Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa
File: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (raw, json)
Hash identifier: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=
Subject key identifier: B8:F3:CC:D5:CD:EA:68:33:DC:81:07:0C:38:C5:18:D5:49:C3:F1:BC
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019424B386115C49734E3CE07904037C2830
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa
Signing time: Thu 02 Jan 2025 01:48:52 +0000
ROA not before: Thu 02 Jan 2025 01:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133398
IP address blocks: 91.224.92.0/24 maxlen: 24
185.36.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:86:11:5c:49:73:4e:3c:e0:79:04:03:7c:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 2 01:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f3ccd5cdea6833dc81070c38c518d549c3f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:36:bc:67:e2:6c:59:99:4c:dc:f6:3f:6b:83:
f4:18:ad:01:5b:50:64:08:3b:db:e4:9a:87:90:a7:
c8:2e:64:e2:49:32:3a:8a:e1:92:03:e4:23:73:ac:
97:ce:06:26:f7:c0:06:bf:fc:ff:1a:c1:f7:f7:7f:
fc:8c:49:78:80:2c:a8:4f:5c:79:f6:d3:20:a1:50:
50:b9:09:9f:c2:8d:a8:b4:d3:8e:2d:37:a8:a6:82:
f0:c5:32:f1:6d:91:34:d3:74:a1:46:9e:c5:06:ef:
75:f3:08:bf:55:84:30:07:3e:01:61:5f:57:69:53:
65:c3:ad:45:50:7c:42:b5:88:0b:c8:64:96:8b:08:
58:51:b4:ca:19:cb:6c:98:46:2b:32:5b:07:75:32:
97:7a:72:0b:09:05:c5:aa:bc:8d:a1:59:cd:d9:7b:
c7:47:d7:fe:13:b5:16:e4:4e:8e:0c:9d:ec:2b:45:
09:34:3f:b5:9e:5f:5d:6a:3b:85:f5:0c:8b:1d:0a:
f3:c8:96:4b:14:bb:53:c1:11:00:3d:86:af:14:db:
44:54:92:9b:26:e0:3a:cc:d6:e2:51:44:c3:0b:af:
84:77:9d:15:4c:98:fa:0e:13:83:04:6a:15:55:a0:
92:39:a6:2f:d4:99:3a:03:f3:20:2c:e4:e9:88:59:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:CC:D5:CD:EA:68:33:DC:81:07:0C:38:C5:18:D5:49:C3:F1:BC
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.92.0/24
185.36.81.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c3:c7:d9:2d:85:4b:13:dc:6e:2c:13:9c:a5:c2:40:fe:e3:
4c:bc:e0:e3:90:05:9b:77:e6:56:38:0b:8c:09:90:64:69:10:
e8:e5:a9:9a:db:83:be:1c:17:44:c9:fa:cf:bf:8d:49:21:33:
2f:a4:a8:0b:fc:ab:cf:b8:d4:14:d8:de:8b:f2:4e:83:3c:22:
c7:fa:4c:1e:fe:b7:02:b6:6d:2d:1d:d6:d2:a9:e1:ef:91:fd:
79:37:39:49:05:3c:c9:b2:27:ad:e8:92:14:50:89:da:d2:04:
44:47:f5:93:40:d5:a3:e7:27:0b:0b:c7:2f:89:50:13:ab:98:
8d:80:62:79:98:0a:f4:7b:87:2e:b1:c7:ae:93:29:0a:f3:e8:
a5:ab:37:20:99:80:3d:1d:49:63:a9:e3:ff:b5:e8:03:70:3a:
a2:aa:4c:d6:7b:6d:5e:4c:2f:94:de:b1:14:9c:91:07:3e:95:
41:d3:84:47:cc:6e:c4:21:38:1d:34:0c:27:a1:7f:f5:d3:68:
01:68:90:d1:22:b1:ec:ac:7f:2b:30:f3:43:cb:ce:ae:20:69:
b3:4f:3b:5b:ac:a1:c2:70:62:db:03:ea:48:62:ef:54:fa:ba:
69:64:9b:af:78:88:b8:6d:20:d7:ab:d2:b6:79:2e:e4:cb:49:
9f:5a:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:23 2025 by rpki-client