Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa
File: Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa (raw, json)
Hash identifier: tW4x9q35fGyN7szhkcIsc2bCdWiIm3Cbi9TfrNnDMqw=
Subject key identifier: 53:3D:12:F8:F6:DC:B1:60:46:4F:D5:29:69:17:05:9C:85:B6:F9:B2
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0188E79C42510689403C06FF5C66145C9437
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa
Signing time: Fri 23 Jun 2023 09:35:57 +0000
ROA not before: Fri 23 Jun 2023 09:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.239.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:9c:42:51:06:89:40:3c:06:ff:5c:66:14:5c:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jun 23 09:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=533d12f8f6dcb160464fd5296917059c85b6f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:0b:1a:61:56:a3:29:96:0b:f0:16:2c:6e:
cb:4d:70:3b:2e:ae:fd:d7:bb:5b:96:ac:bb:f9:d1:
e0:51:d4:a3:ca:df:da:d2:d0:12:ba:d8:2e:cd:78:
73:36:0b:0e:0f:a7:da:b2:12:9e:01:54:af:67:4e:
07:6b:ec:5f:d0:9a:2c:d2:fd:4b:da:e5:f7:46:9b:
fb:2e:7a:3e:b8:dd:12:70:4c:83:11:3c:0a:b5:d8:
c6:77:55:f3:cd:43:f9:b2:6e:45:80:ec:57:c7:2a:
ac:05:02:33:55:46:79:66:bb:16:31:20:02:d2:31:
42:c4:c3:c6:00:c5:ca:eb:ee:16:5d:3f:55:ec:19:
46:03:55:11:5a:d9:38:f7:25:ad:5b:f0:2c:1b:43:
d0:c6:83:e8:92:26:c4:d3:bb:72:be:6b:4d:be:e0:
5d:ba:4e:94:07:89:35:5c:4a:bf:a2:bd:cc:96:15:
96:aa:54:3c:07:de:95:b8:7d:d2:05:4a:02:56:65:
03:30:b3:60:d5:bc:d3:8f:65:b8:26:9c:be:dc:5b:
e6:22:fd:bb:51:ec:6b:f0:cd:ab:35:50:c9:4b:4a:
fa:71:da:ec:08:d9:db:11:c3:9f:7e:84:63:e0:9f:
84:03:33:62:56:d4:f1:be:55:d1:ad:44:b5:46:aa:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:12:F8:F6:DC:B1:60:46:4F:D5:29:69:17:05:9C:85:B6:F9:B2
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.42.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a8:75:84:12:74:d4:d8:27:18:47:3b:4b:f7:42:1d:7b:a2:
ff:2e:2e:40:29:b6:0c:ff:39:b4:39:f9:93:e1:af:0c:f2:6b:
21:11:49:8a:f6:1f:ca:fe:cc:ee:c1:f5:15:33:11:da:06:01:
d4:95:9f:3e:fd:6b:4b:20:d6:db:84:ea:93:1c:de:30:4e:b6:
e1:ce:c3:db:d1:96:04:12:90:24:f9:67:93:33:52:3f:43:cb:
2b:b1:32:bf:54:da:cb:27:ba:e0:57:0f:8f:2c:a2:be:36:8a:
3b:46:de:9b:b9:81:e4:d5:fb:e7:16:2a:34:dc:ec:8e:9a:03:
cd:75:51:da:7d:43:0e:2f:4e:94:23:ef:37:4e:d9:90:32:84:
f1:d1:8e:0d:56:43:16:86:05:20:6d:6b:73:e6:9f:58:e0:a4:
37:0f:0f:93:f2:0b:c1:f0:ad:9d:91:c3:47:32:ba:6c:fa:f7:
fc:b8:74:67:45:80:03:5a:76:c4:90:27:24:92:11:34:49:6f:
20:f8:9b:30:14:4c:19:19:e5:a4:2e:50:d5:70:a8:fe:20:33:
f5:ac:b1:ab:3b:cd:38:9b:1d:b0:0e:03:7e:11:f6:5b:d7:1b:
af:8d:eb:a5:d6:be:bf:f6:a2:67:91:96:bd:9f:15:a9:c4:9d:
49:db:13:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:56 2025 by rpki-client