18:b5:c5:d9:bf:41:84:79:dc:99:ac:31:0c:af:20:1d:5a:
72:43:aa:c3:67:68:bd:1a:f8:91:01:06:4b:3c:61:bc:84:f3:
ea:bc:41:69:69:c8:2a:96:3d:79:7b:df:c3:91:8e:f6:c3:fa:
1f:60:92:18:ca:4d:19:39:2a:83:d9:de:2d:e8:30:2c:d2:5a:
8f:83:ba:43:0a:d3:cc:81:ee:71:1e:ad:88:54:e6:9b:68:df:
5f:cb:ec:b3:39:d3:62:db:6d:ff:e4:cf:78:52:ff:72:f0:47:
69:7c:bb:cb:a3:41:6d:c7:d3:ec:bc:5e:4d:66:a7:03:ce:1d:
d8:93:cf:43:56:41:61:52:e6:5c:83:b1:16:e2:98:88:b4:5f:
db:ae:e5:f1:1f:d5:32:17:1b:4a:3f:8a:0e:68:f5:f1:e3:32:
1c:90:19:3b:26:3c:33:ad:0d:44:48:9f:e9:ef:5e:1c:d3:c0:
be:45:f1:25:e4:cf:aa:ae:b9:8c:68:42:0e:03:bb:d2:b2:3e:
85:95:8c:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:27 2025 by rpki-client